The following Fedora 28 Security updates need testing:
Age URL
73
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d510cfd7eb
jgraphx-3.6.0.0-6.fc28
45
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c75a37ae9b
blktrace-1.2.0-6.fc28
33
https://bodhi.fedoraproject.org/updates/FEDORA-2018-202c536f70
gifsicle-1.91-1.fc28
23
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d7aeaa74da
nodejs-brace-expansion-1.1.11-1.fc28
21
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc073fdc1a
nodejs-atob-2.1.1-1.fc28
16
https://bodhi.fedoraproject.org/updates/FEDORA-2018-57a9f93beb
sox-14.4.2.0-22.fc28
15
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9dd3f7c013
unrtf-0.21.9-8.fc28
14
https://bodhi.fedoraproject.org/updates/FEDORA-2018-049dee041d
mupdf-1.13.0-8.fc28
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6d87dc56e0
libgxps-0.3.0-5.fc28
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-866bd0e3c2
dcraw-9.28.0-1.fc28
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f972c1b36e
python-XStatic-jquery-ui-1.12.0.1-2.fc28
9
https://bodhi.fedoraproject.org/updates/FEDORA-2018-0e72ef852a
libjpeg-turbo-1.5.3-5.fc28
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d3cb6f113c xen-4.10.1-4.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-0c9ce03fce
cri-o-1.10.3-1.gite558bd5.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-68349e3094
phpMyAdmin-4.8.2-1.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5c8854a808
qutebrowser-1.3.3-1.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2b96ea9fec
podman-0.6.4-1.gitd5beb2f.fc28
The following Fedora 28 Critical Path updates have yet to be approved:
Age URL
23
https://bodhi.fedoraproject.org/updates/FEDORA-2018-80b606cb29
seabios-1.11.1-1.fc28
21
https://bodhi.fedoraproject.org/updates/FEDORA-2018-94ac0eace1
iproute-4.16.0-1.fc28
12
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4b709ebc5e lorax-28.15-1.fc28
12
https://bodhi.fedoraproject.org/updates/FEDORA-2018-940ac53cb8 sssd-1.16.2-1.fc28
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6a92e4f47a
glusterfs-4.1.0-1.fc28
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2013948e52
osinfo-db-20180612-1.fc28
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8683c6de9b
totem-pl-parser-3.26.1-1.fc28
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-0075e05ecb
perl-Time-Local-1.280-1.fc28
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6d87dc56e0
libgxps-0.3.0-5.fc28
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9d3adb3c1f
libgweather-3.28.2-1.fc28
9
https://bodhi.fedoraproject.org/updates/FEDORA-2018-0e72ef852a
libjpeg-turbo-1.5.3-5.fc28
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d3cb6f113c xen-4.10.1-4.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-583469bc5d
python-productmd-1.15-1.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-066a9994da texinfo-6.5-4.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-faae97d0c2
uboot-tools-2018.03-6.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7a80d11d9e
python-rpm-macros-3-29.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6273284476 gdb-8.1-18.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e993db60cc
edk2-20180529gitee3198e672e2-2.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-432d895be2 vim-8.1.095-1.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-44436d4611 exo-0.12.2-1.fc28
xfce4-settings-4.12.4-1.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4d3e89e651
xorg-x11-xkb-utils-7.7-26.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d384eab19a
ostree-2018.6-3.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-0ca2efd3f6
pulseaudio-12.0-1.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4fe9bf6535
lvm2-2.02.177-5.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-05713c82c6
iso-codes-3.79-1.fc28
The following builds have been pushed to Fedora 28 updates-testing
dtc-1.4.6-5.fc28
golang-github-minio-6.0.2-1.fc28
inn-2.6.2-1.fc28
knemo-0.7.7-8.20170520git.fc28
libreoffice-6.0.5.2-1.fc28
perl-CPAN-Perl-Releases-3.66-1.fc28
perl-Devel-Size-0.82-1.fc28
python-lz4-2.0.1-1.fc28
python-pycdlib-1.5.0-1.fc28
python-tld-0.7.9-7.fc28
quentier-0.4.0-0.4.20180622.git5a92775.fc28
timeshift-18.6.1-1.fc28
wpa_supplicant-2.6-16.fc28
Details about builds:
================================================================================
dtc-1.4.6-5.fc28 (FEDORA-2018-a89957bdb7)
Device Tree Compiler
--------------------------------------------------------------------------------
Update Information:
Add static library package, see BZ#1440975
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 6 2018 Bas Mevissen <abuse(a)basmevissen.nl> 1.4.6-5
- Add static library package, see BZ#1440975
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1440975 - overcloud deploy giving "401 Unauthorized" when accessing
swift from a mistral workflow
https://bugzilla.redhat.com/show_bug.cgi?id=1440975
--------------------------------------------------------------------------------
================================================================================
golang-github-minio-6.0.2-1.fc28 (FEDORA-2018-774bd5e245)
Minio Client SDK for Go
--------------------------------------------------------------------------------
Update Information:
Forge-specific packaging variables
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1592074 - Review Request: golang-github-minio - Minio Client SDK for Go
https://bugzilla.redhat.com/show_bug.cgi?id=1592074
--------------------------------------------------------------------------------
================================================================================
inn-2.6.2-1.fc28 (FEDORA-2018-36a01e2f2a)
The InterNetNews system, an Usenet news server
--------------------------------------------------------------------------------
Update Information:
# Changes in 2.6.2 * A new syntaxchecks parameter has been added in inn.conf.
It permits controlling the level of checks performed by innd and nnrpd. Up to
now, only one check can be enabled/disabled: when laxmid is mentioned in the
values of this new parameter, INN accepts Message-IDs that contain .. in the
left part, as well as Message-IDs with two @ (such Message-IDs would otherwise
be considered as syntactically invalid). See the inn.conf(5) man page for more
details. * The check is disabled by default (no-laxmid), which corresponds to
the legacy behaviour of INN 2.6.1 and earlier. * Use of the ovdb_server helper
server is now the default when using the ovdb overview method, that is to say
the default value for the readserver parameter in ovdb.conf is now set to true.
It improves stability and avoids deadlocks, timing issues and corrupted ovdb
databases. * mailpost now removes empty header fields before attempting to post
articles, and keeps trace of them in the X-Mailpost-Empty-Hdrs: newly generated
header field body. Also, mailpost now sanitizes header fields with regards to
empty continuation header lines. Thanks to Kamil Jonca for these bug reports. *
A new -z parameter has been added to mailpost to mention a list of header fields
to remove from the gated message. Thanks to Dieter Stussy for the patch. * Fixed
a bug in inews that was rejecting articles containing header fields whose length
exceeded 998 bytes. This limitation is for the length of a single line of a
header field (and not for the length of the whole header field, as it was
wrongly the case). * Added support for GnuPG's gpg binary (in addition to gpgv)
in pgpverify. Indeed, gpg still validates signatures made with weak digest
algorithms like MD5 whereas gpgv no longer do. Thanks to Thomas Hochstein for
the patch, which permits validating control articles for hierarchies that are
still using old PGP keys. * Added similar support for GnuPG's gpg binary in
perl-nocem to validate NoCeM notices from issuers who are still using old PGP
keys. * A few commands listed in the "Control commands to INND" section in
daily
Usenet reports were appearing as a mere letter; all of them are now properly
converted to meaningful words. * The tlsprotocols parameter in inn.conf now
recognizes the TLSv1.3 value (for OpenSSL versions implementing TLS 1.3, that is
to say starting from OpenSSL 1.1.1). * The buffindexed overview method will now
hopefully work properly on systems with a native page size larger than 16KB. *
Other minor bug fixes and documentation improvements.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 23 2018 Dominik Mierzejewski <rpm(a)greysector.net> - 2.6.2-1
- update to 2.6.2 release (#1557980)
- check GPG signature of the tarball
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1557980 - inn-2.6.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1557980
--------------------------------------------------------------------------------
================================================================================
knemo-0.7.7-8.20170520git.fc28 (FEDORA-2018-22628764e3)
A KDE network monitoring tool
--------------------------------------------------------------------------------
Update Information:
frameworks git 20170520 snapshot
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 23 2018 Alexey Kurov <nucleo(a)fedoraproject.org> - 0.7.7-8.20170520git
- frameworks git 20170520 snapshot
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1240779 - knemo doesn't appear at system settings, and doesn't start
automatically
https://bugzilla.redhat.com/show_bug.cgi?id=1240779
--------------------------------------------------------------------------------
================================================================================
libreoffice-6.0.5.2-1.fc28 (FEDORA-2018-7b955ba398)
Free Software Productivity Suite
--------------------------------------------------------------------------------
Update Information:
- update to latest stable of 6.0.5
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 22 2018 Caol��n McNamara <caolanm(a)redhat.com> - 1:6.0.5.2-1
- latest 6.0 release
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 1:6.0.4.2-5
- Rebuilt for Python 3.7
--------------------------------------------------------------------------------
================================================================================
perl-CPAN-Perl-Releases-3.66-1.fc28 (FEDORA-2018-ce2f0ee67d)
Mapping Perl releases on CPAN to the location of the tarballs
--------------------------------------------------------------------------------
Update Information:
Updated to the latest version ---- Updated to the latest version ----
Updated to the latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 23 2018 Jitka Plesnikova <jplesnik(a)redhat.com> - 3.66-1
- 3.66 bump
* Wed Jun 20 2018 Jitka Plesnikova <jplesnik(a)redhat.com> - 3.64-1
- 3.64 bump
* Tue Jun 19 2018 Jitka Plesnikova <jplesnik(a)redhat.com> - 3.62-1
- 3.62 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1594468 - perl-CPAN-Perl-Releases-3.66 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1594468
[ 2 ] Bug #1593043 - perl-CPAN-Perl-Releases-3.64 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1593043
