The following Fedora 28 Security updates need testing: Age URL 222 https://bodhi.fedoraproject.org/updates/FEDORA-2018-d510cfd7eb jgraphx-3.6.0.0-6.fc28 172 https://bodhi.fedoraproject.org/updates/FEDORA-2018-d7aeaa74da nodejs-brace-expansion-1.1.11-1.fc28 170 https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc073fdc1a nodejs-atob-2.1.1-1.fc28 163 https://bodhi.fedoraproject.org/updates/FEDORA-2018-9dd3f7c013 unrtf-0.21.9-8.fc28 131 https://bodhi.fedoraproject.org/updates/FEDORA-2018-28e9841baf docker-latest-1.13.1-37.git9cb56fd.fc28 46 https://bodhi.fedoraproject.org/updates/FEDORA-2018-cc4b7af297 xerces-c27-2.7.0-28.fc28 24 https://bodhi.fedoraproject.org/updates/FEDORA-2018-7d748596e9 drupal8-8.6.2-1.fc28 20 https://bodhi.fedoraproject.org/updates/FEDORA-2018-18023f40fa drupal7-7.60-2.fc28 20 https://bodhi.fedoraproject.org/updates/FEDORA-2018-2d2739ebed php-Smarty2-2.6.31-2.fc28 18 https://bodhi.fedoraproject.org/updates/FEDORA-2018-2ee55d77c9 links-2.17-1.fc28 11 https://bodhi.fedoraproject.org/updates/FEDORA-2018-a5d1fa335e gettext-0.19.8.1-18.fc28 7 https://bodhi.fedoraproject.org/updates/FEDORA-2018-2c8db7357b chromium-70.0.3538.77-4.fc28 7 https://bodhi.fedoraproject.org/updates/FEDORA-2018-8f0d2429d3 bird-1.6.4-2.fc28 7 https://bodhi.fedoraproject.org/updates/FEDORA-2018-89413a04e0 wireshark-2.6.4-1.fc28 7 https://bodhi.fedoraproject.org/updates/FEDORA-2018-02e965a729 rubygem-rack-2.0.4-4.fc28 6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-86e2487df2 pdns-recursor-4.1.7-1.fc28 6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-713f4ce1c7 libconfuse-3.2.2-1.fc28 6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-d716df9942 rubygem-loofah-2.0.3-6.fc28 6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-b0d6ae1959 python-urllib3-1.24.1-2.fc28 5 https://bodhi.fedoraproject.org/updates/FEDORA-2018-67a6bf4ac1 libtiff-4.0.10-1.fc28 5 https://bodhi.fedoraproject.org/updates/FEDORA-2018-af9bd28cf1 glusterfs-4.1.6-1.fc28 4 https://bodhi.fedoraproject.org/updates/FEDORA-2018-b4820696e1 community-mysql-5.7.24-1.fc28 4 https://bodhi.fedoraproject.org/updates/FEDORA-2018-1621b2204a kernel-tools-4.19.2-200.fc28 kernel-headers-4.19.2-200.fc28 kernel-4.19.2-200.fc28 4 https://bodhi.fedoraproject.org/updates/FEDORA-2018-aadd3c2790 mupdf-1.14.0-6.fc28 3 https://bodhi.fedoraproject.org/updates/FEDORA-2018-f73869d61e php-PHPMailer-5.2.27-1.fc28 3 https://bodhi.fedoraproject.org/updates/FEDORA-2018-0f5e6e9957 php-phpmailer6-6.0.6-1.fc28 3 https://bodhi.fedoraproject.org/updates/FEDORA-2018-4d68cf2b1c flatpak-1.0.6-1.fc28
The following Fedora 28 Critical Path updates have yet to be approved: Age URL 13 https://bodhi.fedoraproject.org/updates/FEDORA-2018-998a7b6fc3 ibus-1.5.19-8.fc28 11 https://bodhi.fedoraproject.org/updates/FEDORA-2018-de1faf9ca6 libtirpc-1.0.3-6.rc2.fc28 11 https://bodhi.fedoraproject.org/updates/FEDORA-2018-783dfc5196 shadow-utils-4.6-4.fc28 11 https://bodhi.fedoraproject.org/updates/FEDORA-2018-a5d1fa335e gettext-0.19.8.1-18.fc28 10 https://bodhi.fedoraproject.org/updates/FEDORA-2018-a558274032 json-glib-1.4.4-1.fc28 10 https://bodhi.fedoraproject.org/updates/FEDORA-2018-4ee0750c41 gjs-1.52.4-1.fc28 9 https://bodhi.fedoraproject.org/updates/FEDORA-2018-f893865248 edk2-20180815gitcb5f4f45ce-2.fc28 6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-b0d6ae1959 python-urllib3-1.24.1-2.fc28 5 https://bodhi.fedoraproject.org/updates/FEDORA-2018-af9bd28cf1 glusterfs-4.1.6-1.fc28 5 https://bodhi.fedoraproject.org/updates/FEDORA-2018-67a6bf4ac1 libtiff-4.0.10-1.fc28 4 https://bodhi.fedoraproject.org/updates/FEDORA-2018-1621b2204a kernel-tools-4.19.2-200.fc28 kernel-headers-4.19.2-200.fc28 kernel-4.19.2-200.fc28 3 https://bodhi.fedoraproject.org/updates/FEDORA-2018-4d68cf2b1c flatpak-1.0.6-1.fc28 3 https://bodhi.fedoraproject.org/updates/FEDORA-2018-c2c01c0a06 pam-1.3.1-8.fc28
