The following Fedora 28 Security updates need testing:
Age URL
375
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d510cfd7eb
jgraphx-3.6.0.0-6.fc28
325
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d7aeaa74da
nodejs-brace-expansion-1.1.11-1.fc28
323
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc073fdc1a
nodejs-atob-2.1.1-1.fc28
199
https://bodhi.fedoraproject.org/updates/FEDORA-2018-cc4b7af297
xerces-c27-2.7.0-28.fc28
152
https://bodhi.fedoraproject.org/updates/FEDORA-2018-aa3752ac3c
nginx-1.14.1-1.fc28
131
https://bodhi.fedoraproject.org/updates/FEDORA-2018-cc86ef9e22 squid-4.4-1.fc28
58
https://bodhi.fedoraproject.org/updates/FEDORA-2019-86412405d5
bind-9.11.5-4.P4.fc28
45
https://bodhi.fedoraproject.org/updates/FEDORA-2019-63029a7692
libu2f-host-1.1.8-1.fc28
26
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ba19e79e9a
thunderbird-60.6.1-1.fc28
24
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8b8c774b84
aria2-1.34.0-4.fc28
23
https://bodhi.fedoraproject.org/updates/FEDORA-2019-0927602e59
chromium-73.0.3683.86-2.fc28
18
https://bodhi.fedoraproject.org/updates/FEDORA-2019-a4ed7400f4
httpd-2.4.39-1.fc28
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-019c5314a0
samba-4.8.11-0.fc28
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-64ed5e4dfa znc-1.7.3-1.fc28
10
https://bodhi.fedoraproject.org/updates/FEDORA-2019-235c682f35
wavpack-5.1.0-12.fc28
10
https://bodhi.fedoraproject.org/updates/FEDORA-2019-902786bc1e
gradle-4.3.1-9.fc28
10
https://bodhi.fedoraproject.org/updates/FEDORA-2019-bbdaeae59f
freeradius-3.0.19-1.fc28
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d9f867cb65
jetty-9.4.11-3.v20180605.fc28
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-432b3dff25
webkit2gtk3-2.24.1-1.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4f978cacb4
python-jinja2-2.10.1-1.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6a756fe3a5
libX11-1.6.7-1.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3193a75b06
poppler-0.62.0-22.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8560719e80
python-urllib3-1.24.2-1.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3ee6a7adf2
php-symfony-2.8.51-1.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-2a7f472198
php-symfony3-3.4.26-1.fc28
The following Fedora 28 Critical Path updates have yet to be approved:
Age URL
131
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9f541b469b
nfs-utils-2.3.3-1.rc2.fc28
95
https://bodhi.fedoraproject.org/updates/FEDORA-2019-78153d357c
totem-pl-parser-3.26.2-1.fc28
87
https://bodhi.fedoraproject.org/updates/FEDORA-2019-bb30467485
ostree-2019.1-2.fc28 rpm-ostree-2019.1-1.fc28
79
https://bodhi.fedoraproject.org/updates/FEDORA-2019-cb4a3023ef
iproute-4.20.0-1.fc28
62
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6c4e362bd0 dhcp-4.3.6-22.fc28
dnsperf-2.2.1-1.fc28 bind-dyndb-ldap-11.1-13.fc28 bind-9.11.5-2.P1.fc28
40
https://bodhi.fedoraproject.org/updates/FEDORA-2019-cb98bf5ace
fedfind-4.2.2-1.fc28 python-productmd-1.20-1.fc28
32
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e60ecc03b4
python-productmd-1.21-1.fc28
32
https://bodhi.fedoraproject.org/updates/FEDORA-2019-457ab67a6c
psmisc-23.1-3.1.fc28
26
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ba19e79e9a
thunderbird-60.6.1-1.fc28
25
https://bodhi.fedoraproject.org/updates/FEDORA-2019-a0ae4e93b9 sssd-1.16.4-2.fc28
17
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ba19af6a58
libldb-1.4.0-5.fc28.1.3.8 samba-4.8.10-0.fc28
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-019c5314a0
samba-4.8.11-0.fc28
10
https://bodhi.fedoraproject.org/updates/FEDORA-2019-a9b42f633a
perl-5.26.3-418.fc28
10
https://bodhi.fedoraproject.org/updates/FEDORA-2019-235c682f35
