The following Fedora 27 Security updates need testing:
Age URL
16
https://bodhi.fedoraproject.org/updates/FEDORA-2017-15efa72a0c
docker-1.13.1-44.git584d391.fc27
13
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5dd9b12179
python-dulwich-0.18.6-1.fc27
12
https://bodhi.fedoraproject.org/updates/FEDORA-2017-913288e9a9
mongodb-3.4.10-1.fc27
9
https://bodhi.fedoraproject.org/updates/FEDORA-2017-d7c0748c1b pdns-4.1.0-1.fc27
9
https://bodhi.fedoraproject.org/updates/FEDORA-2017-14f5c6cdac
qpid-cpp-1.37.0-1.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-bc2edc421d tor-0.3.1.9-1.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-874bd165c0
perl-DBD-MySQL-4.043-6.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-b16cdbdc34
libvirt-3.7.0-3.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e56a2ddd09
optipng-0.7.6-5.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-cf7dede496
asterisk-14.7.3-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-677069c484
python26-2.6.9-10.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-99d12bf610
python35-3.5.4-2.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a95dd74301
shellinabox-2.20-5.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a41f6a8078
python34-3.4.7-2.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e6be32cb7a
nodejs-8.9.3-2.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2e5a17c4cc
python33-3.3.7-2.fc27
The following builds have been pushed to Fedora 27 updates-testing
GitPython-2.1.7-2.fc27
RemoteBox-2.4-1.fc27
ansible-lint-3.4.19-1.fc27
blueman-2.1-0.8.alpha2.fc27
devhelp-3.26.1-1.fc27
dnssec-trigger-0.15-1.fc27
evolution-3.26.3-1.fc27
evolution-data-server-3.26.3-1.fc27
evolution-ews-3.26.3-1.fc27
evolution-mapi-3.26.3-1.fc27
gst-editing-services-1.12.4-1.fc27
gstreamer1-1.12.4-1.fc27
gstreamer1-plugins-bad-free-1.12.4-1.fc27
gstreamer1-plugins-base-1.12.4-1.fc27
gstreamer1-plugins-good-1.12.4-1.fc27
gstreamer1-plugins-ugly-free-1.12.4-1.fc27
gstreamer1-rtsp-server-1.12.4-1.fc27
gstreamer1-vaapi-1.12.4-1.fc27
gtksourceview3-3.24.6-1.fc27
hplip-3.17.11-1.fc27
libsmbios-2.3.3-2.fc27
lirc-0.10.0-4.fc27
meson-0.44.0-1.fc27
modulemd-1.3.3-1.fc27
openssh-7.6p1-3.fc27
orc-0.4.28-1.fc27
pam_mysql-0.7-0.25.rc1.fc27
perl-Alien-pkgconf-0.10-14.fc27
perl-App-cpm-0.955-1.fc27
perl-Digest-SHA-6.00-1.fc27
perl-Dist-Zilla-Plugin-Git-2.043-1.fc27
perl-libwww-perl-6.31-1.fc27
php-cs-fixer-2.9.0-1.fc27
python-enum34-1.1.6-3.fc27
python-gstreamer1-1.12.4-1.fc27
python-sphinx-1.6.5-2.fc27
python33-3.3.7-2.fc27
qgis-2.18.15-1.fc27
robotfindskitten-2.7182818.701-1.fc27
rubygem-plist-3.4.0-1.fc27
tiptop-2.3.1-5.fc27
torrent-file-editor-0.3.9-1.fc27
vim-8.0.1386-1.fc27
vint-0.3.17-1.fc27
whois-5.2.19-1.fc27
xapian-bindings-1.4.4-6.fc27
Details about builds:
================================================================================
GitPython-2.1.7-2.fc27 (FEDORA-2017-cc5ba9a121)
Python Git Library
--------------------------------------------------------------------------------
Update Information:
Fix interaction with git 2.15
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1508639 - GitPython and git 2.15.0 don't play nicely
https://bugzilla.redhat.com/show_bug.cgi?id=1508639
[ 2 ] Bug #1520479 - fedpkg local and prep fail after latest stable updates.
