The following Fedora 28 Security updates need testing:
Age URL
339
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d510cfd7eb
jgraphx-3.6.0.0-6.fc28
288
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d7aeaa74da
nodejs-brace-expansion-1.1.11-1.fc28
287
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc073fdc1a
nodejs-atob-2.1.1-1.fc28
163
https://bodhi.fedoraproject.org/updates/FEDORA-2018-cc4b7af297
xerces-c27-2.7.0-28.fc28
116
https://bodhi.fedoraproject.org/updates/FEDORA-2018-aa3752ac3c
nginx-1.14.1-1.fc28
95
https://bodhi.fedoraproject.org/updates/FEDORA-2018-cc86ef9e22 squid-4.4-1.fc28
92
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b18f9dd65b
tomcat-8.5.35-1.fc28
25
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d7ef743ef0
librsvg2-2.42.7-2.fc28
23
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8b5e704a73
poppler-0.62.0-16.fc28
22
https://bodhi.fedoraproject.org/updates/FEDORA-2019-86412405d5
bind-9.11.5-4.P4.fc28
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3c1aed2aa9
cfitsio-3.430-2.fc28
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-07d447a1d3
golang-googlecode-net-0-0.48.20190302git16b79f2.fc28
10
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b2d986c3e9
freerdp-2.0.0-49.20190304git435872b.fc28 gnome-boxes-3.28.5-2.fc28
pidgin-sipe-1.24.0-3.fc28 remmina-1.3.3-1.fc28
10
https://bodhi.fedoraproject.org/updates/FEDORA-2019-bce6498890 xen-4.10.3-2.fc28
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-63029a7692
libu2f-host-1.1.8-1.fc28
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-694e3aa4e8
ntp-4.2.8p13-1.fc28
8
https://bodhi.fedoraproject.org/updates/FEDORA-2019-5ad2149e99
python2-django1.11-1.11.20-1.fc28
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-7b9bb0e426
ghostscript-9.26-3.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8cdd669aca
tcpflow-1.5.0-4.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-0b73bd3e5d
libzip-1.5.2-1.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-918aad6bd5 SDL-1.2.15-32.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-a9c08d4b40
tcpreplay-4.3.2-1.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8606c6da35
wordpress-5.1.1-1.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e86155be6e
php-twig2-2.7.2-1.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-64f6c399c9
php-twig-1.38.2-2.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-87e2fa8e0f
libjpeg-turbo-1.5.3-7.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-348166f7fd
openwsman-2.6.5-4.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-779a9db46a PyYAML-5.1-1.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-84d3c07daa
thunderbird-60.5.3-1.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-133a8a7cb5
mod_http2-1.14.1-1.fc28
The following Fedora 28 Critical Path updates have yet to be approved:
Age URL
95
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9f541b469b
nfs-utils-2.3.3-1.rc2.fc28
86
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4dddcb3e5e
highlight-3.48-1.fc28
59
https://bodhi.fedoraproject.org/updates/FEDORA-2019-78153d357c
totem-pl-parser-3.26.2-1.fc28
52
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e9c4843d39
volume_key-0.3.12-2.fc28
51
https://bodhi.fedoraproject.org/updates/FEDORA-2019-bb30467485
ostree-2019.1-2.fc28 rpm-ostree-2019.1-1.fc28
43
https://bodhi.fedoraproject.org/updates/FEDORA-2019-cb4a3023ef
iproute-4.20.0-1.fc28
25
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6c4e362bd0 dhcp-4.3.6-22.fc28
dnsperf-2.2.1-1.fc28 bind-dyndb-ldap-11.1-13.fc28 bind-9.11.5-2.P1.fc28
25
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d7ef743ef0
librsvg2-2.42.7-2.fc28
23
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8b5e704a73
poppler-0.62.0-16.fc28
19
https://bodhi.fedoraproject.org/updates/FEDORA-2019-68e7e119bb
udisks2-2.7.6-3.fc28
15
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9e2f4fbaad
lxsession-0.5.4-1.fc28
15
https://bodhi.fedoraproject.org/updates/FEDORA-2019-35f82e5d32
lxpanel-0.10.0-1.fc28
14
https://bodhi.fedoraproject.org/updates/FEDORA-2019-16c2256578 audit-2.8.5-1.fc28
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ac998d3003 vim-8.1.994-1.fc28
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-5090aeed7f
osinfo-db-20190304-1.fc28
10
https://bodhi.fedoraproject.org/updates/FEDORA-2019-bce6498890 xen-4.10.3-2.fc28
10
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3b5f8c9144
python-pid-2.2.3-1.fc28
10
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c0afa6a261
hwdata-0.321-1.fc28
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3880624c44
openldap-2.4.46-5.fc28
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c4107ac9d3 koji-1.17.0-5.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-f38cfd1456
ntfs-3g-2017.3.23-10.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-cb98bf5ace
fedfind-4.2.2-1.fc28 python-productmd-1.20-1.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-348166f7fd
openwsman-2.6.5-4.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-87e2fa8e0f
libjpeg-turbo-1.5.3-7.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d95d1a1e0e
