The following Fedora 28 Security updates need testing:
Age URL
140
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d510cfd7eb
jgraphx-3.6.0.0-6.fc28
90
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d7aeaa74da
nodejs-brace-expansion-1.1.11-1.fc28
88
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc073fdc1a
nodejs-atob-2.1.1-1.fc28
81
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9dd3f7c013
unrtf-0.21.9-8.fc28
49
https://bodhi.fedoraproject.org/updates/FEDORA-2018-28e9841baf
docker-latest-1.13.1-37.git9cb56fd.fc28
15
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9565c0bc9a
unixODBC-2.3.7-1.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f2b24ce26e
phpMyAdmin-4.8.3-1.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-38bdbafa96
discount-2.2.4-1.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f67fda3db6
community-mysql-5.7.23-1.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-be9f4838dd
dokuwiki-20180422a-1.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5ad77cc979
tcpflow-1.5.0-2.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8344cb89ac yara-3.8.1-1.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8fd21e2a72
python-pycryptodomex-3.6.6-1.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-83bc247d3b
capstone-3.0.5-1.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-0ddef94854
mod_perl-2.0.10-11.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-07083800ac
ghostscript-9.23-6.fc28
The following Fedora 28 Critical Path updates have yet to be approved:
Age URL
13
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a20e0e3c74
pungi-4.1.27-1.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-16c78b3d92 rpm-4.14.2-1.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-fb2271134d glibc-2.27-32.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bcb2a43254 lorax-28.18-1.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5aab3345df
flatpak-1.0.1-1.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bea1e0b465
analitza-18.04.3-2.fc28 appmenu-qt5-0.3.0+16.10.20160628.1-10.fc28 calibre-3.29.0-1.fc28
deepin-qt5integration-0.2.8.3-5.fc28 deepin-tool-kit-0.3.3-8.fc28
dnscrypt-proxy-gui-1.11.15-2.fc28 dtkwidget-2.0.6.1-1.fc28.2 fcitx-qt5-1.2.3-2.fc28
gammaray-2.9.0-4.fc28 gsettings-qt-0-0.11.20170715bzr83.fc28.2
kf5-akonadi-server-18.04.3-2.fc28 kf5-frameworkintegration-5.48.0-2.fc28
kf5-kdeclarative-5.48.0-2.fc28 kf5-kwayland-5.48.0-2.fc28.1 kf5-kxmlgui-5.48.0-3.fc28
kwin-5.13.4-2.fc28 libfm-qt-0.11.2-12.fc28 libqtxdg-2.0.0-13.fc28
lxqt-qtplugin-0.11.1-12.fc28 mscore-2.2.1-4.fc28 plasma-integration-5.13.4-2.fc28
pyotherside-1.5.3-13.fc28 python-qt5-5.10.1-3.fc28 pythonqt-3.2-9.fc28
qgnomeplatform-0.4-2.fc28 qstardict-1.3-4.fc28 qt-creator-4.6.2-2.fc28 qt5-5.11.1-3.fc28
qt5-qt3d-5.11.1-2.fc28 qt5-qtbase-5.11.1-7.fc28 qt5-qtcanvas3d-5.11.1-2.fc28
qt5-qtcharts-5.11.1-4.fc28 qt5-qtconnectivity-5.11.1-2.fc28 qt5-qtdatavis3d-5.11.