https://bugzilla.redhat.com/show_bug.cgi?id=1520479
--------------------------------------------------------------------------------
================================================================================
RemoteBox-2.4-1.fc27 (FEDORA-2017-fd1ba64c0b)
Open Source VirtualBox Client with Remote Management
--------------------------------------------------------------------------------
Update Information:
Update to 2.4
--------------------------------------------------------------------------------
================================================================================
ansible-lint-3.4.19-1.fc27 (FEDORA-2017-80692f2b7a)
Best practices checker for Ansible
--------------------------------------------------------------------------------
Update Information:
Update to 3.4.19 version (#1524156)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1524156 - ansible-lint-3.4.19 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1524156
--------------------------------------------------------------------------------
================================================================================
blueman-2.1-0.8.alpha2.fc27 (FEDORA-2017-5722c2cd99)
GTK+ Bluetooth Manager
--------------------------------------------------------------------------------
Update Information:
Update to 2.1 alpha2
--------------------------------------------------------------------------------
================================================================================
devhelp-3.26.1-1.fc27 (FEDORA-2017-5a6aca0001)
API documentation browser
--------------------------------------------------------------------------------
Update Information:
devhelp 3.26.1 release. - Move New Tab button on the right side of the
headerbar - Updated translations
--------------------------------------------------------------------------------
================================================================================
dnssec-trigger-0.15-1.fc27 (FEDORA-2017-6fdbb08336)
Tool for dynamic reconfiguration of validating resolver Unbound
--------------------------------------------------------------------------------
Update Information:
- New upstream release 0.15
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1388055 - HTTP probe result length could not be longer than 2 characters
https://bugzilla.redhat.com/show_bug.cgi?id=1388055
--------------------------------------------------------------------------------
================================================================================
evolution-3.26.3-1.fc27 (FEDORA-2017-0e6f334789)
Mail and calendar client for GNOME
--------------------------------------------------------------------------------
Update Information:
Update to 3.26.3 release
--------------------------------------------------------------------------------
================================================================================
evolution-data-server-3.26.3-1.fc27 (FEDORA-2017-0e6f334789)
Backend data server for Evolution
--------------------------------------------------------------------------------
Update Information:
Update to 3.26.3 release
--------------------------------------------------------------------------------
================================================================================
evolution-ews-3.26.3-1.fc27 (FEDORA-2017-0e6f334789)
Evolution extension for Exchange Web Services
--------------------------------------------------------------------------------
Update Information:
Update to 3.26.3 release
--------------------------------------------------------------------------------
================================================================================
evolution-mapi-3.26.3-1.fc27 (FEDORA-2017-0e6f334789)
Evolution extension for MS Exchange 2007 servers
--------------------------------------------------------------------------------
Update Information:
Update to 3.26.3 release
--------------------------------------------------------------------------------
================================================================================
gst-editing-services-1.12.4-1.fc27 (FEDORA-2017-9354bcdc99)
Gstreamer editing services
--------------------------------------------------------------------------------
Update Information:
GStreamer bugfix release
--------------------------------------------------------------------------------
================================================================================
gstreamer1-1.12.4-1.fc27 (FEDORA-2017-9354bcdc99)
GStreamer streaming media framework runtime
--------------------------------------------------------------------------------
Update Information:
GStreamer bugfix release
--------------------------------------------------------------------------------
================================================================================
gstreamer1-plugins-bad-free-1.12.4-1.fc27 (FEDORA-2017-9354bcdc99)
GStreamer streaming media framework "bad" plugins
--------------------------------------------------------------------------------
Update Information:
GStreamer bugfix release
--------------------------------------------------------------------------------
================================================================================
gstreamer1-plugins-base-1.12.4-1.fc27 (FEDORA-2017-9354bcdc99)
GStreamer streaming media framework base plugins
--------------------------------------------------------------------------------
Update Information:
GStreamer bugfix release
--------------------------------------------------------------------------------
================================================================================
gstreamer1-plugins-good-1.12.4-1.fc27 (FEDORA-2017-9354bcdc99)
GStreamer plugins with good code and licensing
--------------------------------------------------------------------------------
Update Information:
GStreamer bugfix release
--------------------------------------------------------------------------------
================================================================================
gstreamer1-plugins-ugly-free-1.12.4-1.fc27 (FEDORA-2017-9354bcdc99)
GStreamer streaming media framework "ugly" plugins
--------------------------------------------------------------------------------
Update Information:
GStreamer bugfix release
--------------------------------------------------------------------------------
================================================================================
gstreamer1-rtsp-server-1.12.4-1.fc27 (FEDORA-2017-9354bcdc99)
GStreamer RTSP server library
--------------------------------------------------------------------------------
Update Information:
GStreamer bugfix release
--------------------------------------------------------------------------------
================================================================================
gstreamer1-vaapi-1.12.4-1.fc27 (FEDORA-2017-9354bcdc99)
GStreamer plugins to use VA API video acceleration
--------------------------------------------------------------------------------
Update Information:
GStreamer bugfix release
--------------------------------------------------------------------------------
================================================================================
gtksourceview3-3.24.6-1.fc27 (FEDORA-2017-f130524684)
A library for viewing source files
--------------------------------------------------------------------------------
Update Information:
gtksourceview 3.24.6 release. * New syntax highlighting definition file for:
logcat. * Improvements to the syntax highlighting of: Python and
reStructuredText. * Improvements to the Visual Studio builds. * Translation
updates.