[ 3 ] Bug #1592742 - perl-CPAN-Perl-Releases-3.62 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1592742
--------------------------------------------------------------------------------
================================================================================
perl-Devel-Size-0.82-1.fc28 (FEDORA-2018-2e57d7e2d0)
Perl extension for finding the memory usage of Perl variables
--------------------------------------------------------------------------------
Update Information:
Updated to the latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 23 2018 Jitka Plesnikova <jplesnik(a)redhat.com> - 0.82-1
- 0.82 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1594467 - perl-Devel-Size-0.82 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1594467
--------------------------------------------------------------------------------
================================================================================
python-lz4-2.0.1-1.fc28 (FEDORA-2018-6da2b68c62)
LZ4 Bindings for Python
--------------------------------------------------------------------------------
Update Information:
Update to latest version.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 21 2018 Jonathan Underwood <jonathan.underwood(a)gmail.com> - 2.0.1-1
- Update to version 2.0.1
* Wed Jun 20 2018 Jonathan Underwood <jonathan.underwood(a)gmail.com> - 2.0.0-2
- Add BuildRequires for python{2,3}-psutil for tests
* Wed Jun 20 2018 Jonathan Underwood <jonathan.underwood(a)gmail.com> - 2.0.0-1
- Update to version 2.0.0
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 1.1.0-3
- Rebuilt for Python 3.7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1589436 - python-lz4-2.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1589436
--------------------------------------------------------------------------------
================================================================================
python-pycdlib-1.5.0-1.fc28 (FEDORA-2018-86600f0607)
A pure python ISO9660 read and write library
--------------------------------------------------------------------------------
Update Information:
Update to upstream version 1.5.0
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 23 2018 Chris Lalancette <clalancette(a)gmail.com> - 1.5.0-1
- Update to upstream version 1.5.0
--------------------------------------------------------------------------------
================================================================================
python-tld-0.7.9-7.fc28 (FEDORA-2018-c20d01d619)
Extract the top level domain from the URL given
--------------------------------------------------------------------------------
Update Information:
Update license tag
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 23 2018 William Moreno Reyes <williamjmorenor(a)gmail.com> - 0.7.9-7
- Update license tag
-
https://github.com/barseghyanartur/tld/issues/46
-
https://bugzilla.redhat.com/show_bug.cgi?id=1577466
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 0.7.9-6
- Rebuilt for Python 3.7
* Fri Mar 16 2018 Jan Beran <jberan(a)redhat.com> - 0.7.9-5
- Fix of python3-tld requires both Python 2 and Python 3 (rhbz #1546814)
--------------------------------------------------------------------------------
================================================================================
quentier-0.4.0-0.4.20180622.git5a92775.fc28 (FEDORA-2018-5b6109905f)
Cross-platform desktop Evernote client
--------------------------------------------------------------------------------
Update Information:
Bump to 5a9277504a6a68da0a490f755e036561270094c7
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 22 2018 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> -
0.4.0-0.4.20180622git5a92775
- Bump to 5a9277504a6a68da0a490f755e036561270094c7
--------------------------------------------------------------------------------
================================================================================
timeshift-18.6.1-1.fc28 (FEDORA-2018-ac8b7ef0cf)
System restore tool for Linux
--------------------------------------------------------------------------------
Update Information:
Update to 18.6.1. Upstream changelog:
https://github.com/teejee2008/timeshift/releases
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 24 2018 Samuel Rakitni��an <samuel.rakitnican(a)gmail.com> 18.6.1-1
- Update to 18.6.1 with vte291 fixes for F28 and rawhide
* Sun Jun 24 2018 Samuel Rakitni��an <samuel.rakitnican(a)gmail.com> 18.4-1
- Update to 18.4
- Add runtime dependency on psmisc
- Update sed expression to avoid false matches
--------------------------------------------------------------------------------
================================================================================
wpa_supplicant-2.6-16.fc28 (FEDORA-2018-1cc52e0dd5)
WPA/WPA2/IEEE 802.1X Supplicant
--------------------------------------------------------------------------------
Update Information:
fixed wrong encoding of NL80211_ATTR_SMPS_MODE
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 22 2018 Davide Caratti <dcaratti(a)redhat.com> - 1:2.6-16
- Fix endoding of NL80211_ATTR_SMPS_MODE (rh#1570903)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1570903 - Attribute type 213 has an invalid length
https://bugzilla.redhat.com/show_bug.cgi?id=1570903
--------------------------------------------------------------------------------