wavpack-5.1.0-12.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6a756fe3a5
libX11-1.6.7-1.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8b830d65da
firefox-66.0.3-1.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-787f9bf22f opus-1.3.1-1.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4abd64aaaf
libseccomp-2.4.1-0.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8560719e80
python-urllib3-1.24.2-1.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-7e1c3c9d19
python-mako-1.0.9-1.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3193a75b06
poppler-0.62.0-22.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8d90cbcfd9
libbluray-1.1.1-1.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-49e971b7fb
linux-firmware-20190416-95.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9308674cab pcre2-10.33-1.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b042a87a74
libiptcdata-1.0.5-1.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-bc14eac80e
libblockdev-2.18-2.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-22b805ed73
kernel-5.0.8-100.fc28
The following builds have been pushed to Fedora 28 updates-testing
ceph-12.2.12-1.fc28
fldigi-4.1.03-1.fc28
fllog-1.2.6-1.fc28
flrig-1.3.43-1.fc28
http-parser-2.9.2-1.fc28
hub-2.11.2-1.fc28
libmediainfo-18.12-3.fc28
mediawriter-4.1.3-1.fc28
mingw-mediawriter-4.1.3-1.fc28
Details about builds:
================================================================================
ceph-12.2.12-1.fc28 (FEDORA-2019-dddd3b8418)
User space components of the Ceph file system
--------------------------------------------------------------------------------
Update Information:
New release (1:12.2.12-1)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 12 2019 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 1:12.2.12-1
- New release (1:12.2.12-1)
--------------------------------------------------------------------------------
================================================================================
fldigi-4.1.03-1.fc28 (FEDORA-2019-e7f9ea4bab)
Digital modem program for Linux
--------------------------------------------------------------------------------
Update Information:
Fldigi 4.1.02 = 2019-04-10 David Freese <w1hkj(a)bellsouth.net>
055bbbc: Xmlrpc Rig control c04d2c5: notifier dialog 2f24966:
wfall only tests c2dd5f8: waterfall process 2dcd586: Language
update 07f3b66: Documentation update 6fa7cb8: N3FJP ACL
791f084: CQzone 4670875: trx_xmit_wfall_draw 933f6b8: Log
rotation 5c6d04e: Secure METAR 6b86a02: lgbook File:
2ca145a: qrz malloc 1593939: Rx Panel clicking ef4ecf3: myCall
5224d09: QTE-QRB 7944d44: Olivia modes 6dfac39: logbook-backups
43a4c74: ARQ server aeb0ff4: fllog eQSL/LoTW d756b06: XmlRpc Log
Dup Check db20208: flrig ptt b01c3b6: DxCluster/N3FJP i/o
22735f4: eQSL / LoTW submission a0bd33b: mbedtls CFLAGS 590181b:
lookup call c29f732: MODE export 582f98b: flarq socket
ef6456f: eQSL export f15f71c: tod clock start 14c092d: ARQ
socket i/o 4886d58: analysis mode Flrig 1.3.43 = 2019-04-10 David
Freese <w1hkj(a)bellsouth.net> afe2257: Start/Stop Progress
f9cd7e4: Trace start/exit 1ecc06f: New xmlrpc functions 1c2aa3f:
TS890S b7288a4: Icom filter table Fllog 1.2.6 = 2019-04-12 David
Freese <w1hkj(a)bellsouth.net> 7048549: Documentation 51bab10:
Miscellaneous changes 78056ce: EQSLSDATE e3959e0: FMHELL
0bec1bc: Dup check/reverse 0b619bd: XmlRpc Server dd4c423:
eQSL/LoTW submit dates 4798954: Duplicates a8a8b8b: New/Cancel
0416ba9: gm date/time 861ce93: Export ADIF d155fb7: QSOdb
structure c70f852: nulog e2ea153: OS X build scripts
f7372e4: Merge resort
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 22 2019 Richard Shaw <hobbes1069(a)gmail.com> - 4.1.03-1
- Update to 4.1.03.
