The following Fedora 27 Security updates need testing:
Age URL
40 https://bodhi.fedoraproject.org/updates/FEDORA-2017-d270e932a3
nagios-4.3.4-3.fc27
19 https://bodhi.fedoraproject.org/updates/FEDORA-2017-9fd430dba0
wireshark-2.4.2-1.fc27
10 https://bodhi.fedoraproject.org/updates/FEDORA-2017-8db9c497f9
qemu-2.10.1-1.fc27
9 https://bodhi.fedoraproject.org/updates/FEDORA-2017-baeedefe13
seamonkey-2.49.1-1.fc27
9 https://bodhi.fedoraproject.org/updates/FEDORA-2017-cc316727f5
modulemd-1.3.2-1.fc27
4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-9cac2b8b4a
fedpkg-1.30-1.fc27 rpkg-1.51-1.fc27
4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-46e8bdccef
php-7.1.11-1.fc27
4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ebb76fc3c9
tomcat-8.0.47-1.fc27
4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-48368de8c9
apr-1.6.3-1.fc27
2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-9e28c78e07
community-mysql-5.7.20-1.fc27
2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-98a361c2b5
java-9-openjdk-9.0.1.11-1.fc27
0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ea254105cc
kernel-4.13.10-300.fc27
0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-c2729c23b0
ansible-2.4.1.0-2.fc27
0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-f293e717e2
wordpress-4.8.3-1.fc27
The following builds have been pushed to Fedora 27 updates-testing
R-commonmark-1.4-1.fc27
SDL2_image-2.0.2-2.fc27
beignet-1.3.2-1.fc27
bind99-9.9.11-3.fc27
ccdciel-0.9.11-1.605svn.fc27
clinfo-2.2.17.10.25-1.fc27
entr-3.9-1.fc27
fedora-release-notes-27.01-1.fc27
gnome-todo-3.26.2-1.fc27
gnome-tweak-tool-3.26.3-2.fc27
golang-github-patrickmn-go-cache-2.1.0-1.fc27
golang-github-xtaci-smux-1.0.6-1.fc27
gphoto2-2.5.15-1.fc27
libgphoto2-2.5.16-1.fc27
libstoragemgmt-1.6.1-1.fc27
mdds-1.3.0-1.fc27
micropython-1.9.3-1.fc27
mimedefang-2.83-1.fc27
mock-1.4.7-1.fc27
mpdris2-0.7-5.20171028git3c3fe12.fc27
nodejs-8.9.0-1.fc27
pakiti-3.0.2-1.fc27
perl-Alien-pkgconf-0.10-13.fc27
perl-CGI-4.37-1.fc27
pkgconf-1.3.10-1.fc27
pop-gtk-theme-2.2.3.0-1.fc27
postfix-3.2.4-1.fc27
python-mpd2-0.5.5-3.fc27
python-ndjson-testrunner-1.0.0-1.fc27
python2-2.7.14-1.fc27
roundcubemail-1.3.2-1.fc27
scap-security-guide-0.1.36-1.fc27
system-storage-manager-0.5-0.fc27
wordpress-4.8.3-1.fc27
wpa_supplicant-2.6-12.fc27
zint-2.6.2-1.fc27
Details about builds:
================================================================================
R-commonmark-1.4-1.fc27 (FEDORA-2017-37612d34a8)
High Performance CommonMark and Github Markdown Rendering in R
--------------------------------------------------------------------------------
Update Information:
Initial package of commonmark for R.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1507774 - Review Request: R-commonmark - High Performance
CommonMark and Github Markdown Rendering in R
https://bugzilla.redhat.com/show_bug.cgi?id=1507774
--------------------------------------------------------------------------------
================================================================================
SDL2_image-2.0.2-2.fc27 (FEDORA-2017-a6b7cb4d20)
Image loading library for SDL
--------------------------------------------------------------------------------
Update Information:
Update to 2.0.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1508228 - SDL2_image-2.0.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1508228
--------------------------------------------------------------------------------
================================================================================
beignet-1.3.2-1.fc27 (FEDORA-2017-45e1576bc8)
Open source implementation of the OpenCL for Intel GPUs
--------------------------------------------------------------------------------
Update Information:
- Add some Gemini Lake devices support. - Add cl_intel_required_subgroup_size
extension support. - Fix some other bugs.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1508176 - beignet-1.3.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1508176
--------------------------------------------------------------------------------
================================================================================
bind99-9.9.11-3.fc27 (FEDORA-2017-b0f6ce0915)
The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) libraries
--------------------------------------------------------------------------------
Update Information:
Fix dynamic symbols conflict with ldap (#1205168)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1205168 - dhcp not working with ldap configuration
https://bugzilla.redhat.com/show_bug.cgi?id=1205168
--------------------------------------------------------------------------------
================================================================================
ccdciel-0.9.11-1.605svn.fc27 (FEDORA-2017-fc9ca90955)
CCD capture software
--------------------------------------------------------------------------------
Update Information:
Update to 0.9.11
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1497001 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1497001
--------------------------------------------------------------------------------
================================================================================
clinfo-2.2.17.10.25-1.fc27 (FEDORA-2017-4b808040cb)
Enumerate OpenCL platforms and devices
--------------------------------------------------------------------------------
Update Information:
Update to 2.2.17.10.25
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1507124 - clinfo-2.2.17.10.25 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1507124