libseccomp-2.4.0-0.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ea42f2be87 fedora-repos-28-7
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-84d3c07daa
thunderbird-60.5.3-1.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-2915c9581d
kernel-headers-4.20.16-100.fc28 kernel-4.20.16-100.fc28 kernel-tools-4.20.16-100.fc28
The following builds have been pushed to Fedora 28 updates-testing
NetworkManager-l2tp-1.2.12-1.fc28
R-diffobj-0.2.2-1.fc28
R-lazyeval-0.2.2-1.fc28
R-reticulate-1.11.1-1.fc28
R-simmer-4.2.2-1.fc28
cmake-3.14.0-1.fc28
gsequencer-2.1.67-0.fc28
mxml-3.0-1.fc28
nordugrid-arc-5.4.4-1.fc28
rubygem-jekyll-seo-tag-2.6.0-1.fc28
scidavis-1.25-2.fc28
zchunk-1.0.4-1.fc28
Details about builds:
================================================================================
NetworkManager-l2tp-1.2.12-1.fc28 (FEDORA-2019-19e540173c)
NetworkManager VPN plugin for L2TP and L2TP/IPsec
--------------------------------------------------------------------------------
Update Information:
Updated to 1.2.12 release
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 16 2019 Douglas Kosovic <doug(a)uq.edu.au> - 1.2.12-1
- Updated to 1.2.12 release
- Use upstream provided xz tarball instead of GitHub generated gz tarball.
- Delete any transient nm-l2tp-ipsec-*.secrets files from versions <= 1.2.10
- %ghost transient ipsec.nm-l2tp.secrets files.
- Merged EPEL 7 spec file with Fedora spec file.
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.10-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.10-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
R-diffobj-0.2.2-1.fc28 (FEDORA-2019-c3c211774a)
Diffs for R Objects
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sun Mar 17 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.2.2-1
- Update to latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1689421 - R-diffobj-0.2.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1689421
--------------------------------------------------------------------------------
================================================================================
R-lazyeval-0.2.2-1.fc28 (FEDORA-2019-27f527cf7a)
Lazy (Non-Standard) Evaluation
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sun Mar 17 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.2.2-1
- Update to latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1689424 - R-lazyeval-0.2.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1689424
--------------------------------------------------------------------------------
================================================================================
R-reticulate-1.11.1-1.fc28 (FEDORA-2019-f09c57918b)
R Interface to 'Python'
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 9 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 1.11.1-1
- Update to latest version
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.10-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1685136 - R-reticulate-1.11.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1685136
--------------------------------------------------------------------------------
================================================================================
R-simmer-4.2.2-1.fc28 (FEDORA-2019-c250c0ce3c)
Discrete-Event Simulation for R
--------------------------------------------------------------------------------
Update Information:
Update to 4.2.2
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 16 2019 I��aki ��car <iucar(a)fedoraproject.org> - 4.2.2-1
- Update to 4.2.2
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.2.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
cmake-3.14.0-1.fc28 (FEDORA-2019-6627c41db7)
Cross-platform make system
--------------------------------------------------------------------------------
Update Information:
- Update to 3.14.0
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 15 2019 Bj��rn Esser <besser82(a)fedoraproject.org> - 3.14.0-1
- 3.14.0
* Sat Feb 2 2019 Orion Poplawski <orion(a)nwra.com> - 3.13.4-1
- 3.13.4
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.13.3-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Wed Jan 16 2019 Rex Dieter <rdieter(a)fedoraproject.org> - 3.13.3-1
- 3.13.3
* Fri Dec 14 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 3.13.2-1
- 3.13.2
* Sat Dec 8 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 3.13.1-2
- macros.cmake: introduce %_cmake_shared_libs macro
* Wed Nov 28 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 3.13.1-1
- 3.13.1
* Sat Sep 8 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 3.12.2-1
- Update to 3.12.2
* Fri Aug 17 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 3.12.1-1
- Update to 3.12.1 (# 1614572)
* Fri Jul 27 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 3.12.0-1
- Update to 3.12.0 (#1584925)
- fixes libuv-related FTBFS (#1603661)
- use %_metainfodir
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.11.2-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 3.11.2-2
- Rebuilt for Python 3.7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1688894 - cmake-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1688894
