The following Fedora 28 Security updates need testing: Age URL 215 https://bodhi.fedoraproject.org/updates/FEDORA-2018-d510cfd7eb jgraphx-3.6.0.0-6.fc28 164 https://bodhi.fedoraproject.org/updates/FEDORA-2018-d7aeaa74da nodejs-brace-expansion-1.1.11-1.fc28 163 https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc073fdc1a nodejs-atob-2.1.1-1.fc28 156 https://bodhi.fedoraproject.org/updates/FEDORA-2018-9dd3f7c013 unrtf-0.21.9-8.fc28 124 https://bodhi.fedoraproject.org/updates/FEDORA-2018-28e9841baf docker-latest-1.13.1-37.git9cb56fd.fc28 39 https://bodhi.fedoraproject.org/updates/FEDORA-2018-cc4b7af297 xerces-c27-2.7.0-28.fc28 20 https://bodhi.fedoraproject.org/updates/FEDORA-2018-20c24949c0 libarchive-3.3.3-1.fc28 16 https://bodhi.fedoraproject.org/updates/FEDORA-2018-7d748596e9 drupal8-8.6.2-1.fc28 12 https://bodhi.fedoraproject.org/updates/FEDORA-2018-18023f40fa drupal7-7.60-2.fc28 12 https://bodhi.fedoraproject.org/updates/FEDORA-2018-2d2739ebed php-Smarty2-2.6.31-2.fc28 12 https://bodhi.fedoraproject.org/updates/FEDORA-2018-509fc4a5c8 webkit2gtk3-2.22.3-1.fc28 11 https://bodhi.fedoraproject.org/updates/FEDORA-2018-2ee55d77c9 links-2.17-1.fc28 6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-a675aa39fc subscription-manager-1.24.2-1.fc28 5 https://bodhi.fedoraproject.org/updates/FEDORA-2018-ae9027a506 SDL2_image-2.0.4-1.fc28 5 https://bodhi.fedoraproject.org/updates/FEDORA-2018-e8d19367cb mingw-SDL2_image-2.0.4-1.fc28 4 https://bodhi.fedoraproject.org/updates/FEDORA-2018-2ff7cdbb7b pdns-4.1.5-1.fc28 4 https://bodhi.fedoraproject.org/updates/FEDORA-2018-cf58e1cbd1 suricata-4.0.6-1.fc28 3 https://bodhi.fedoraproject.org/updates/FEDORA-2018-a5d1fa335e gettext-0.19.8.1-18.fc28 3 https://bodhi.fedoraproject.org/updates/FEDORA-2018-a510417d97 postgresql-10.6-1.fc28 2 https://bodhi.fedoraproject.org/updates/FEDORA-2018-4305c56943 xen-4.10.2-3.fc28 1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-0741f1ca08 kde-connect-1.3.3-1.fc28
The following Fedora 28 Critical Path updates have yet to be approved: Age URL 20 https://bodhi.fedoraproject.org/updates/FEDORA-2018-20c24949c0 libarchive-3.3.3-1.fc28 18 https://bodhi.fedoraproject.org/updates/FEDORA-2018-853074f951 jbigkit-2.1-15.fc28 15 https://bodhi.fedoraproject.org/updates/FEDORA-2018-a58108a0bc nfs-utils-2.3.3-1.rc1.fc28 12 https://bodhi.fedoraproject.org/updates/FEDORA-2018-731fb3f951 pungi-4.1.30-1.fc28 12 https://bodhi.fedoraproject.org/updates/FEDORA-2018-8936092f99 cryptsetup-2.0.5-1.fc28 10 https://bodhi.fedoraproject.org/updates/FEDORA-2018-ab95d662ad osinfo-db-20181101-1.fc28 8 https://bodhi.fedoraproject.org/updates/FEDORA-2018-a6d438abd7 ceph-12.2.9-1.fc28 5 https://bodhi.fedoraproject.org/updates/FEDORA-2018-998a7b6fc3 ibus-1.5.19-8.fc28 4 https://bodhi.fedoraproject.org/updates/FEDORA-2018-190a97791c libtar-1.2.20-16.fc28 3 https://bodhi.fedoraproject.org/updates/FEDORA-2018-8de966e1c0 vim-8.1.513-2.fc28 3 https://bodhi.fedoraproject.org/updates/FEDORA-2018-de1faf9ca6 libtirpc-1.0.3-6.rc2.fc28 3 https://bodhi.fedoraproject.org/updates/FEDORA-2018-783dfc5196 shadow-utils-4.6-4.fc28 3 https://bodhi.fedoraproject.org/updates/FEDORA-2018-a5d1fa335e gettext-0.19.8.1-18.fc28 3 https://bodhi.fedoraproject.org/updates/FEDORA-2018-3d20d4057f breeze-icon-theme-5.52.0-1.fc28 extra-cmake-modules-5.52.0-1.fc28 