* Sun Apr 14 2019 Richard Shaw <hobbes1069(a)gmail.com> - 4.1.02-1
- Update to 4.1.02.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1699526 - flrig-1.3.43 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1699526
[ 2 ] Bug #1699524 - fldigi-4.1.02 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1699524
[ 3 ] Bug #1699525 - fllog-1.2.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1699525
[ 4 ] Bug #1701756 - fldigi-4.1.03 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1701756
--------------------------------------------------------------------------------
================================================================================
fllog-1.2.6-1.fc28 (FEDORA-2019-e7f9ea4bab)
Amateur Radio Log Program
--------------------------------------------------------------------------------
Update Information:
Fldigi 4.1.02 = 2019-04-10 David Freese <w1hkj(a)bellsouth.net>
055bbbc: Xmlrpc Rig control c04d2c5: notifier dialog 2f24966:
wfall only tests c2dd5f8: waterfall process 2dcd586: Language
update 07f3b66: Documentation update 6fa7cb8: N3FJP ACL
791f084: CQzone 4670875: trx_xmit_wfall_draw 933f6b8: Log
rotation 5c6d04e: Secure METAR 6b86a02: lgbook File:
2ca145a: qrz malloc 1593939: Rx Panel clicking ef4ecf3: myCall
5224d09: QTE-QRB 7944d44: Olivia modes 6dfac39: logbook-backups
43a4c74: ARQ server aeb0ff4: fllog eQSL/LoTW d756b06: XmlRpc Log
Dup Check db20208: flrig ptt b01c3b6: DxCluster/N3FJP i/o
22735f4: eQSL / LoTW submission a0bd33b: mbedtls CFLAGS 590181b:
lookup call c29f732: MODE export 582f98b: flarq socket
ef6456f: eQSL export f15f71c: tod clock start 14c092d: ARQ
socket i/o 4886d58: analysis mode Flrig 1.3.43 = 2019-04-10 David
Freese <w1hkj(a)bellsouth.net> afe2257: Start/Stop Progress
f9cd7e4: Trace start/exit 1ecc06f: New xmlrpc functions 1c2aa3f:
TS890S b7288a4: Icom filter table Fllog 1.2.6 = 2019-04-12 David
Freese <w1hkj(a)bellsouth.net> 7048549: Documentation 51bab10:
Miscellaneous changes 78056ce: EQSLSDATE e3959e0: FMHELL
0bec1bc: Dup check/reverse 0b619bd: XmlRpc Server dd4c423:
eQSL/LoTW submit dates 4798954: Duplicates a8a8b8b: New/Cancel
0416ba9: gm date/time 861ce93: Export ADIF d155fb7: QSOdb
structure c70f852: nulog e2ea153: OS X build scripts
f7372e4: Merge resort
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 14 2019 Richard Shaw <hobbes1069(a)gmail.com> - 1.2.6-1
- Update to 1.2.6.
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.5-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.5-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1699526 - flrig-1.3.43 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1699526
[ 2 ] Bug #1699524 - fldigi-4.1.02 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1699524
[ 3 ] Bug #1699525 - fllog-1.2.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1699525
[ 4 ] Bug #1701756 - fldigi-4.1.03 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1701756
--------------------------------------------------------------------------------
================================================================================
flrig-1.3.43-1.fc28 (FEDORA-2019-e7f9ea4bab)
Transceiver control program
--------------------------------------------------------------------------------
Update Information:
Fldigi 4.1.02 = 2019-04-10 David Freese <w1hkj(a)bellsouth.net>
055bbbc: Xmlrpc Rig control c04d2c5: notifier dialog 2f24966:
wfall only tests c2dd5f8: waterfall process 2dcd586: Language
update 07f3b66: Documentation update 6fa7cb8: N3FJP ACL
791f084: CQzone 4670875: trx_xmit_wfall_draw 933f6b8: Log
rotation 5c6d04e: Secure METAR 6b86a02: lgbook File:
2ca145a: qrz malloc 1593939: Rx Panel clicking ef4ecf3: myCall
5224d09: QTE-QRB 7944d44: Olivia modes 6dfac39: logbook-backups
43a4c74: ARQ server aeb0ff4: fllog eQSL/LoTW d756b06: XmlRpc Log
Dup Check db20208: flrig ptt b01c3b6: DxCluster/N3FJP i/o
22735f4: eQSL / LoTW submission a0bd33b: mbedtls CFLAGS 590181b:
lookup call c29f732: MODE export 582f98b: flarq socket
ef6456f: eQSL export f15f71c: tod clock start 14c092d: ARQ
socket i/o 4886d58: analysis mode Flrig 1.3.43 = 2019-04-10 David
Freese <w1hkj(a)bellsouth.net> afe2257: Start/Stop Progress
f9cd7e4: Trace start/exit 1ecc06f: New xmlrpc functions 1c2aa3f:
TS890S b7288a4: Icom filter table Fllog 1.2.6 = 2019-04-12 David
Freese <w1hkj(a)bellsouth.net> 7048549: Documentation 51bab10:
Miscellaneous changes 78056ce: EQSLSDATE e3959e0: FMHELL
0bec1bc: Dup check/reverse 0b619bd: XmlRpc Server dd4c423:
eQSL/LoTW submit dates 4798954: Duplicates a8a8b8b: New/Cancel
0416ba9: gm date/time 861ce93: Export ADIF d155fb7: QSOdb
structure c70f852: nulog e2ea153: OS X build scripts
f7372e4: Merge resort
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 14 2019 Richard Shaw <hobbes1069(a)gmail.com> - 1.3.43-1
- Update to 1.3.43.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1699526 - flrig-1.3.43 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1699526
[ 2 ] Bug #1699524 - fldigi-4.1.02 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1699524