--------------------------------------------------------------------------------
================================================================================
gsequencer-2.1.67-0.fc28 (FEDORA-2019-8eb0404ae1)
Audio processing engine
--------------------------------------------------------------------------------
Update Information:
updated install to package hicolor icon theme images
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
mxml-3.0-1.fc28 (FEDORA-2019-d333d01e08)
Miniature XML development library
--------------------------------------------------------------------------------
Update Information:
Update to 3.0. License has changed to ASL 2.0 + exception. See
https://github.com/michaelrsweet/mxml/releases/tag/v3.0 for more info.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 6 2019 Kevin Fenzi <kevin(a)scrye.com> - 3.0-1
- Upgrade to 3.0. Fixes bug #1684794
- CVE-2018-20004 CVE-2018-20592 CVE-2018-20593
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.11-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Fri Jul 20 2018 Kevin Fenzi <kevin(a)scrye.com> - 2.11-4
- Fix FTBFS bug #1604905.
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.11-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.11-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1662712 - CVE-2018-20592 mxml: Use-after-free in the mxmlAdd function of the
mxml-node.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1662712
[ 2 ] Bug #1662709 - CVE-2018-20593 mxml: Stack-based buffer overflow in the scan_file
function in mxmldoc.c. [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1662709
[ 3 ] Bug #1660484 - CVE-2018-20004 CVE-2018-20005 mxml: Multiple vulnerabilities
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1660484
[ 4 ] Bug #1684794 - mxml-3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1684794
--------------------------------------------------------------------------------
================================================================================
nordugrid-arc-5.4.4-1.fc28 (FEDORA-2019-1da510090a)
Advanced Resource Connector Grid Middleware
--------------------------------------------------------------------------------
Update Information:
ARC 5.4.4
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 16 2019 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 5.4.4-1
- 5.4.4 Final Release
- Drop previously backported patches
* Thu Mar 7 2019 Troy Dawson <tdawson(a)redhat.com> - 5.4.3-2
- Rebuilt to change main python from 3.4 to 3.6
* Sun Feb 3 2019 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 5.4.3-4
- Fix compilation with gcc 9 (Fedora 30+)
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.4.3-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Mon Nov 26 2018 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 5.4.3-2
- Fix for changed default initialization options in OpenSSL 1.1.1
--------------------------------------------------------------------------------
================================================================================
rubygem-jekyll-seo-tag-2.6.0-1.fc28 (FEDORA-2019-813bd1e730)
Jekyll plugin to add SEO metadata tags
--------------------------------------------------------------------------------
Update Information:
Update to version 2.6.0. Release notes:
https://github.com/jekyll/jekyll-seo-
tag/releases/tag/v2.6.0
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 16 2019 Fabio Valentini <decathorpe(a)gmail.com> - 2.6.0-1
- Update to version 2.6.0.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1689509 - rubygem-jekyll-seo-tag-2.6.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1689509
--------------------------------------------------------------------------------
================================================================================
scidavis-1.25-2.fc28 (FEDORA-2019-9b0e2a6751)
Application for Scientific Data Analysis and Visualization
--------------------------------------------------------------------------------
Update Information:
This update fixes [sf bug #377](https://sourceforge.net/p/scidavis/scidavis-
bugs/377/) causing all colors to revert to black after reloading a project.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 16 2019 Alexander Ploumistos <alexpl(a)fedoraproject.org> - 1.25-2
- Backport fix for plot colors reverting to black
--------------------------------------------------------------------------------
================================================================================
zchunk-1.0.4-1.fc28 (FEDORA-2019-52059d0901)
Compressed file format that allows easy deltas
--------------------------------------------------------------------------------
Update Information:
This fixes a bug when downloading a zchunk file from a lighttpd server.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 16 2019 Jonathan Dieter <jdieter(a)gmail.com> - 1.0.4-1
- Fix multipart boundary bug when dealing with lighttpd servers
* Sun Feb 3 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.3-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------