kf5-5.52.0-1.fc28 kf5-attica-5.52.0-1.fc28 kf5-baloo-5.52.0-2.fc28 kf5-bluez-qt-5.52.0-1.fc28 kf5-frameworkintegration-5.52.0-1.fc28 kf5-kactivities-5.52.0-1.fc28 kf5-kactivities-stats-5.52.0-1.fc28 kf5-kapidox-5.52.0-1.fc28 kf5-karchive-5.52.0-1.fc28 kf5-kauth-5.52.0-1.fc28 kf5-kbookmarks-5.52.0-1.fc28 kf5-kcmutils-5.52.0-1.fc28 kf5-kcodecs-5.52.0-1.fc28 kf5-kcompletion-5.52.0-1.fc28 kf5-kconfig-5.52.0-1.fc28 kf5-kconfigwidgets-5.52.0-1.fc28 kf5-kcoreaddons-5.52.0-1.fc28 kf5-kcrash-5.52.0-1.fc28 kf5-kdbusaddons-5.52.0-1.fc28 kf5-kdeclarative-5.52.0-1.fc28 kf5-kded-5.52.0-1.fc28 kf5-kdelibs4support-5.52.0-1.fc28 kf5-kdesignerplugin-5.52.0-1.fc28 kf5-kdesu-5.52.0-1.fc28 kf5-kdewebkit-5.52.0-1.fc28 kf5-kdnssd-5.52.0-1.fc28 kf5-kdoctools-5.52.0-1.fc28 kf5-kemoticons-5.52.0-1.fc28 kf5-kfilemetadata-5.52.0-1.fc28 kf5-kglobalaccel-5.52.0-1.fc28 kf5-kguiad dons-5.52.0-1.fc28 kf5-kholidays-5.52.0-1.fc28 kf5-khtml-5.52.0-1.fc28 kf5-ki18n-5.52.0-1.fc28 kf5-kiconthemes-5.52.0-1.fc28 kf5-kidletime-5.52.0-1.fc28 kf5-kimageformats-5.52.0-1.fc28 kf5-kinit-5.52.0-1.fc28 kf5-kio-5.52.0-1.fc28 kf5-kirigami2-5.52.0-1.fc28 kf5-kitemmodels-5.52.0-1.fc28 kf5-kitemviews-5.52.0-1.fc28 kf5-kjobwidgets-5.52.0-1.fc28 kf5-kjs-5.52.0-1.fc28 kf5-kjsembed-5.52.0-1.fc28 kf5-kmediaplayer-5.52.0-1.fc28 kf5-knewstuff-5.52.0-1.fc28 kf5-knotifications-5.52.0-1.fc28 kf5-knotifyconfig-5.52.0-1.fc28 kf5-kpackage-5.52.0-2.fc28 kf5-kparts-5.52.0-1.fc28 kf5-kpeople-5.52.0-1.fc28 kf5-kplotting-5.52.0-1.fc28 kf5-kpty-5.52.0-1.fc28 kf5-kross-5.52.0-1.fc28 kf5-krunner-5.52.0-1.fc28 kf5-kservice-5.52.0-1.fc28 kf5-ktexteditor-5.52.0-1.fc28 kf5-ktextwidgets-5.52.0-1.fc28 kf5-kunitconversion-5.52.0-1.fc28 kf5-kwallet-5.52.0-1.fc28 kf5-kwayland-5.52.0-1.fc28 kf5-kwidgetsaddons-5.52.0-1.fc28 kf5-kwindowsystem-5.52.0-1.fc28 kf5-kxmlgui-5.52.0-1.fc28 kf5-kxmlrpcclient-5.52.0-1.fc28 kf5-modemmanager-qt-5.52.0-1.fc28 kf5-networkmanager-qt-5.52.0-1.fc28 kf5-plasma-5.52.0-2.fc28 kf5-prison-5.52.0-1.fc28 kf5-purpose-5.52.0-1.fc28 kf5-solid-5.52.0-1.fc28 kf5-sonnet-5.52.0-1.fc28 kf5-syntax-highlighting-5.52.0-1.fc28 kf5-threadweaver-5.52.0-1.fc28 oxygen-icon-theme-5.52.0-1.fc28 qqc2-desktop-style-5.52.0-1.fc28 2 https://bodhi.fedoraproject.org/updates/FEDORA-2018-4305c56943 xen-4.10.2-3.fc28 2 https://bodhi.fedoraproject.org/updates/FEDORA-2018-a558274032 json-glib-1.4.4-1.fc28 2 https://bodhi.fedoraproject.org/updates/FEDORA-2018-4ee0750c41 gjs-1.52.4-1.fc28 1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-f893865248 edk2-20180815gitcb5f4f45ce-2.fc28
The following builds have been pushed to Fedora 28 updates-testing
bird-1.6.4-2.fc28 blosc-1.14.4-1.fc28 ccdciel-0.9.47-1.fc28 chromium-70.0.3538.77-4.fc28 container-selinux-2.76-1.git87fae85.fc28 cups-filters-1.20.0-12.fc28 fedora-toolbox-0.0.2-1.fc28 file-5.33-9.fc28 flatpak-1.0.5-2.fc28 kernel-4.18.18-200.fc28 kernel-headers-4.18.18-200.fc28 libabigail-1.5-3.fc28 libdnf-0.11.1-6.fc28.1 magic-8.2.79-1.fc28 mycli-1.18.2-2.fc28 notejot-1.5.0-1.fc28 perl-Object-Tiny-1.09-1.fc28 perl-RT-Client-REST-0.54-1.fc28 php-pecl-psr-0.6.0-1.fc28 python-ansi2html-1.5.1-3.fc28 python-djangoql-0.12.0-1.fc28 python-fsleyes-0.26.4-1.fc28 python-indexed_gzip-0.8.7-1.fc28 python-pybids-0.6.5-2.gite35ced6.fc28 python-twisted-18.4.0-5.fc28 ruby-2.5.3-94.fc28 rubygem-rack-2.0.4-4.fc28 rust-1.30.1-7.fc28 skychart-4.1.1-1.3792svn.fc28 tzdata-2018g-1.fc28 valgrind-3.14.0-1.fc28 wireshark-2.6.4-1.fc28 xcircuit-3.10.12-1.fc28 zsh-5.5.1-3.fc28
