The following Fedora 28 Security updates need testing:
Age URL
405
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d510cfd7eb
jgraphx-3.6.0.0-6.fc28
354
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d7aeaa74da
nodejs-brace-expansion-1.1.11-1.fc28
353
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc073fdc1a
nodejs-atob-2.1.1-1.fc28
229
https://bodhi.fedoraproject.org/updates/FEDORA-2018-cc4b7af297
xerces-c27-2.7.0-28.fc28
182
https://bodhi.fedoraproject.org/updates/FEDORA-2018-aa3752ac3c
nginx-1.14.1-1.fc28
161
https://bodhi.fedoraproject.org/updates/FEDORA-2018-cc86ef9e22 squid-4.4-1.fc28
88
https://bodhi.fedoraproject.org/updates/FEDORA-2019-86412405d5
bind-9.11.5-4.P4.fc28
75
https://bodhi.fedoraproject.org/updates/FEDORA-2019-63029a7692
libu2f-host-1.1.8-1.fc28
53
https://bodhi.fedoraproject.org/updates/FEDORA-2019-0927602e59
chromium-73.0.3683.86-2.fc28
21
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9dfd44e1e9
python-gnupg-0.4.4-1.fc28
19
https://bodhi.fedoraproject.org/updates/FEDORA-2019-04e7d39ad3
community-mysql-5.7.26-1.fc28
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9b58ccab2c
freeradius-3.0.19-3.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9f48c6fedc
singularity-3.1.1-1.1.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3185617acc
mariadb-10.2.24-1.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-7155125125
mediaconch-18.03.2-7.fc28 libmediainfo-19.04-1.fc28 mediainfo-19.04-1.fc28
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-41d6ffd6f0
drupal7-7.67-1.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-09bddbae3b
wavpack-5.1.0-13.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ed672391a2
webkit2gtk3-2.24.2-1.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8095623449
drupal7-entity-1.9-1.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-41de525c08
kernel-5.0.17-100.fc28
The following Fedora 28 Critical Path updates have yet to be approved:
Age URL
161
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9f541b469b
nfs-utils-2.3.3-1.rc2.fc28
125
https://bodhi.fedoraproject.org/updates/FEDORA-2019-78153d357c
totem-pl-parser-3.26.2-1.fc28
117
https://bodhi.fedoraproject.org/updates/FEDORA-2019-bb30467485
ostree-2019.1-2.fc28 rpm-ostree-2019.1-1.fc28
109
https://bodhi.fedoraproject.org/updates/FEDORA-2019-cb4a3023ef
iproute-4.20.0-1.fc28
92
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6c4e362bd0 dhcp-4.3.6-22.fc28
dnsperf-2.2.1-1.fc28 bind-dyndb-ldap-11.1-13.fc28 bind-9.11.5-2.P1.fc28
70
https://bodhi.fedoraproject.org/updates/FEDORA-2019-cb98bf5ace
fedfind-4.2.2-1.fc28 python-productmd-1.20-1.fc28
62
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e60ecc03b4
python-productmd-1.21-1.fc28
33
https://bodhi.fedoraproject.org/updates/FEDORA-2019-bc14eac80e
libblockdev-2.18-2.fc28
27
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9244c8b209
pungi-4.1.36-1.fc28
21
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c82d274716 dhcp-4.3.6-23.fc28
19
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3ab1dba357
hwdata-0.323-1.fc28
18
https://bodhi.fedoraproject.org/updates/FEDORA-2019-44ac6082f0 fuse-2.9.9-7.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-85907cf348
linux-firmware-20190514-96.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-09bddbae3b
wavpack-5.1.0-13.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-41de525c08
kernel-5.0.17-100.fc28
The following builds have been pushed to Fedora 28 updates-testing
copr-frontend-1.150-1.fc28
firefox-67.0-3.fc28
libreswan-3.28-1.fc28
libuv-1.29.1-1.fc28
mozilla-https-everywhere-2019.5.13-1.fc28
netdata-1.15.0-1.fc28
nv-codec-headers-8.1.24.9-2.fc28
python-openqa_client-1.3.2-1.fc28
squashfs-tools-4.3-20.fc28
thunderbird-60.7.0-1.fc28
Details about builds:
================================================================================
copr-frontend-1.150-1.fc28 (FEDORA-2019-a6aa8015fc)
Frontend for Copr
--------------------------------------------------------------------------------
Update Information:
- fix the script for prolonged outdated chroots - add RHEL 8 (rhelbeta) chroot
logo - correctly describe "Create repositories manually" - remove unused
module_md_name and module_md_zlib columns - sort package (build)requires - use
humanize in time_ago(); fix #724 - automatize outdated chroots notifications and
deletion - notify outdated chroots with 80 days interval - don't unselect
inactive chroots in project edit; fix #712 - print soon-to-remove outdated
chroots in red; see #593 - cron: call 'clean_expired_projects' correctly -
traceback when forked_from project deleted - disable "expire now" button when
chroot is already expired - NameError: name 'unicode' is not defined - require
wtforms version with render_kw
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 21 2019 Pavel Raiskup <praiskup(a)redhat.com> 1.150-1
- fix the script for prolonged outdated chroots
- add RHEL 8 (rhelbeta) chroot logo
- correctly describe "Create repositories manually"
- remove unused module_md_name and module_md_zlib columns
- sort package (build)requires
- use humanize in time_ago(); fix #724
- automatize outdated chroots notifications and deletion
- notify outdated chroots with 80 days interval
- don't unselect inactive chroots in project edit; fix #712
- print soon-to-remove outdated chroots in red; see #593
- cron: call 'clean_expired_projects' correctly
- traceback when forked_from project deleted
- disable "expire now" button when chroot is already expired
- NameError: name 'unicode' is not defined
- require wtforms version with render_kw
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #724 - Screen saver with/without password swapped
https://bugzilla.redhat.com/show_bug.cgi?id=724
[ 2 ] Bug #712 - Printtool wording is incorrect.
