The following Fedora 27 Security updates need testing:
Age URL
266
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1ec1cd6db3 bro-2.5.3-1.fc27
198
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8dc6395408
dpdk-17.08.2-1.fc27
161
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3b33f65b01
nodejs-brace-expansion-1.1.11-1.fc27
153
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a748acc219
unrtf-0.21.9-8.fc27
129
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f6ccdeb750
mailman-2.1.21-9.fc27
129
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc864bb9e1
openslp-2.0.0-15.fc27
87
https://bodhi.fedoraproject.org/updates/FEDORA-2018-21ffebf41c
tomcat-8.0.53-1.fc27
87
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e8533a3ef1
unixODBC-2.3.7-1.fc27
36
https://bodhi.fedoraproject.org/updates/FEDORA-2018-fc2ba807a6
xerces-c27-2.7.0-28.fc27
24
https://bodhi.fedoraproject.org/updates/FEDORA-2018-28ea2290ad
python33-3.3.7-3.fc27
12
https://bodhi.fedoraproject.org/updates/FEDORA-2018-56ec0ccd82 feh-2.28-1.fc27
9
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4c0b99a9eb
drupal7-7.60-2.fc27
9
https://bodhi.fedoraproject.org/updates/FEDORA-2018-60c74d2b16
php-Smarty2-2.6.31-2.fc27
9
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e9d1ec6dbc
lldpad-1.0.1-9.git036e314.fc27
9
https://bodhi.fedoraproject.org/updates/FEDORA-2018-fc3018b1bd
NetworkManager-1.8.8-2.fc27
9
https://bodhi.fedoraproject.org/updates/FEDORA-2018-41320b315a
python-requests-2.20.0-1.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-cca4732a99
thunderbird-60.3.0-1.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f3d995c6a8
icecast-2.4.4-1.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c73d257297
cabextract-1.9-1.fc27 libmspack-0.9.1-0.1.alpha.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-91ba32a0ff
subscription-manager-1.24.2-1.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5a1e2759aa pdns-4.1.5-1.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d05860129f
suricata-4.0.6-1.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f5ea6a9f81
postgresql-9.6.11-1.fc27
The following Fedora 27 Critical Path updates have yet to be approved:
Age URL
182
https://bodhi.fedoraproject.org/updates/FEDORA-2018-25d5c86330 libidn-1.34-2.fc27
mcabber-1.1.0-1.fc27.1 pidgin-2.13.0-1.fc27.1 python-slixmpp-1.3.0-5.fc27.1
142
https://bodhi.fedoraproject.org/updates/FEDORA-2018-200dba6b93
upower-0.99.8-1.fc27
106
https://bodhi.fedoraproject.org/updates/FEDORA-2018-05a68ea22e
geoclue2-2.4.11-1.fc27
87
https://bodhi.fedoraproject.org/updates/FEDORA-2018-20c3deae24
iproute-4.17.0-1.fc27
13
https://bodhi.fedoraproject.org/updates/FEDORA-2018-845c2b9bc6
highlight-3.47-1.fc27
9
https://bodhi.fedoraproject.org/updates/FEDORA-2018-653a7a63f1
pungi-4.1.30-1.fc27
9
https://bodhi.fedoraproject.org/updates/FEDORA-2018-41320b315a
python-requests-2.20.0-1.fc27
9
https://bodhi.fedoraproject.org/updates/FEDORA-2018-fc3018b1bd
NetworkManager-1.8.8-2.fc27
9
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6d5b4aca58
libssh-0.7.7-1.fc27
9
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e9d1ec6dbc
lldpad-1.0.1-9.git036e314.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2a541500c4 pcre2-10.32-4.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e093a9ce9c
hwdata-0.317-1.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-553390b29e
osinfo-db-20181101-1.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-cca4732a99
thunderbird-60.3.0-1.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-31e9aff03c pcre-8.42-5.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-60c60bb5ab
kernel-tools-4.18.17-100.fc27 kernel-headers-4.18.17-100.fc27 kernel-4.18.17-100.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6c6faa135b
selinux-policy-3.13.1-284.38.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9ead2a6776
firefox-63.0.1-5.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ce9924c3ba
libdnf-0.11.1-2.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-537a8330dc vim-8.1.513-2.fc27
The following builds have been pushed to Fedora 27 updates-testing
cacti-spine-1.1.38-2.fc27
dnf-plugin-ovl-0.0.2-1.20181107gitfd1a5a5.fc27
libb64-1.2-3.fc27
lollypop-0.9.612-1.fc27
perl-Net-UPnP-1.4.5-1.fc27
python-nilearn-0.4.2-2.fc27
python-petlink-0.3.2-1.fc27
python-simplewrap-0.3.3-1.fc27
swatch-3.2.3-24.fc27
xen-4.9.3-3.fc27
Details about builds:
================================================================================
cacti-spine-1.1.38-2.fc27 (FEDORA-2018-53f2e687cc)
Threaded poller for Cacti written in C
--------------------------------------------------------------------------------
Update Information:
- Initial cacti-spine release for Fedora Notes:
https://www.cacti.net/spine_info.php
--------------------------------------------------------------------------------
================================================================================
dnf-plugin-ovl-0.0.2-1.20181107gitfd1a5a5.fc27 (FEDORA-2018-1972ffffb3)
DNF plugin to work around overlayfs issues
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1646543 - Review Request: dnf-plugin-ovl - DNF plugin to work around
overlayfs issues
https://bugzilla.redhat.com/show_bug.cgi?id=1646543
--------------------------------------------------------------------------------
================================================================================
libb64-1.2-3.fc27 (FEDORA-2018-48c5becff8)
Tools for fast encoding/decoding data into and from a base64-encoded format
--------------------------------------------------------------------------------
Update Information:
New package!