--------------------------------------------------------------------------------
================================================================================
entr-3.9-1.fc27 (FEDORA-2017-b479aa0ca3)
Run arbitrary commands when files change
--------------------------------------------------------------------------------
Update Information:
New upstream release: * Run the command when spacebar is pressed * Fix use of
poll(2) to avoid possible busy-loop on Linux
--------------------------------------------------------------------------------
================================================================================
fedora-release-notes-27.01-1.fc27 (FEDORA-2017-f1d9edde16)
Release Notes
--------------------------------------------------------------------------------
Update Information:
Update release notes for F27
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1506052 - Package build of official release notes required for
Fedora 27 Final
https://bugzilla.redhat.com/show_bug.cgi?id=1506052
[ 2 ] Bug #1485651 - fedora-release-notes on F26 have a higher version than
f27
https://bugzilla.redhat.com/show_bug.cgi?id=1485651
--------------------------------------------------------------------------------
================================================================================
gnome-todo-3.26.2-1.fc27 (FEDORA-2017-f8753bfa86)
Personal task manager for GNOME
--------------------------------------------------------------------------------
Update Information:
Update to 3.26.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1508187 - gnome-todo-3.26.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1508187
--------------------------------------------------------------------------------
================================================================================
gnome-tweak-tool-3.26.3-2.fc27 (FEDORA-2017-a9a604f014)
A tool to customize advanced GNOME 3 options
--------------------------------------------------------------------------------
Update Information:
Add dependency on Nautilus (see [GNOME Bugzilla
#788685](https://bugzilla.gnome.org/show_bug.cgi?id=788685))
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1473049 - gnome-tweak-tool-3.26.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1473049
--------------------------------------------------------------------------------
================================================================================
golang-github-patrickmn-go-cache-2.1.0-1.fc27 (FEDORA-2017-5cd4cef969)
An in-memory key:value store/cache library for Go (Golang)
--------------------------------------------------------------------------------
Update Information:
Update to upstream release 2.1.0: * Add SetDefault(k string, x interface{}) for
setting with the default expiration value * Add GetWithExpiration(k string)
(interface{}, time.Time, bool) for getting both the value and expiration time
(thanks Alex Edwards) * Fix janitor data race (thanks Vivian Mathews)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1508200 - golang-github-patrickmn-go-cache-2.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1508200
--------------------------------------------------------------------------------
================================================================================
golang-github-xtaci-smux-1.0.6-1.fc27 (FEDORA-2017-15e4bcda1f)
Simple Stream Multiplexing for golang
--------------------------------------------------------------------------------
Update Information:
Update to version 1.0.6.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1508244 - golang-github-xtaci-smux-v1.0.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1508244
--------------------------------------------------------------------------------
================================================================================
gphoto2-2.5.15-1.fc27 (FEDORA-2017-79e5d3c217)
Software for accessing digital cameras
--------------------------------------------------------------------------------
Update Information:
Update gphoto2 and libgphoto2 to latest releases
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1498059 - gphoto2-2_5_15 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1498059
[ 2 ] Bug #1497874 - libgphoto2-2.5.16 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1497874
--------------------------------------------------------------------------------
================================================================================
libgphoto2-2.5.16-1.fc27 (FEDORA-2017-79e5d3c217)
Library for accessing digital cameras
--------------------------------------------------------------------------------
Update Information:
Update gphoto2 and libgphoto2 to latest releases
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1498059 - gphoto2-2_5_15 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1498059
[ 2 ] Bug #1497874 - libgphoto2-2.5.16 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1497874
--------------------------------------------------------------------------------
================================================================================
libstoragemgmt-1.6.1-1.fc27 (FEDORA-2017-dd7ccff55e)
Storage array management library
--------------------------------------------------------------------------------
Update Information:
Upgrade to 1.6.1 ---- Upgrade to version 1.6.0: * New error number for
deleting volume/fs with child dependency: * C:
`LSM_ERR_HAS_CHILD_DEPENDENCY` * Python:
`lsm.ErrorNumber.HAS_CHILD_DEPENDENCY` * Fix incorrect SCSI VPD query for 0x89
and 0xb1. * Fix regression on using libstoragemgmt with pywbem 0.7.0. *
Updates on manpage and help message of lsmcli.