https://bugzilla.redhat.com/show_bug.cgi?id=712
[ 3 ] Bug #593 - wrong symlink in man dir
https://bugzilla.redhat.com/show_bug.cgi?id=593
--------------------------------------------------------------------------------
================================================================================
firefox-67.0-3.fc28 (FEDORA-2019-932de3abc1)
Mozilla Firefox Web browser
--------------------------------------------------------------------------------
Update Information:
- New upstream version (67.0) - Release notes are available at
https://www.mozilla.org/en-US/firefox/67.0/releasenotes/ ---- - New upstream
version (66.0.5) - Release notes -
https://www.mozilla.org/en-
US/firefox/66.0.5/releasenotes/
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 17 2019 Martin Stransky <stransky(a)redhat.com> - 67.0-3
- Use %lang() in regular builds.
- Updated to 67.0 Build 2
* Thu May 16 2019 Jan Horak <jhorak(a)redhat.com> - 67.0-2
- Removed %lang() prefix from langpacks file list due to flatpak
* Wed May 15 2019 Martin Stransky <stransky(a)redhat.com> - 67.0-1
- Updated to 67.0
* Wed May 8 2019 Martin Stransky <stransky(a)redhat.com> - 66.0.5-1
- Updated to 66.0.5
--------------------------------------------------------------------------------
================================================================================
libreswan-3.28-1.fc28 (FEDORA-2019-4686746e26)
IPsec implementation with IKEv1 and IKEv2 keying protocols
--------------------------------------------------------------------------------
Update Information:
Updated to 3.28 (many imported bugfixes)
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 21 2019 Paul Wouters <pwouters(a)redhat.com> - 3.28-1
- Updated to 3.28 (many imported bugfixes)
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.27-1.2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Mon Jan 14 2019 Bj��rn Esser <besser82(a)fedoraproject.org> - 3.27-1.1
- Rebuilt for libcrypt.so.2 (#1666033)
--------------------------------------------------------------------------------
================================================================================
libuv-1.29.1-1.fc28 (FEDORA-2019-26c92c6b41)
Platform layer for node.js
--------------------------------------------------------------------------------
Update Information:
Update to libuv 1.29.1 * unix: simplify uv/posix.h include logic * linux: fix
sscanf() overflows reading from /proc ---- Update to libuv 1.29.0
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 21 2019 Stephen Gallagher <sgallagh(a)redhat.com> - 1.29.1-1
- Update to 1.29.1
-
https://github.com/libuv/libuv/blob/v1.29.1/ChangeLog
* Wed May 15 2019 Stephen Gallagher <sgallagh(a)redhat.com> - 1.29.0-1
- Update to 1.29.0
- Drop upstreamed patch
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1712475 - libuv-1.29.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1712475
[ 2 ] Bug #1700033 - libuv-1.29.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1700033
--------------------------------------------------------------------------------
================================================================================
mozilla-https-everywhere-2019.5.13-1.fc28 (FEDORA-2019-38c7e47d98)
HTTPS enforcement extension for Mozilla Firefox
--------------------------------------------------------------------------------
Update Information:
- UI and functionality patches for stable rules - Translations string fixes -
Minor npm updates for HSTS pruning
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 21 2019 Russell Golden <niveusluna(a)fedoraproject.org> - 2019.5.13-1
- UI and functionality patches for stable rules
- Translations string fixes
- Minor npm updates for HSTS pruning
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1709619 - mozilla-https-everywhere-2019.5.13 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1709619
--------------------------------------------------------------------------------
================================================================================
netdata-1.15.0-1.fc28 (FEDORA-2019-045c4f0f25)
Real-time performance monitoring
--------------------------------------------------------------------------------
Update Information:
Update from upstream
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 21 2019 Didier Fabert <didier.fabert(a)gmail.com> 1.15.0-1
- Update from upstream
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1712289 - netdata-1.15.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1712289
--------------------------------------------------------------------------------
================================================================================
nv-codec-headers-8.1.24.9-2.fc28 (FEDORA-2019-f5a8db3e85)
FFmpeg version of Nvidia Codec SDK headers
--------------------------------------------------------------------------------
Update Information:
Fix path in pkg-config file ---- - Update
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 21 2019 Leigh Scott <leigh123linux(a)googlemail.com> - 8.1.24.9-2