The following builds have been pushed to Fedora 28 updates-testing
fedpkg-1.35-2.fc28 graphlcd-base-1.0.2-2.fc28 grilo-0.3.7-1.fc28 nextcloud-client-2.5.0-2.fc28 osinfo-db-20181116-1.fc28 pam_2fa-1.0-1.fc28 perl-FFI-CheckLib-0.23-1.fc28 perl-Net-Pcap-0.18-8.fc28 php-pecl-apcu-5.1.13-1.fc28 php-pecl-ds-1.2.7-1.fc28 php-pecl-redis4-4.2.0-1.fc28 python-fedmsg-meta-fedora-infrastructure-0.27.0-1.fc28 python-pygiftiio-1.0.4-2.fc28 speed-dreams-2.2.2-1.fc28 xed-2.0.0-1.fc28 xpad-5.2.0-1.fc28 xreader-2.0.0-1.fc28
Details about builds:
================================================================================ fedpkg-1.35-2.fc28 (FEDORA-2018-2071e70ed7) Fedora utility for working with dist-git -------------------------------------------------------------------------------- Update Information:
Add mssing require python3-setuptools -------------------------------------------------------------------------------- ChangeLog:
* Mon Sep 17 2018 Chenxiong Qi cqi@redhat.com - 1.35-2 - Add mssing require python3-setuptools -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1629596 - fedpkg ModuleNotFoundError: No module named 'pkg_resources' https://bugzilla.redhat.com/show_bug.cgi?id=1629596 --------------------------------------------------------------------------------
================================================================================ graphlcd-base-1.0.2-2.fc28 (FEDORA-2018-a6024b1344) GraphLCD drivers and tools -------------------------------------------------------------------------------- Update Information:
- Add BR gcc-c++ - Add BR pkgconfig(freetype2) - License is GPLv2+ not GPL+ - Convert HISTORY file to utf-8 --------------------------------------------------------------------------------
================================================================================ grilo-0.3.7-1.fc28 (FEDORA-2018-2f5e72a448) Content discovery framework -------------------------------------------------------------------------------- Update Information:
Update to 0.3.7 -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 19 2018 Victor Toso victortoso@redhat.com - 0.3.7-1 - Update to 0.3.7 --------------------------------------------------------------------------------
================================================================================ nextcloud-client-2.5.0-2.fc28 (FEDORA-2018-7255a8cc56) The Nextcloud Client -------------------------------------------------------------------------------- Update Information:
2.5.0 release. Please report any need to reconfigure login access mode -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 19 2018 Germano Massullo germano@germanomassullo.org - 2.5.0-2 - added ExcludeArch: ppc64, ppc64le, s390. Read https://bugzilla.redhat.com/show_bug.cgi?id=1651261 * Thu Nov 15 2018 Germano Massullo germano@germanomassullo.org - 2.5.0-1 - 2.5.0 release * Wed Aug 15 2018 Germano Massullo germano.massullo@gmail.com - 2.5.0-0.1 - 2.5.0 beta 1 * Fri Jul 13 2018 Fedora Release Engineering releng@fedoraproject.org - 2.4.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Tue Feb 13 2018 Germano Massullo germano.massullo@gmail.com - 2.4.0-1 - 2.4.0 release - Updated syslibs patch, thanks to Robert-Andr�� Mauchin - Added comment to syslibs patch, thanks to Robert-Andr�� Mauchin - updated nextcloud client theming to 2.3.3 * Thu Feb 8 2018 Fedora Release Engineering releng@fedoraproject.org - 2.3.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1649714 - nextcloud-client-2.5.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1649714 [ 2 ] Bug #1647091 - Nautilus integration not working/shows nothing https://bugzilla.redhat.com/show_bug.cgi?id=1647091 [ 3 ] Bug #1563520 - dependency for nextcloud-client will switch to python3 https://bugzilla.redhat.com/show_bug.cgi?id=1563520 [ 4 ] Bug #1487701 - Window isn't shown when the app is launched https://bugzilla.redhat.com/show_bug.cgi?id=1487701 [ 5 ] Bug #1638347 - Please port nextcloud-client-nemo support to python3 https://bugzilla.redhat.com/show_bug.cgi?id=1638347 --------------------------------------------------------------------------------