1-1.fc28 qt5-qtdeclarative-5.11.1-3.fc28 qt5-qtdoc-5.11.1-2.fc28
qt5-qtenginio-1.6.2-16.fc28 qt5-qtgamepad-5.11.1-3.fc28
qt5-qtgraphicaleffects-5.11.1-2.fc28 qt5-qtimageformats-5.11.1-2.fc28
qt5-qtlocation-5.11.1-3.fc28 qt5-qtmultimedia-5.11.1-2.fc28
qt5-qtquickcontrols-5.11.1-2.fc28 qt5-qtquickcontrols2-5.11.1-2.fc28
qt5-qtremoteobjects-5.11.1-3.fc28 qt5-qtscript-5.11.1-2.fc28 qt5-qtscxml-5.11.1-3.fc28
qt5-qtsensors-5.11.1-2.fc28 qt5-qtserialbus-5.11.1-3.fc28 qt5-qtserialport-5.11.1-2.fc28
qt5-qtspeech-5.11.1-2.fc28 qt5-qtstyleplugins-5.0.0-27.fc28 qt5-qtsvg-5.11.1-2.fc28
qt5-qttools-5.11.1-2.fc28 qt5-qttranslations-5.11.1-2.fc28
qt5-qtvirtualkeyboard-5.11.1-2.fc28 qt5-qtwayland-5.11.1-2.fc28
qt5-qtwebchannel-5.11.1-2.fc28 qt5-qtwebengine-5.11.1-4.fc28
qt5-qtwebkit-5.212.0-0.27.alpha2.fc28 qt5-qtwebsockets-5.11.1-2.fc28
qt5-qtwebview-5.11.1-3.fc28 qt5-qtx11extras-5.11.1-2.fc28 qt5-qtxmlpatterns-5.11.1-3.fc28
qt5ct-0.35-2.fc28 skrooge-2.14.0-1.fc28 texmaker-5.0.2-6.fc28 ugene-1.31.0
-3.fc28 xdg-desktop-portal-kde-5.13.4-2.fc28 yarock-1.3.1-2.fc28
The following builds have been pushed to Fedora 28 updates-testing
containernetworking-plugins-0.7.3-2.fc28
copr-cli-1.74-1.fc28
dmlite-1.10.4-1.fc28
dnssec-tools-2.2.3-1.fc28
fldigi-4.0.18-1.fc28
gd-2.2.5-6.fc28
libssh-0.8.2-1.fc28
mysql-connector-java-8.0.12-1.fc28
origin-3.9.0-4.fc28
perl-PathTools-3.75-1.fc28
pipewire-0.2.3-1.fc28
podman-0.8.4-2.git9f9b8cf.fc28
python-pyfastnoisesimd-0.3.2-1.fc28
rpkg-util-2.4-1.fc28
tpm2-tools-3.0.5-1.fc28
wget-1.19.5-5.fc28
Details about builds:
================================================================================
containernetworking-plugins-0.7.3-2.fc28 (FEDORA-2018-f1f3b41ec3)
Libraries for writing CNI plugin
--------------------------------------------------------------------------------
Update Information:
containernetworking-plugins handles obsoletion of containernetworking-cni
correctly this time, podman build uses this -plugins build as min dep (in
addition to v0.8.4 bump.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 30 2018 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 0.7.3-2
- correct upgrade path from older -cni package
- for whatever reason, "<" works but "<=" doesn't for
obsoletion
--------------------------------------------------------------------------------
================================================================================
copr-cli-1.74-1.fc28 (FEDORA-2018-b904cc80bd)
Command line interface for COPR
--------------------------------------------------------------------------------
Update Information:
- do not require python-progress in epel6
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 30 2018 clime <clime(a)redhat.com> 1.74-1
- python-progress is not present in EL6
--------------------------------------------------------------------------------
================================================================================
dmlite-1.10.4-1.fc28 (FEDORA-2018-1ef38e791e)
Lcgdm grid data management and storage framework
--------------------------------------------------------------------------------
Update Information:
Bugfixes and improvements, in particular to service stability and space
management. ---- Fix for domeadapter configuration.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 27 2018 Oliver Keeble <oliver.keeble(a)cern.ch> - 1.10.4-1
- New upstream release 1.10.4
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.10.3-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Thu Jun 7 2018 Oliver Keeble <oliver.keeble(a)cern.ch> - 1.10.3-1
- New upstream release
* Thu Apr 19 2018 Andrea Manzi <amanzi(a)cern.ch> - 1.10.2-1
- new upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1603802 - dmlite: FTBFS in Fedora rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1603802
--------------------------------------------------------------------------------
================================================================================
dnssec-tools-2.2.3-1.fc28 (FEDORA-2018-eefc954e64)
A suite of tools for managing dnssec aware DNS usage
--------------------------------------------------------------------------------
Update Information:
match upstream version to build correctly ---- fix build issues
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 29 2018 Wes Hardaker <wjhns174(a)hardakers.net> - 2.2.3-1
- match upstream version
* Wed Aug 29 2018 Wes Hardaker <wjhns174(a)hardakers.net> - 2.2.1-2
- add Mail::Send
* Mon Jul 30 2018 Wes Hardaker <wjhns174(a)hardakers.net> - 2.2.1-1
- fix build issues
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.2-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Thu Jun 28 2018 Jitka Plesnikova <jplesnik(a)redhat.com> - 2.2-9
- Perl 5.28 rebuild
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.2-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Wed Aug 2 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.2-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.2-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Sun Jun 4 2017 Jitka Plesnikova <jplesnik(a)redhat.com> - 2.2-5
- Perl 5.26 rebuild