--------------------------------------------------------------------------------
================================================================================
hplip-3.17.11-1.fc27 (FEDORA-2017-92f4062cf5)
HP Linux Imaging and Printing Project
--------------------------------------------------------------------------------
Update Information:
3.17.11
--------------------------------------------------------------------------------
================================================================================
libsmbios-2.3.3-2.fc27 (FEDORA-2017-fde6ebddb6)
Libsmbios C/C++ shared libraries
--------------------------------------------------------------------------------
Update Information:
Remove obsolete python-ctypes requires
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1399686 - libsmbios should not depend on python-ctypes
https://bugzilla.redhat.com/show_bug.cgi?id=1399686
--------------------------------------------------------------------------------
================================================================================
lirc-0.10.0-4.fc27 (FEDORA-2017-cdd0694ae2)
The Linux Infrared Remote Control package
--------------------------------------------------------------------------------
Update Information:
update f27 to f26 status, no new bugfixes
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1483330 - lirc is unable to create serial device lock
https://bugzilla.redhat.com/show_bug.cgi?id=1483330
[ 2 ] Bug #1514359 - F27 version lower than F26
https://bugzilla.redhat.com/show_bug.cgi?id=1514359
--------------------------------------------------------------------------------
================================================================================
meson-0.44.0-1.fc27 (FEDORA-2017-d36a93314d)
High productivity build system
--------------------------------------------------------------------------------
Update Information:
Update to 0.44.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1500248 - meson macros RFE: copy test log to stdout on failure
https://bugzilla.redhat.com/show_bug.cgi?id=1500248
--------------------------------------------------------------------------------
================================================================================
modulemd-1.3.3-1.fc27 (FEDORA-2017-fd1c87998d)
Module metadata manipulation library
--------------------------------------------------------------------------------
Update Information:
Preserve field ordering
https://pagure.io/modulemd/pull-request/58
--------------------------------------------------------------------------------
================================================================================
openssh-7.6p1-3.fc27 (FEDORA-2017-be30d29a15)
An open source implementation of SSH protocol version 2
--------------------------------------------------------------------------------
Update Information:
Do not segfault during audit cleanup (#1524233)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1524233 - OpenSSH 7.6p1 sshd segfaults when closing SSH connection
established w/ KiTTY 0.70.0.1 (Win)
https://bugzilla.redhat.com/show_bug.cgi?id=1524233
--------------------------------------------------------------------------------
================================================================================
orc-0.4.28-1.fc27 (FEDORA-2017-2c3d65ca48)
The Oil Run-time Compiler
--------------------------------------------------------------------------------
Update Information:
Update to 0.4.28
--------------------------------------------------------------------------------
================================================================================
pam_mysql-0.7-0.25.rc1.fc27 (FEDORA-2017-ffca4f8263)
PAM module for auth UNIX users using MySQL data base
--------------------------------------------------------------------------------
Update Information:
Link with mariadb library for my_make_scrambled_password.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1506858 - /usr/lib64/security/pam_mysql.so: undefined symbol:
my_make_scrambled_password
https://bugzilla.redhat.com/show_bug.cgi?id=1506858
[ 2 ] Bug #1493635 - Use mariadb-connector-c-devel instead of mysql-devel or
mariadb-devel
https://bugzilla.redhat.com/show_bug.cgi?id=1493635
--------------------------------------------------------------------------------
================================================================================
perl-Alien-pkgconf-0.10-14.fc27 (FEDORA-2017-3065f8791d)
Discover pkgconf and libpkgconf
--------------------------------------------------------------------------------
Update Information:
This release restores compatibility with pkgconf-1.3.12.