--------------------------------------------------------------------------------
================================================================================
mdds-1.3.0-1.fc27 (FEDORA-2017-29b6fb5234)
A collection of multi-dimensional data structures and indexing algorithms
--------------------------------------------------------------------------------
Update Information:
new upstream release
--------------------------------------------------------------------------------
================================================================================
micropython-1.9.3-1.fc27 (FEDORA-2017-0da2a9d81a)
Implementation of Python 3 with very low memory footprint
--------------------------------------------------------------------------------
Update Information:
Update to
[1.9.3](https://github.com/micropython/micropython/releases/tag/v1.9.3)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1508424 - micropython-v1.9.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1508424
--------------------------------------------------------------------------------
================================================================================
mimedefang-2.83-1.fc27 (FEDORA-2017-60700be746)
E-Mail filtering framework using Sendmail's Milter interface
--------------------------------------------------------------------------------
Update Information:
MIMEDefang 2.83 =============== * mimedefang.pl: Do not add a Message-ID:
header when handing a message to SpamAssassin if the original message lacks such
a header. * Add systemd unit files; thanks to Richard Laager. Downstream
comment: No impact or change, Fedora and EPEL packages are using optimized
systemd unit files already since MIMEDefang 2.78 (January 2016) * Minor
tweaks to the sample filter. * mimedefang-multiplexor: Change the maxLifetime
option to kick in only once a worker has processed at least one request; also
check for exceeded lifetimes during the periodic idle-time check. *
mimedefang-multiplexor: Fix an exit(EXIT_FAILURE) to be exit(EXIT_SUCCESS) in on
place.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1508217 - mimedefang-2.83 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1508217
--------------------------------------------------------------------------------
================================================================================
mock-1.4.7-1.fc27 (FEDORA-2017-22f9473ef7)
Builds packages inside chroots
--------------------------------------------------------------------------------
Update Information:
* There is a new option in config `config_opts['chrootgroup']`, which allows you
to change name of group inside of chroot. * Any key for `config_opts` you
specify with 'bootstrap_*' will be copied to bootstrap config e.g.,
`config_opts['bootstrap_system_yum_command'] = '/usr/bin/yum-deprecated'` will
become `config_opts['system_yum_command'] = '/usr/bin/yum-deprecated'` for
bootstrap config. * There are three new default:
config_opts['bootstrap_chroot_additional_packages'] = []
config_opts['bootstrap_module_enable'] = []
config_opts['bootstrap_module_install'] = [] This will not install any
additional packages or modules into bootstrap chroot. * Mock now recognize
DeskOS. * Previously when `config_opts['rpmbuild_networking']` was enabled we
passed `--private-network` to systemd-nspawn. However that lead there was no
default route. And you cannot bind() UDP socket to all IP addresses and then
join multicast group, without having default route. Now we do onot add
`--private-network` to systemd-nspawn, instead we setup network namespace
ourselves and we also add default route pointing to loopback interface (only
interface in the new namespace). This feature introduce new dependency on
pyroute2. Bugfixes: * Delete rootdir as well when calling clean. In case one
overrides the rootdir option, and the rootdir is located outside of basedir, it
was not cleaned up when calling --clean. Fix this case by checking if the
rootdir is outside basedir. If that is the case, run an extra rmtree() on it. *
Choose good symbolic link of default.cfg on Mageia. * Ccache is now mounted to
/var/tmp as /tmp gets over-mounted with tmpfs when system-nspawn is used. *
Output of `--debug-config` is now sorted. * Use primary key for Fedora 27+ on
s390x.