- Use correct path for pkg-config file
* Sat May 11 2019 Leigh Scott <leigh123linux(a)googlemail.com> - 8.1.24.9-1
- Update to 8.1.24.9
--------------------------------------------------------------------------------
================================================================================
python-openqa_client-1.3.2-1.fc28 (FEDORA-2019-3bbf00c272)
Python client library for openQA API
--------------------------------------------------------------------------------
Update Information:
This new release updates constant definitions in line with current upstream
openQA. Note one job state - `WAITING` - was removed, as it was removed from
upstream openQA. This state was rarely encountered in any case and its removal
should not matter much, but be aware of it if you are using this with a very old
openQA instance, for some reason.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 21 2019 Adam Williamson <awilliam(a)redhat.com> - 1.3.2-1
- New release 1.3.2 (updated constants for upstream changes)
* Sat Feb 2 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.1-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Fri Nov 23 2018 Adam Williamson <awilliam(a)redhat.com> - 1.3.1-5
- Disable Python 2 build on F30+ / RHEL 8+
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.1-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 1.3.1-3
- Rebuilt for Python 3.7
--------------------------------------------------------------------------------
================================================================================
squashfs-tools-4.3-20.fc28 (FEDORA-2019-a038eb276e)
Utility for the creation of squashfs filesystems
--------------------------------------------------------------------------------
Update Information:
Fix issue with LDFLAGS not being set
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 21 2019 Bruno Wolff III <bruno(a)wolff.to> - 4.3-20
- Fix issue with LDFLAGS not being set
* Tue May 21 2019 Bruno Wolff III <bruno(a)wolff.to> - 4.3-19
- Fix issue with glibc changes
* Sun Feb 3 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.3-18
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.3-17
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
thunderbird-60.7.0-1.fc28 (FEDORA-2019-3706d96191)
Mozilla Thunderbird mail/newsgroup client
--------------------------------------------------------------------------------
Update Information:
- New upstream version (60.7.0) - Release notes are available at
https://www.thunderbird.net/en-US/thunderbird/60.7.0/releasenotes/ ---- - New
upstream version (60.6.1) - Details at
https://www.thunderbird.net/en-
US/thunderbird/60.6.1/releasenotes/ ---- - Update to latest version (60.6.0)
---- - new upstream version (60.5.3) ---- - new upstream version with skia
security fixes - more details at
https://www.thunderbird.net/en-
US/thunderbird/60.5.1/releasenotes/ ---- - Updated to latest version (60.5.0)
-
https://www.thunderbird.net/en-US/thunderbird/60.5.0/releasenotes/ -
Backported Wayland patches from Firefox 65.0
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 20 2019 Martin Stransky <stransky(a)redhat.com> - 60.7.0-1
- Update to 60.7.0
* Wed May 15 2019 Martin Stransky <stransky(a)redhat.com> - 60.6.1-5
- Fixed startup crashes (rhbz#1709373, rhbz#1685276, rhbz#1708611)
* Fri Apr 12 2019 Martin Stransky <stransky(a)redhat.com> - 60.6.1-4
- Addef fix for mozbz#1508378
* Wed Apr 3 2019 Martin Stransky <stransky(a)redhat.com> - 60.6.1-3
- Added fixes for mozbz#1526243, mozbz#1540145, mozbz#526293
* Tue Mar 26 2019 Martin Stransky <stransky(a)redhat.com> - 60.6.1-2
- Added rawhide build fix
* Mon Mar 25 2019 Martin Stransky <stransky(a)redhat.com> - 60.6.1-1
- Update to 60.6.1
* Mon Mar 18 2019 Martin Stransky <stransky(a)redhat.com> - 60.6.0-1
- Update to 60.6.0
* Wed Mar 6 2019 Martin Stransky <stransky(a)redhat.com> - 60.5.3-1
- Update to 60.5.3
* Sat Mar 2 2019 Kalev Lember <klember(a)redhat.com> - 60.5.1-3
- Fix hunspell dictionary symlink when built for flatpak
* Thu Feb 21 2019 Kalev Lember <klember(a)redhat.com> - 60.5.1-2
- Avoid hardcoding /usr in launcher scripts
* Mon Feb 18 2019 Martin Stransky <stransky(a)redhat.com> - 60.5.1-1
- Update to 60.5.1
* Tue Feb 5 2019 Martin Stransky <stransky(a)redhat.com> - 60.5.0-4
- Use MOZ_ENABLE_WAYLAND for Wayland launcher.
* Tue Feb 5 2019 Martin Stransky <stransky(a)redhat.com> - 60.5.0-3
- Updated Wayland patches
* Sun Feb 3 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 60.5.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Wed Jan 30 2019 Martin Stransky <stransky(a)redhat.com> - 60.5.0-1
- Update to 60.5.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1692422 - thunderbird-60.7.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1692422
[ 2 ] Bug #1676141 - thunderbird: FTBFS in Fedora rawhide/f30
https://bugzilla.redhat.com/show_bug.cgi?id=1676141
[ 3 ] Bug #1670523 - thunderbird-60.6.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1670523
--------------------------------------------------------------------------------