--------------------------------------------------------------------------------
================================================================================
perl-App-cpm-0.955-1.fc27 (FEDORA-2017-97cf066690)
Fast CPAN module installer
--------------------------------------------------------------------------------
Update Information:
Updated to the latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1524078 - perl-App-cpm-0.955 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1524078
--------------------------------------------------------------------------------
================================================================================
perl-Digest-SHA-6.00-1.fc27 (FEDORA-2017-3b004c0c49)
Perl extension for SHA-1/224/256/384/512
--------------------------------------------------------------------------------
Update Information:
This release adds BSD-styled output support to shasum tool. It also uses modern
XSLoader instead of DynaLoader for loading the module.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1523958 - perl-Digest-SHA-6.00 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1523958
--------------------------------------------------------------------------------
================================================================================
perl-Dist-Zilla-Plugin-Git-2.043-1.fc27 (FEDORA-2017-d3a8567df0)
Update your git repository after release
--------------------------------------------------------------------------------
Update Information:
This release corrects setting module version when being inherited. It also
removed dependency on File::HomeDir.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1524152 - perl-Dist-Zilla-Plugin-Git-2.043 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1524152
--------------------------------------------------------------------------------
================================================================================
perl-libwww-perl-6.31-1.fc27 (FEDORA-2017-aa84f58bcc)
A Perl interface to the World-Wide Web
--------------------------------------------------------------------------------
Update Information:
This release fixes run_handlers to allow assigning to the request and response.
It also removes private LWP::Protocol::MyFTP module from RPM provides that were
there by a mistake.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1523888 - perl-libwww-perl-6.30 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1523888
--------------------------------------------------------------------------------
================================================================================
php-cs-fixer-2.9.0-1.fc27 (FEDORA-2017-f1c1b68adb)
A tool to automatically fix PHP code style
--------------------------------------------------------------------------------
Update Information:
**Changelog for v2.9.0** * feature #3063 Method chaining indentation fixer
(boliev, julienfalque) * feature #3076 Add ExplicitStringVariableFixer
(Slamdunk, keradus) * feature #3098 MethodSeparationFixer - add class elements
separation options (SpacePossum, keradus) * feature #3155 Add
EscapeImplicitBackslashesFixer (Slamdunk) * feature #3164 Add
ExplicitIndirectVariableFixer (Slamdunk, keradus) * feature #3183
FinalInternalClassFixer introduction (keradus, SpacePossum) * feature #3187
StaticLambdaFixer - introduction (SpacePossum, keradus) * feature #3209
PhpdocAlignFixer - Make method alignable (ntzm) * feature #3275 Add
PhpUnitTestAnnotationFixer (BackEndTea, keradus) ---- **Changelog for v2.8.4**
* bug #3281 SelfAccessorFixer - stop modifying traits (kubawerlos) * minor #3195
Add self-update command test (julienfalque) * minor #3287 FileCacheManagerTest -
drop duplicated line (keradus) * minor #3292 PHPUnit - set memory limit (veewee)
* minor #3306 Token - better input validation (keradus) * minor #3310 Upgrade
PHP Coveralls (keradus)
--------------------------------------------------------------------------------
================================================================================
python-enum34-1.1.6-3.fc27 (FEDORA-2017-8ad215c4bc)
Backport of Python 3.4 Enum
--------------------------------------------------------------------------------
Update Information:
Fix ambiguous Python 2 dependency declarations
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1467115 - python-enum34: nothing provides python2-enum34
https://bugzilla.redhat.com/show_bug.cgi?id=1467115
--------------------------------------------------------------------------------
================================================================================
python-gstreamer1-1.12.4-1.fc27 (FEDORA-2017-9354bcdc99)
Python bindings for GStreamer
--------------------------------------------------------------------------------
Update Information:
GStreamer bugfix release
--------------------------------------------------------------------------------
================================================================================
python-sphinx-1.6.5-2.fc27 (FEDORA-2017-8ad215c4bc)
Python documentation generator
--------------------------------------------------------------------------------
Update Information:
Fix ambiguous Python 2 dependency declarations