================================================================================ osinfo-db-20181116-1.fc28 (FEDORA-2018-d169dbb09d) osinfo database files -------------------------------------------------------------------------------- Update Information:
Update to new release -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 19 2018 Fabiano Fid��ncio fidencio@redhat.org - 20181116-1 - Update to new release --------------------------------------------------------------------------------
================================================================================ pam_2fa-1.0-1.fc28 (FEDORA-2018-127affe1d7) Second factor authentication for PAM -------------------------------------------------------------------------------- Update Information:
The PAM 2FA module provides a second factor authentication, which can be combined with the standard PAM-based password authentication to ask for: * What you know: user account password ( standard PAM modules ) * What you have (pick one of): (PAM 2FA) + A Google Authenticator Application on your phone + A Phone Number capable of receiving SMS + A Yubikey pam_ssh_user_auth checks the value of SSH_USER_AUTH and will return success if is non-empty and failure if it is. It can be used to skip other PAM authentication methods with a configuration like: auth [success=1 ignore=ignore default=die] pam_ssh_user_auth.so auth substack password-auth -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1650633 - Review Request: pam_2fa - Second factor authentication for PAM https://bugzilla.redhat.com/show_bug.cgi?id=1650633 --------------------------------------------------------------------------------
================================================================================ perl-FFI-CheckLib-0.23-1.fc28 (FEDORA-2018-743cb3ece4) Check that a library is available for FFI -------------------------------------------------------------------------------- Update Information:
This release improves documentation. -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 19 2018 Petr Pisar ppisar@redhat.com - 0.23-1 - 0.23 bump * Mon Oct 15 2018 Jitka Plesnikova jplesnik@redhat.com - 0.22-1 - 0.22 bump -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1651151 - Upgrade perl-FFI-CheckLib to 0.23 https://bugzilla.redhat.com/show_bug.cgi?id=1651151 --------------------------------------------------------------------------------
================================================================================ perl-Net-Pcap-0.18-8.fc28 (FEDORA-2018-b29814d978) Interface to pcap(3) LBL packet capture library -------------------------------------------------------------------------------- Update Information:
Fix build with libpcap-1.9.0 -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 19 2018 Jitka Plesnikova jplesnik@redhat.com - 0.18-8 - Fix build with libpcap-1.9.0 (bug #1612860) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1612860 - perl-Net-Pcap-0.18-9.fc29 FTBFS: stubs.inc:357:8: error: redefinition of 'struct pcap_rmtauth' https://bugzilla.redhat.com/show_bug.cgi?id=1612860 --------------------------------------------------------------------------------
================================================================================ php-pecl-apcu-5.1.13-1.fc28 (FEDORA-2018-3c9d5b8195) APC User Cache -------------------------------------------------------------------------------- Update Information:
**Version 5.1.13** - Reimplement persistence logic using precise allocation rather than memory pools. This reduces memory usage of cache entries, especially for small values, and improves performance of persisting and unpersisting values. - Fixed GH #335: Stampede protection is broken. - Fixed GH #328: Segfault in apcu_key_info() if APCu is disabled. - Generally make the behavior of functions if APCu is disabled more consistent. - Fixed PHP bug #72980: Empty strings are now consistently allowed as cache keys. - Optimized apcu_key_info() and apcu_cache_info() by using interned strings. - Fix build against PHP master (PHP 7.4). - Many changes to internal C APIs. -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 19 2018 Remi Collet remi@remirepo.net - 5.1.13-1 - update to 5.1.13 (stable) --------------------------------------------------------------------------------
================================================================================ php-pecl-ds-1.2.7-1.fc28 (FEDORA-2018-3f12d217b4) Data Structures for PHP -------------------------------------------------------------------------------- Update Information:
**Version 1.2.7** - 2018-11-18 - Fixed pair reflection bugs. #119 -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 19 2018 Remi Collet remi@remirepo.net - 1.2.7-1 - update to 1.2.7 --------------------------------------------------------------------------------
================================================================================ php-pecl-redis4-4.2.0-1.fc28 (FEDORA-2018-b11b078851) Extension for communicating with the Redis key-value store -------------------------------------------------------------------------------- Update Information:
**phpredis 4.2.0** The main feature of this release is new Streams API implemented by Michael Grunder. Note: There are no changes between 4.2.0RC3 and 4.2.0. **4.2.0RC3:** * Optimize close method [2a1ef961] (fanjiapeng) * Prevent potential infinite loop for sessions [4e2de158] (Pavlo Yatsukhnenko) * Fix coverty warnings [6f7ddd27] (Pavlo Yatsukhnenko) * Fix session memory leaks [071a1d54, 92f14b14] (Pavlo Yatsukhnenko, Michael Grunder) * Fix XCLAIM on 32-bit installs [18dc2aac] (Michael Grunder) * Build warning fixes [b5093910, 51027044, 8b0f28cd] (Pavlo Yatsukhnenko, Remi Collet, twosee) **4.2.0RC2:** * Fix incorrect arginfo for `Redis::sRem` and `Redis::multi` [25b043ce] (Pavlo Yatsukhnenko) * Update STREAM API to handle STATUS -> BULK reply change [0b97ec37] (Michael Grunder) * Treat a -1 response from cluster_check_response as a timeout. [27df9220, 07ef7f4e, d1172426] (Michael Grunder) * Use a ZSET insted of SET for EVAL tests [2e412373] (Michael Grunder) * Missing space between command and args [0af2a7fe] (@remicollet) **4.2.0RC1:** * Streams API [2c9e0572] (Michael Grunder) * Reset the socket after a timeout to make sure no wrong data is received [cd6ebc6d] (@marcdejonge) * Modify session testing logic [bfd27471] (Michael Grunder) * Allow '-' and '+' arguments and add tests for zLexCount and zRemRangeByLex [d4a08697] (Michael Grunder) * Fix printf format warnings [dcde9331] (Pavlo Yatsukhnenko) * Session module is required [58bd8cc8] (@remicollet) * Set default values for ini entries [e206ce9c] (Pavlo Yatsukhnenko) * Display ini entries in output of phpinfo [908ac4b3] (Pavlo Yatsukhnenko) * Persistant connections can be closed via close method + change reconnection logic [1d997873] (Pavlo Yatsukhnenko) * Documentation improvements (@mg, @elcheco, @lucascourot, @nolimitdev, Michael Grunder) -------------------------------------------------------------------------------- ChangeLog:
* Sun Nov 18 2018 Remi Collet remi@remirepo.net - 4.2.0-1 - update to 4.2.0 (stable) - temporarily disable test suite on s390x --------------------------------------------------------------------------------