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1645848 - Review Request: libb64 - A library for fast encoding/decoding data
into and from a base64-encoded format
https://bugzilla.redhat.com/show_bug.cgi?id=1645848
--------------------------------------------------------------------------------
================================================================================
lollypop-0.9.612-1.fc27 (FEDORA-2018-015cd9a595)
Music player for GNOME
--------------------------------------------------------------------------------
Update Information:
Update to 0.9.612-1
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 8 2018 Martin Gansser <martinkg(a)fedoraproject.org> - 0.9.612-1
- Update to 0.9.612
--------------------------------------------------------------------------------
================================================================================
perl-Net-UPnP-1.4.5-1.fc27 (FEDORA-2018-24c7f249d2)
Perl extension for UPnP
--------------------------------------------------------------------------------
Update Information:
This release fixes a fallback for deprecated
QueryStateVariable(PortMappingNumberOfEntries).
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 9 2018 Petr Pisar <ppisar(a)redhat.com> - 1:1.4.5-1
- 1.4.5 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1648308 - Upgrade perl-Net-UPnP to 1.4.5
https://bugzilla.redhat.com/show_bug.cgi?id=1648308
--------------------------------------------------------------------------------
================================================================================
python-nilearn-0.4.2-2.fc27 (FEDORA-2018-f50a900df5)
Python module for fast and easy statistical learning on NeuroImaging data
--------------------------------------------------------------------------------
Update Information:
New package!
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1647825 - Review Request: python-nilearn - Python module for fast and easy
statistical learning on NeuroImaging data
https://bugzilla.redhat.com/show_bug.cgi?id=1647825
--------------------------------------------------------------------------------
================================================================================
python-petlink-0.3.2-1.fc27 (FEDORA-2018-fc72346d60)
Decode and encode Petlink data streams (32 and 64 bit)
--------------------------------------------------------------------------------
Update Information:
New package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1648251 - Review Request: python-petlink - Decode and encode Petlink data
streams (32 and 64 bit)
https://bugzilla.redhat.com/show_bug.cgi?id=1648251
--------------------------------------------------------------------------------
================================================================================
python-simplewrap-0.3.3-1.fc27 (FEDORA-2018-7c8572c871)
Easy to use wrappers generator for C libraries based on ctypes
--------------------------------------------------------------------------------
Update Information:
- Update to latest upstream release with complete py3 support
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 9 2018 Ankur Sinha <ankursinha AT fedoraproject DOT org> - 0.3.3-1
- Update to latest release
- Disable py2 on F30+
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.0-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 0.3.0-9
- Rebuilt for Python 3.7
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.0-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
swatch-3.2.3-24.fc27 (FEDORA-2018-269aba4cf7)
Tool for actively monitoring log files
--------------------------------------------------------------------------------
Update Information:
Apply fix for mail command for addresses with '@'.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 8 2018 Tom Callaway <spot(a)fedoraproject.org> - 3.2.3-24
- fix @ handling in mail (bz1646480)
* Wed Oct 3 2018 Tom Callaway <spot(a)fedoraproject.org> - 3.2.3-23
- more cleanups, see bz1622187 for details
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1646480 - mail command gives error for addresses with '@' in them.
https://bugzilla.redhat.com/show_bug.cgi?id=1646480
--------------------------------------------------------------------------------
================================================================================
xen-4.9.3-3.fc27 (FEDORA-2018-fe24359b69)
Xen is a virtual machine monitor
--------------------------------------------------------------------------------
Update Information:
guest use of HLE constructs may lock up host [XSA-282]
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 6 2018 Michael Young <m.a.young(a)durham.ac.uk> - 4.9.3-3
- guest use of HLE constructs may lock up host [XSA-282]
* Thu Oct 25 2018 Michael Young <m.a.young(a)durham.ac.uk> - 4.9.3-2
- x86: Nested VT-x usable even when disabled [XSA-278, CVE-2018-18883]
(#1643118)
--------------------------------------------------------------------------------