--------------------------------------------------------------------------------
================================================================================
mpdris2-0.7-5.20171028git3c3fe12.fc27 (FEDORA-2017-7cbd10475c)
Provide MPRIS 2 support to mpd
--------------------------------------------------------------------------------
Update Information:
- New package - python-mpd2 - mpdris2 updated to use this
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1507235 - Review Request: python-mpd2 - Python library providing a
client interface for MPD
https://bugzilla.redhat.com/show_bug.cgi?id=1507235
[ 2 ] Bug #1404618 - mpdris2: Switch to Python 3
https://bugzilla.redhat.com/show_bug.cgi?id=1404618
[ 3 ] Bug #1389586 - mpdris2 should depend on python-mutagen
https://bugzilla.redhat.com/show_bug.cgi?id=1389586
--------------------------------------------------------------------------------
================================================================================
nodejs-8.9.0-1.fc27 (FEDORA-2017-b1c759aafe)
JavaScript runtime
--------------------------------------------------------------------------------
Update Information:
* Update to 8.9.0 * Drop some patches now carried upstream
https://github.com/nodejs/node/blob/v8.9.0/doc/changelogs/CHANGELOG_V8.md#8.9.0
--------------------------------------------------------------------------------
================================================================================
pakiti-3.0.2-1.fc27 (FEDORA-2017-cf3b307ea6)
Patching status monitoring tool
--------------------------------------------------------------------------------
Update Information:
* new upstream release
--------------------------------------------------------------------------------
================================================================================
perl-Alien-pkgconf-0.10-13.fc27 (FEDORA-2017-6d5f115965)
Discover pkgconf and libpkgconf
--------------------------------------------------------------------------------
Update Information:
* Bug fixes: - ensure we work on a zeroed buffer prior to calling
`realpath(2)` with it - fix path deduplication edge case when `cache-inodes`
feature is unavailable - fix path rewriting regression with
`PKG_CONFIG_SYSROOT_DIR` when `PKG_CONFIG_SYSROOT_DIR` is set to `/`
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1508420 - pkgconf-1.3.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1508420
--------------------------------------------------------------------------------
================================================================================
perl-CGI-4.37-1.fc27 (FEDORA-2017-fd6cd0c897)
Handle Common Gateway Interface requests and responses
--------------------------------------------------------------------------------
Update Information:
Updated to the latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1508409 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1508409
--------------------------------------------------------------------------------
================================================================================
pkgconf-1.3.10-1.fc27 (FEDORA-2017-6d5f115965)
Package compiler and linker metadata toolkit
--------------------------------------------------------------------------------
Update Information:
* Bug fixes: - ensure we work on a zeroed buffer prior to calling
`realpath(2)` with it - fix path deduplication edge case when `cache-inodes`
feature is unavailable - fix path rewriting regression with
`PKG_CONFIG_SYSROOT_DIR` when `PKG_CONFIG_SYSROOT_DIR` is set to `/`
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1508420 - pkgconf-1.3.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1508420
--------------------------------------------------------------------------------
================================================================================
pop-gtk-theme-2.2.3.0-1.fc27 (FEDORA-2017-7fd49de960)
Version 2 of the Pop GTK+ Theme
--------------------------------------------------------------------------------
Update Information:
Bump 2.2.3.0 release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1507015 - update
https://bugzilla.redhat.com/show_bug.cgi?id=1507015
[ 2 ] Bug #1505197 - pop-gtk-theme-2.2.0-0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1505197
--------------------------------------------------------------------------------
================================================================================
postfix-3.2.4-1.fc27 (FEDORA-2017-da9c8a283b)
Postfix Mail Transport Agent
--------------------------------------------------------------------------------
Update Information:
This is new version of postfix.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1508234 - postfix-3.2.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1508234
--------------------------------------------------------------------------------
================================================================================
python-mpd2-0.5.5-3.fc27 (FEDORA-2017-7cbd10475c)
Python library providing a client interface for MPD
--------------------------------------------------------------------------------