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1467115 - python-enum34: nothing provides python2-enum34
https://bugzilla.redhat.com/show_bug.cgi?id=1467115
--------------------------------------------------------------------------------
================================================================================
python33-3.3.7-2.fc27 (FEDORA-2017-2e5a17c4cc)
Version 3.3 of the Python programming language
--------------------------------------------------------------------------------
Update Information:
Fix for CVE-2017-1000158
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1519605 - CVE-2017-1000158 python33: python: Integer overflow in
PyString_DecodeEscape results in heap-base buffer overflow [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1519605
--------------------------------------------------------------------------------
================================================================================
qgis-2.18.15-1.fc27 (FEDORA-2017-ff3cd09835)
A user friendly Open Source Geographic Information System
--------------------------------------------------------------------------------
Update Information:
https://github.com/qgis/QGIS/commits/release-2_18
--------------------------------------------------------------------------------
================================================================================
robotfindskitten-2.7182818.701-1.fc27 (FEDORA-2017-644e7b711a)
A game/zen simulation. You are robot. Your job is to find kitten.
--------------------------------------------------------------------------------
Update Information:
Update to 2.7182818.701. Lots of new non-kitten items!
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1297151 - update 2.7182818
https://bugzilla.redhat.com/show_bug.cgi?id=1297151
--------------------------------------------------------------------------------
================================================================================
rubygem-plist-3.4.0-1.fc27 (FEDORA-2017-0f96f74519)
All-purpose Property List manipulation library
--------------------------------------------------------------------------------
Update Information:
update to 3.4.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1523895 - rubygem-plist-3.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1523895
--------------------------------------------------------------------------------
================================================================================
tiptop-2.3.1-5.fc27 (FEDORA-2017-8097e38bf9)
Performance monitoring tool based on hardware counters
--------------------------------------------------------------------------------
Update Information:
Minor update that supersedes a patch maintained in dist-git, among other fixes.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1504432 - tiptop-2.3.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1504432
--------------------------------------------------------------------------------
================================================================================
torrent-file-editor-0.3.9-1.fc27 (FEDORA-2017-93b570eaf9)
Qt based GUI tool designed to create and edit .torrent files
--------------------------------------------------------------------------------
Update Information:
Bump to v0.3.9
--------------------------------------------------------------------------------
================================================================================
vim-8.0.1386-1.fc27 (FEDORA-2017-c82a06fdd3)
The VIM editor
--------------------------------------------------------------------------------
Update Information:
The newest upstream commit
--------------------------------------------------------------------------------
================================================================================
vint-0.3.17-1.fc27 (FEDORA-2017-f4af872128)
Lint tool for Vim script Language
--------------------------------------------------------------------------------
Update Information:
Update to 0.3.17
--------------------------------------------------------------------------------
================================================================================
whois-5.2.19-1.fc27 (FEDORA-2017-7d5a245a67)
Improved WHOIS client
--------------------------------------------------------------------------------
Update Information:
This release updates records for TLDs museum., dj., and id.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1524400 - whois-5.2.19 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1524400
--------------------------------------------------------------------------------
================================================================================
xapian-bindings-1.4.4-6.fc27 (FEDORA-2017-8ad215c4bc)
Bindings for the Xapian Probabilistic Information Retrieval Library
--------------------------------------------------------------------------------
Update Information:
Fix ambiguous Python 2 dependency declarations
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1467115 - python-enum34: nothing provides python2-enum34
https://bugzilla.redhat.com/show_bug.cgi?id=1467115
--------------------------------------------------------------------------------