Details about builds:
================================================================================ bird-1.6.4-2.fc28 (FEDORA-2018-8f0d2429d3) BIRD Internet Routing Daemon -------------------------------------------------------------------------------- Update Information:
Updating bird to 1.6.4 release which includes fix for CVE-2018-12066 Running bird in foreground Bird is running under bird user and group rather than root -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 12 2018 Stanislav Kozina skozina@redhat.org - 1.6.4-2 - bird should run under bird user and group rather than root (#1397574) - bird should run in foreground (#1285672) * Mon Nov 12 2018 Stanislav Kozina skozina@redhat.org - 1.6.4-1 - Update bird to 1.6.4 (#1642737) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1285672 - Bird should start in foreground in the systemd unit https://bugzilla.redhat.com/show_bug.cgi?id=1285672 [ 2 ] Bug #1642737 - bird-1.6.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1642737 [ 3 ] Bug #1588771 - CVE-2018-12066 bird: Stack overflow in BGP mask expressions [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1588771 [ 4 ] Bug #1397574 - Bird should drop privileges https://bugzilla.redhat.com/show_bug.cgi?id=1397574 --------------------------------------------------------------------------------
================================================================================ blosc-1.14.4-1.fc28 (FEDORA-2018-ee6fbd6465) High performance compressor optimized for binary data -------------------------------------------------------------------------------- Update Information:
Update to latest version. No need to reboot or log out. -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 12 2018 Zbigniew J��drzejewski-Szmek zbyszek@in.waw.pl - 1.14.4-1 - Update to latest version (#1609768) * Thu Jul 19 2018 Zbigniew J��drzejewski-Szmek zbyszek@in.waw.pl - 1.14.3-1 - Update to latest version - Drop obsolete ldconfig invocations -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1609768 - blosc-1.14.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1609768 --------------------------------------------------------------------------------
================================================================================ ccdciel-0.9.47-1.fc28 (FEDORA-2018-82635b4a91) CCD capture software -------------------------------------------------------------------------------- Update Information:
Update to latest available development version. -------------------------------------------------------------------------------- ChangeLog:
* Sun Nov 11 2018 Mattia Verga mattia.verga@protonmail.com - 0.9.47-1 - Update to 0.9.47 * Sun Jul 15 2018 Mattia Verga mattia.verga@yandex.com - 0.9.41-1 - Update to 0.9.41 * Thu Jul 12 2018 Fedora Release Engineering releng@fedoraproject.org - 0.9.38-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Tue Jun 5 2018 Mattia Verga mattia.verga@email.it - 0.9.38-1 - Update to 0.9.38 --------------------------------------------------------------------------------
================================================================================ chromium-70.0.3538.77-4.fc28 (FEDORA-2018-2c8db7357b) A WebKit (Blink) powered web browser -------------------------------------------------------------------------------- Update Information:
Update to chromium 70.0.3538.77. Fixes CVE-2018-16435 CVE-2018-17462 CVE-2018-17463 CVE-2018-17464 CVE-2018-17465 CVE-2018-17466 CVE-2018-17467 CVE-2018-17468 CVE-2018-17469 CVE-2018-17470 CVE-2018-17471 CVE-2018-17473 CVE-2018-17474 CVE-2018-17475 CVE-2018-17476 CVE-2018-5179 CVE-2018-17477 -------------------------------------------------------------------------------- ChangeLog:
* Wed Nov 7 2018 Tom Callaway spot@fedoraproject.org - 70.0.3538.77-4 - fix library requires filtering * Tue Nov 6 2018 Tom Callaway spot@fedoraproject.org - 70.0.3538.77-3 - fix build with harfbuzz2 in rawhide * Mon Nov 5 2018 Tom Callaway spot@fedoraproject.org - 70.0.3538.77-2 - drop jumbo_file_merge_limit to 8 to (hopefully) avoid OOMs on aarch64 * Fri Nov 2 2018 Tom Callaway spot@fedoraproject.org - 70.0.3538.77-1 - .77 came out while I was working on this. :/ * Fri Nov 2 2018 Tom Callaway spot@fedoraproject.org - 70.0.3538.67-1 - update to 70 * Tue Oct 16 2018 Tom Callaway spot@fedoraproject.org - 69.0.3497.100-2 - do not play with fonts on freeworld builds -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1640118 - chromium-browser: Heap buffer overflow in lcms in PDFium https://bugzilla.redhat.com/show_bug.cgi?id=1640118 [ 2 ] Bug #1640115 - CVE-2018-17477 chromium-browser: UI spoof in Extensions https://bugzilla.redhat.com/show_bug.cgi?id=1640115 [ 3 ] Bug #1640114 - CVE-2018-5179 chromium-browser: Lack of limits on update() in ServiceWorker https://bugzilla.redhat.com/show_bug.cgi?id=1640114 [ 4 ] Bug #1640113 - CVE-2018-17476 chromium-browser: Security UI occlusion in full screen mode https://bugzilla.redhat.com/show_bug.cgi?id=1640113 [ 5 ] Bug #1640112 - CVE-2018-17475 chromium-browser: URL spoof in Omnibox https://bugzilla.redhat.com/show_bug.cgi?id=1640112 [ 6 ] Bug #1640111 - CVE-2018-17474 chromium-browser: Use after free in Blink https://bugzilla.redhat.com/show_bug.cgi?id=1640111 [ 7 ] Bug #1640110 - CVE-2018-17473 chromium-browser: URL spoof in Omnibox https://bugzilla.redhat.com/show_bug.cgi?id=1640110 [ 8 ] Bug #1640108 - CVE-2018-17472 chromium-browser: iframe sandbox escape on iOS https://bugzilla.redhat.com/show_bug.cgi?id=1640108 [ 9 ] Bug #1640107 - CVE-2018-17471 chromium-browser: Security UI occlusion in full screen mode https://bugzilla.redhat.com/show_bug.cgi?id=1640107 [ 10 ] Bug #1640106 - CVE-2018-17470 chromium-browser: Memory corruption in GPU Internals https://bugzilla.redhat.com/show_bug.cgi?id=1640106 [ 11 ] Bug #1640105 - CVE-2018-17469 chromium-browser: Heap buffer overflow in PDFium https://bugzilla.redhat.com/show_bug.cgi?id=1640105 [ 12 ] Bug #1640104 - CVE-2018-17468 chromium-browser: Cross-origin URL disclosure in Blink https://bugzilla.redhat.com/show_bug.cgi?id=1640104 [ 13 ] Bug #1640103 - CVE-2018-17467 chromium-browser: URL spoof in Omnibox https://bugzilla.redhat.com/show_bug.cgi?id=1640103 [ 14 ] Bug #1640102 - CVE-2018-17466 chromium-browser: Memory corruption in Angle https://bugzilla.redhat.com/show_bug.cgi?id=1640102 [ 15 ] Bug #1640101 - CVE-2018-17465 chromium-browser: Use after free in V8 https://bugzilla.redhat.com/show_bug.cgi?id=1640101 [ 16 ] Bug #1640100 - CVE-2018-17464 chromium-browser: URL spoof in Omnibox https://bugzilla.redhat.com/show_bug.cgi?id=1640100 [ 17 ] Bug #1640099 - CVE-2018-17463 chromium-browser: Remote code execution in V8 https://bugzilla.redhat.com/show_bug.cgi?id=1640099 [ 18 ] Bug #1640098 - CVE-2018-17462 chromium-browser: Sandbox escape in AppCache https://bugzilla.redhat.com/show_bug.cgi?id=1640098 --------------------------------------------------------------------------------