Update Information:
- New package - python-mpd2 - mpdris2 updated to use this
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1507235 - Review Request: python-mpd2 - Python library providing a
client interface for MPD
https://bugzilla.redhat.com/show_bug.cgi?id=1507235
[ 2 ] Bug #1404618 - mpdris2: Switch to Python 3
https://bugzilla.redhat.com/show_bug.cgi?id=1404618
[ 3 ] Bug #1389586 - mpdris2 should depend on python-mutagen
https://bugzilla.redhat.com/show_bug.cgi?id=1389586
--------------------------------------------------------------------------------
================================================================================
python-ndjson-testrunner-1.0.0-1.fc27 (FEDORA-2017-ce848c555e)
A test runner that outputs newline delimited JSON results
--------------------------------------------------------------------------------
Update Information:
Initial package of ndjson-testrunner for Python.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1507704 - Review Request: python-ndjson-testrunner - A test runner
that outputs newline delimited JSON results
https://bugzilla.redhat.com/show_bug.cgi?id=1507704
--------------------------------------------------------------------------------
================================================================================
python2-2.7.14-1.fc27 (FEDORA-2017-53602db43f)
An interpreted, interactive, object-oriented programming language
--------------------------------------------------------------------------------
Update Information:
Update to version 2.7.14
--------------------------------------------------------------------------------
================================================================================
roundcubemail-1.3.2-1.fc27 (FEDORA-2017-a93039e233)
Round Cube Webmail is a browser-based multilingual IMAP client
--------------------------------------------------------------------------------
Update Information:
Update to 1.3.2 with various bugfixes. See:
https://github.com/roundcube/roundcubemail/releases/tag/1.3.2 for full details.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1508242 - roundcubemail-1.3.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1508242
--------------------------------------------------------------------------------
================================================================================
scap-security-guide-0.1.36-1.fc27 (FEDORA-2017-c1fb7864ad)
Security guidance and baselines in SCAP formats
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream SCAP-Security-Guide-0.1.36 release:
--------------------------------------------------------------------------------
================================================================================
system-storage-manager-0.5-0.fc27 (FEDORA-2017-192c64c5c4)
A single tool to manage your storage
--------------------------------------------------------------------------------
Update Information:
New upstream stable version 0.5
--------------------------------------------------------------------------------
================================================================================
wordpress-4.8.3-1.fc27 (FEDORA-2017-f293e717e2)
Blog tool and publishing platform
--------------------------------------------------------------------------------
Update Information:
Update to wordpress 4.8.3. See:
https://wordpress.org/news/2017/10/wordpress-4-8-3-security-release/ for details
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1508255 - wordpress-4.8.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1508255
--------------------------------------------------------------------------------
================================================================================
wpa_supplicant-2.6-12.fc27 (FEDORA-2017-daa452ea9d)
WPA/WPA2/IEEE 802.1X Supplicant
--------------------------------------------------------------------------------
Update Information:
The update * fixes crash when using MACsec without macsec.ko loaded - rh
#1497640 * enables Fast BSS Transition - rh #1372928
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1497640 - wpa_supplicant segfaults when 'driver_macsec_linux' is
used, macsec.ko is not loaded and EAPOL packet is received
https://bugzilla.redhat.com/show_bug.cgi?id=1497640
[ 2 ] Bug #1372928 - compiled without 802.11r fast roaming
https://bugzilla.redhat.com/show_bug.cgi?id=1372928
--------------------------------------------------------------------------------
================================================================================
zint-2.6.2-1.fc27 (FEDORA-2017-c8f693cba3)
Barcode generator library
--------------------------------------------------------------------------------
Update Information:
This is a bugfix release with the following changes/additions: - fixed some
bugs in Aztec and DotCode - fixed an issue concerning raster images of Maxicode
- expanded escape sequence support
--------------------------------------------------------------------------------
_______________________________________________
test mailing list -- test@lists.fedoraproject.org
To unsubscribe send an email to test-le...@lists.fedoraproject.org