* Fri Feb 10 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.2-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1381613 - dnssec-tools-2.2-3.fc26 FTBFS: 'NS_ALG_MD5RSA' undeclared
here (not in a function)
https://bugzilla.redhat.com/show_bug.cgi?id=1381613
--------------------------------------------------------------------------------
================================================================================
fldigi-4.0.18-1.fc28 (FEDORA-2018-78fbba41db)
Digital modem program for Linux
--------------------------------------------------------------------------------
Update Information:
Version 4.0.18 * maintenance release CPS testing * Fixed broken test
routines ipv6 addressing * Force socket to open IPv4 address when dns
returns both IPv6 and IPv4 addresses. MT63 centering * Modify MT63
to lock "center" of tone sequence to 1500 Hz in audio passband. Request
make by SHARES. fsq mods * Mods submitted by Mike Smith, N4VLF -
add 1.5 baud - increase Rx averaging to 15 - add time stamp to
monitor text * modify # parser to replace slash character in fname with a
period Hamlib bug fix * submitted by Darrin, KA2ZLZ * rig_cmp
function being passed to std::sort in src/rigcontrol/hamlib.cxx was
returning true if the items are equal Tooltip * Fix 8PSK short preamble
tooltip nanoIO * changes dictated by new revision of nanoIO sketch
IFKP/THOR greyscale image * Add grey scale image transfer via macro call
- auto scales to one of the following . 59x74 color/greyscale
. 160x120 color/greyscale . 240x224 color/greyscale . 640x480
color/greyscale . 240x300 color/greyscale . 120x150
color/greyscale - macro usage: . <IMAGE:G,[fname]> greyscale
. <IMAGE:[fname]> color THROB adif * Change THROB adif logging to THRB,
THRBX without reference to speed RigCAT dialog * Change label on TIO
restore - current label easily confused with saving the startup state of
the transceiver.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 30 2018 Richard Shaw <hobbes1069(a)gmail.com> - 4.0.18-1
- Update to 4.0.18.
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.0.17-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1615651 - fldigi-4.0.18 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1615651
--------------------------------------------------------------------------------
================================================================================
gd-2.2.5-6.fc28 (FEDORA-2018-5bf744beee)
A graphics library for quick creation of PNG or JPEG images
--------------------------------------------------------------------------------
Update Information:
Patch Security fix for CVE-2018-1000222 (upstream patch applied)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 30 2018 mskalick(a)redhat.com - 2.2.5-6
- gdimagegrayscale/basic test is till failing on F27 and F28
* Thu Aug 30 2018 mskalick(a)redhat.com - 2.2.5-5
- Check return value in gdImageBmpPtr to avoid double free (CVE-2018-1000222)
- Don't mark gdimagegrayscale/basic test as failing
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.2.5-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1621953 - CVE-2018-1000222 gd: Double free in src/gd_bump.c:gdImageBmpPtr()
via crafted JPEG
https://bugzilla.redhat.com/show_bug.cgi?id=1621953
--------------------------------------------------------------------------------
================================================================================
libssh-0.8.2-1.fc28 (FEDORA-2018-d50ce81953)
A library implementing the SSH protocol
--------------------------------------------------------------------------------
Update Information:
Update to version 0.8.2
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 30 2018 Andreas Schneider <asn(a)redhat.com> - 0.8.2-1
- Update to version 0.8.2
https://www.libssh.org/2018/08/30/libssh-0-8-2
--------------------------------------------------------------------------------
================================================================================
mysql-connector-java-8.0.12-1.fc28 (FEDORA-2018-eb07580441)
Official JDBC driver for MySQL
--------------------------------------------------------------------------------
Update Information:
For release notes of mysql-connector-java 8 continue to
https://dev.mysql.com/doc/relnotes/connector-j/8.0/en/
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 7 2018 Jakub Janco <jjanco(a)redhat.com> - 1:8.0.12-1
- new version
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
1:5.1.38-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
1:5.1.38-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
origin-3.9.0-4.fc28 (FEDORA-2018-8296c3a5cb)
OpenShift Open Source Container Management by Red Hat
--------------------------------------------------------------------------------
Update Information:
Fixed node post scriplet.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 29 2018 Jakub ��ajka <jcajka(a)fedoraproject.org> - 3.9.0-4
- fix node post scriptlet
- Resolves: BZ#1622150
* Fri Jun 29 2018 Jakub ��ajka <jcajka(a)fedoraproject.org> - 3.9.0-3
- incorporate changes from the upstream spec file
- move to hyperkube
- add alternatives for hyperkube
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1622150 - Installing origin-master produces error messages