================================================================================ python-fedmsg-meta-fedora-infrastructure-0.27.0-1.fc28 (FEDORA-2018-93ae7be82e) Metadata providers for Fedora Infrastructure's fedmsg deployment -------------------------------------------------------------------------------- Update Information:
Update to 0.27.0 Change log can be found at: https://github.com/fedora- infra/fedmsg_meta_fedora_infrastructure/blob/develop/CHANGELOG.rst#0270 ---- Upgrade to 0.26.0 Changelog is at: https://github.com/fedora- infra/fedmsg_meta_fedora_infrastructure/blob/develop/CHANGELOG.rst#0260 -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 19 2018 Pierre-Yves Chibon pingou@pingoured.fr - 0.27.0-1 - Upgrade to 0.27.0 * Sat Jul 14 2018 Fedora Release Engineering releng@fedoraproject.org - 0.26.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Tue Jun 19 2018 Miro Hron��ok mhroncok@redhat.com - 0.26.0-2 - Rebuilt for Python 3.7 * Mon Jun 11 2018 Pierre-Yves Chibon pingou@pingoured.fr - 0.26.0-1 - Update to 0.26.0 * Tue May 29 2018 Pierre-Yves Chibon pingou@pingoured.fr - 0.25.0-2 - Fix the Requires in el6 --------------------------------------------------------------------------------
================================================================================ python-pygiftiio-1.0.4-2.fc28 (FEDORA-2018-625dee4559) Python bindings for Gifti -------------------------------------------------------------------------------- Update Information:
* New package! https://www.nitrc.org/frs/?group_id=75 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1650947 - Review Request: python-pygiftiio - Python bindings for Gifti https://bugzilla.redhat.com/show_bug.cgi?id=1650947 --------------------------------------------------------------------------------
================================================================================ speed-dreams-2.2.2-1.fc28 (FEDORA-2018-017ae00d08) The Open Racing Car Simulator -------------------------------------------------------------------------------- Update Information:
Update to 2.2.2-1 -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 19 2018 Martin Gansser martinkg@fedoraproject.org - 1:2.2.2-1 - Update to 2.2.2 --------------------------------------------------------------------------------
================================================================================ xed-2.0.0-1.fc28 (FEDORA-2018-189a250423) X-Apps [Text] Editor (Cross-DE, backward-compatible, GTK3, traditional UI) -------------------------------------------------------------------------------- Update Information:
- Update -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 19 2018 Leigh Scott leigh123linux@googlemail.com - 2.0.0-1 - Update to 2.0.0 release --------------------------------------------------------------------------------
================================================================================ xpad-5.2.0-1.fc28 (FEDORA-2018-58b4f508bd) Sticky notepad for GTK -------------------------------------------------------------------------------- Update Information:
Update to 5.2.0 with a few bugfixes. -------------------------------------------------------------------------------- ChangeLog:
* Sun Nov 18 2018 Kevin Fenzi kevin@scrye.com - 5.2.0-1 - Update to 5.2.0. --------------------------------------------------------------------------------
================================================================================ xreader-2.0.0-1.fc28 (FEDORA-2018-189a250423) Simple document viewer -------------------------------------------------------------------------------- Update Information:
- Update -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 19 2018 Leigh Scott leigh123linux@googlemail.com - 2.0.0-1 - Update to 2.0.0 release --------------------------------------------------------------------------------