[ 3 ] Bug #1699525 - fllog-1.2.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1699525
[ 4 ] Bug #1701756 - fldigi-4.1.03 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1701756
--------------------------------------------------------------------------------
================================================================================
http-parser-2.9.2-1.fc28 (FEDORA-2019-4b9de6ad55)
HTTP request/response parser for C
--------------------------------------------------------------------------------
Update Information:
Update to 2.9.2
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 22 2019 Stephen Gallagher <sgallagh(a)redhat.com> - 2.9.2-1
- Update to 2.9.2
* Tue Apr 16 2019 Adam Williamson <awilliam(a)redhat.com> - 2.9.1-2
- Rebuild with Meson fix for #1699099
* Thu Apr 11 2019 Stephen Gallagher <sgallagh(a)redhat.com> - 2.9.1-1
- Update to 2.9.1
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.9.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.8.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Mon Apr 2 2018 Stephen Gallagher <sgallagh(a)redhat.com> - 2.8.1-1
- Update to 2.8.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1698679 - http-parser-2.9.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1698679
--------------------------------------------------------------------------------
================================================================================
hub-2.11.2-1.fc28 (FEDORA-2019-cd09bcf0a6)
A command-line wrapper for git with github shortcuts
--------------------------------------------------------------------------------
Update Information:
Update to 2.11.2
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 22 2019 Stephen Gallagher <sgallagh(a)redhat.com> - 2.11.2-1
- Update to 2.11.2
- Avoid crash in hub remote argument parsing
- Fix `hub -C mydir merge <URL>` by propagating global git arguments to
Before/After chains
- Preserve tilde ~ character in man pages
--------------------------------------------------------------------------------
================================================================================
libmediainfo-18.12-3.fc28 (FEDORA-2019-79cb2bb18e)
Library for supplies technical and tag information about a video or audio file
--------------------------------------------------------------------------------
Update Information:
Fix CVE-2019-11372
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 22 2019 Vasiliy N. Glazov <vascom2(a)gmail.com> - 18.12-3
- Fix CVE-2019-11372
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 18.12-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1701849 - CVE-2019-11372 CVE-2019-11373 libmediainfo: various flaws
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1701849
[ 2 ] Bug #1701847 - CVE-2019-11372 CVE-2019-11373 libmediainfo: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1701847
--------------------------------------------------------------------------------
================================================================================
mediawriter-4.1.3-1.fc28 (FEDORA-2019-c6e6acda19)
Fedora Media Writer
--------------------------------------------------------------------------------
Update Information:
Update to 4.1.3. Mostly a bugfix release. ---- Update to 4.1.2
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 21 2019 Martin B����za <m(a)rtinbriza.cz> - 4.1.3-1
- Update to 4.1.3
- Resolves #1574717
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.1.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1664530 - Fedora 29 Media Writer crashes on Windows 7/10 when Server image is
selected
https://bugzilla.redhat.com/show_bug.cgi?id=1664530
[ 2 ] Bug #1611590 - mingw-mediawriter-4.1.2.90 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1611590
--------------------------------------------------------------------------------
================================================================================
mingw-mediawriter-4.1.3-1.fc28 (FEDORA-2019-c6e6acda19)
Fedora Media Writer
--------------------------------------------------------------------------------
Update Information:
Update to 4.1.3. Mostly a bugfix release. ---- Update to 4.1.2
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 21 2019 Martin B����za <m(a)rtinbriza.cz> - 4.1.3-1
- Update to 4.1.3
- Resolves #1664530
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.1.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Thu Aug 2 2018 Martin B����za <m(a)rtinbriza.cz> - 4.1.2-1
- Update to 4.1.2
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.1.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.1.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1664530 - Fedora 29 Media Writer crashes on Windows 7/10 when Server image is
selected
https://bugzilla.redhat.com/show_bug.cgi?id=1664530
[ 2 ] Bug #1611590 - mingw-mediawriter-4.1.2.90 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1611590
--------------------------------------------------------------------------------