================================================================================ container-selinux-2.76-1.git87fae85.fc28 (FEDORA-2018-30f2bfe441) SELinux policies for container runtimes -------------------------------------------------------------------------------- Update Information:
Allow container runtimes to be used in systemd unit files for notify units. -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 12 2018 Dan Walsh dwalsh@fedoraproject.org - 2.76-1 - Allow containers to sendto dgram socket of container runtimes - Needed to run container runtimes in notify socket unit files. * Tue Oct 30 2018 Dan Walsh dwalsh@fedoraproject.org - 2.75-1 - Allow containers to use fuse file systems by default --------------------------------------------------------------------------------
================================================================================ cups-filters-1.20.0-12.fc28 (FEDORA-2018-0d9aa62b8f) OpenPrinting CUPS filters and backends -------------------------------------------------------------------------------- Update Information:
links in man page are wrong -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 12 2018 Zdenek Dohnal zdohnal@redhat.com - 1.20.0-12 - links in man page are wrong --------------------------------------------------------------------------------
================================================================================ fedora-toolbox-0.0.2-1.fc28 (FEDORA-2018-e8d4a69e8b) Toolbox containers & images for hacking on OSTree-based Fedoras -------------------------------------------------------------------------------- Update Information:
* Allow an 'F' or 'f' prefix when specifying the release * Avoid a Bash-ism (ie. ==) and stick to POSIX (ie. =) * Fallback to /bin/bash if $SHELL doesn't exist in the toolbox container * Give access to the system D-Bus instance * Make shm_open work -------------------------------------------------------------------------------- ChangeLog:
--------------------------------------------------------------------------------
================================================================================ file-5.33-9.fc28 (FEDORA-2018-c7f670fe4f) A utility for determining file types -------------------------------------------------------------------------------- Update Information:
- add magic for eBPF objects (#1648667) ---- - fix memory leak on an error path -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 12 2018 Kamil Dudka kdudka@redhat.com - 5.34-9 - add magic for eBPF objects (#1648667) * Mon Nov 5 2018 Kamil Dudka kdudka@redhat.com - 5.33-8 - fix memory leak on an error path -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1648667 - Add magic for eBPF objects https://bugzilla.redhat.com/show_bug.cgi?id=1648667 --------------------------------------------------------------------------------