https://bugzilla.redhat.com/show_bug.cgi?id=1622150
--------------------------------------------------------------------------------
================================================================================
perl-PathTools-3.75-1.fc28 (FEDORA-2018-dd061fde81)
PathTools Perl module (Cwd, File::Spec)
--------------------------------------------------------------------------------
Update Information:
This release makes tests more portable. We deliver it only to provide an up-to-
date version string.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 30 2018 Petr Pisar <ppisar(a)redhat.com> - 3.75-1
- 3.75 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1623844 - perl-PathTools-3.75 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1623844
--------------------------------------------------------------------------------
================================================================================
pipewire-0.2.3-1.fc28 (FEDORA-2018-973e14809c)
Media Sharing Server
--------------------------------------------------------------------------------
Update Information:
Update to 0.2.3
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 30 2018 Wim Taymans <wtaymans(a)redhat.com> - 0.2.3-1
- Update to 0.2.3
--------------------------------------------------------------------------------
================================================================================
podman-0.8.4-2.git9f9b8cf.fc28 (FEDORA-2018-f1f3b41ec3)
Manage Pods, Containers and Container Images
--------------------------------------------------------------------------------
Update Information:
containernetworking-plugins handles obsoletion of containernetworking-cni
correctly this time, podman build uses this -plugins build as min dep (in
addition to v0.8.4 bump.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 30 2018 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 0.8.4-2.git9f9b8c
- correct min dep on containernetworking-plugins
- update bundled provides
* Sun Aug 26 2018 Dan Walsh <dwalsh(a)redhat.com> - 0.8.4-1.git9f9b8c
- Upstream 0.8.4 release
--------------------------------------------------------------------------------
================================================================================
python-pyfastnoisesimd-0.3.2-1.fc28 (FEDORA-2018-f512fb3ab0)
Python Fast Noise with SIMD
--------------------------------------------------------------------------------
Update Information:
Initial package of pyfastnoisesimd for Python
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1606944 - Review Request: python-pyfastnoisesimd - Python Fast Noise with
SIMD
https://bugzilla.redhat.com/show_bug.cgi?id=1606944
--------------------------------------------------------------------------------
================================================================================
rpkg-util-2.4-1.fc28 (FEDORA-2018-c2f7daeaa3)
RPM packaging utility
--------------------------------------------------------------------------------
Update Information:
- fix pg#13: print out more information when lookaside cache is missing - fix
verrel command
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 29 2018 clime <clime(a)redhat.com> 2.4-1
- fix pg#13: print out more information when lookaside cache is missing
- fix verrel command
--------------------------------------------------------------------------------
================================================================================
tpm2-tools-3.0.5-1.fc28 (FEDORA-2018-f0d0a73c7c)
A TPM2.0 testing tool build upon TPM2.0-TSS
--------------------------------------------------------------------------------
Update Information:
This version is a minor release that contains a couple of fixes.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 13 2018 Javier Martinez Canillas <javierm(a)redhat.com> - 3.0.5-1
- Update to 3.0.5 release
--------------------------------------------------------------------------------
================================================================================
wget-1.19.5-5.fc28 (FEDORA-2018-c9501d5ea8)
A utility for retrieving files using the HTTP or FTP protocols
--------------------------------------------------------------------------------
Update Information:
- fixed two bugs
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 29 2018 Tomas Hozza <thozza(a)redhat.com> - 1.19.5-5
- Avoid creating empty wget-log when using -O and -q in background (#1484411)
* Tue Aug 28 2018 Tomas Korbar <tkorbar(a)redhat.com> - 1.19.5-4
- Add zlib-devel to buildrequires (#1612891)
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.19.5-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Tue Jun 26 2018 Tomas Hozza <thozza(a)redhat.com> - 1.19.5-2
- Don't install info files in scriptlets
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1612891 - Wget fails to gzip warc files
https://bugzilla.redhat.com/show_bug.cgi?id=1612891
[ 2 ] Bug #1484411 - Running wget with -O and -q in the background yields a file
wget-log
https://bugzilla.redhat.com/show_bug.cgi?id=1484411
--------------------------------------------------------------------------------