================================================================================ flatpak-1.0.5-2.fc28 (FEDORA-2018-2c02509357) Application deployment framework for desktop apps -------------------------------------------------------------------------------- Update Information:
flatpak 1.0.5 release. There was a sandbox bug in the previous version where parts of the runtime /etc was not mounted read-only. In case the runtime was installed as the user (not the default) this means that the app could modify files on the runtime. Nothing in the host uses the runtime files, so this is not a direct sandbox escape, but it is possible that an app can confuse a different app that has higher permissions and so gain privileges. Detailed changes: * Make the /etc -> /usr/etc bind-mounts read-only. * Make various app-specific configuration files read-only. * flatpak is more picky about remote names to avoid problems with storing weird names in the ostree config. * A segfault in libflatpak handling of bundles was fixed. * Updated translations * Fixed a regression in flatpak run that caused problems running user-installed apps when the system installation was broken. In addition to upstream changes, this update also fixes a packaging issue and adds a missing dependency on p11-kit- server to fix accessing host TLS certificates. -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 12 2018 Kalev Lember klember@redhat.com - 1.0.5-2 - Recommend p11-kit-server instead of just p11-kit (#1649049) * Mon Nov 12 2018 Kalev Lember klember@redhat.com - 1.0.5-1 - Update to 1.0.5 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1649049 - missing dependency on p11-kit-server https://bugzilla.redhat.com/show_bug.cgi?id=1649049 --------------------------------------------------------------------------------
================================================================================ kernel-4.18.18-200.fc28 (FEDORA-2018-10e0bd3288) The Linux kernel -------------------------------------------------------------------------------- Update Information:
The 4.18.18 update contains a number of important fixes across the tree -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 12 2018 Laura Abbott labbott@redhat.com - 4.18.18-200 - Linux v4.18.18 --------------------------------------------------------------------------------
================================================================================ kernel-headers-4.18.18-200.fc28 (FEDORA-2018-10e0bd3288) Header files for the Linux kernel for use by glibc -------------------------------------------------------------------------------- Update Information:
The 4.18.18 update contains a number of important fixes across the tree -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 12 2018 Laura Abbott labbott@redhat.com - 4.18.18-200 - Linux v4.18.18 --------------------------------------------------------------------------------
================================================================================ libabigail-1.5-3.fc28 (FEDORA-2018-68948f40f0) Set of ABI analysis tools -------------------------------------------------------------------------------- Update Information:
Oops, actually apply the two patches below. ---- Update to upstream 1.5 tarball -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 12 2018 Dodji Seketeli dodji@redhat.com - 1.5-3 - Oops, actually apply the two patches below. * Mon Nov 12 2018 Dodji Seketeli dodji@redhat.com - 1.5-2 - Apply patches Support-having-several-debuginfo-search-dirs-for-a-b.patch and Add-a-fail-no-debug-info-to-abidiff.patch * Thu Oct 25 2018 Dodji Seketeli dodji@seketeli.org - 1.5-1 - Update to upstream 1.5 tarball -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1638554 - abipkgdiff: abg-comp-filter.cc:902: bool abigail::comparison::filtering::is_mostly_distinct_diff(const abigail::comparison::diff*): Assertion `td' failed. https://bugzilla.redhat.com/show_bug.cgi?id=1638554 --------------------------------------------------------------------------------
================================================================================ libdnf-0.11.1-6.fc28.1 (FEDORA-2018-8d6bebf26e) Library providing simplified C and Python API to libsolv -------------------------------------------------------------------------------- Update Information:
** Libdnf ** - Backport Use-arch-from-spec-in-hy_subject_get_best_selector- RhBug1542307 - Backport Fix-segfault-in-repo_internalize_trigger-RhBug1375895 - Backport Fix-memory-corruption-in-dnf_context -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 12 2018 Jaroslav Mracek jmracek@redhat.com - 0.11.1-6.1 - Rebuild for libsolv 0.7 * Thu Nov 8 2018 Jaroslav Mracek jmracek@redhat.com - 0.11.1-6 - Backport patches from upstream libdnf-0.11.1 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1434283 - [abrt] PackageKit: repo_internalize_trigger(): packagekitd killed by SIGSEGV https://bugzilla.redhat.com/show_bug.cgi?id=1434283 --------------------------------------------------------------------------------
================================================================================ magic-8.2.79-1.fc28 (FEDORA-2018-adc936ed44) A very capable VLSI layout tool -------------------------------------------------------------------------------- Update Information:
New version 8.2.79 is released. -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 12 2018 Mamoru TASAKA mtasaka@fedoraproject.org - 8.2.79-1 - 8.2.79 * Fri Oct 26 2018 Mamoru TASAKA mtasaka@fedoraproject.org - 8.2.76-1 - 8.2.76 --------------------------------------------------------------------------------
================================================================================ mycli-1.18.2-2.fc28 (FEDORA-2018-d30f36f1f6) Interactive CLI for MySQL Database with auto-completion and syntax highlighting -------------------------------------------------------------------------------- Update Information:
Update to latest upstream release mycli 1.18.2. ---- Update to latest upstream release mycli 1.18.2 ---- Update to latest upstream release mycli 0.18.0. -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 12 2018 Terje Rosten terje.rosten@ntnu.no - 1.18.2-2 - Fix prompt_toolkit 1 patch, update by Dick * Wed Nov 7 2018 Terje Rosten terje.rosten@ntnu.no - 1.18.2-1 - 1.18.2 - Add patch for compat with prompt_toolkit 1, thanks to Dick Marinus - Add patch to work with prompt_toolkit > 2.0.6 * Fri Oct 19 2018 Carl George carl@george.computer - 1.18.0-2 - Add patch0 for prompt_toolkit 2 compatibility * Sun Sep 30 2018 Terje Rosten terje.rosten@ntnu.no - 1.18.0-1 - 1.18.0 * Sat Jul 14 2018 Terje Rosten terje.rosten@ntnu.no - 1.17.0-4 - Tests started to fail again * Fri Jul 13 2018 Fedora Release Engineering releng@fedoraproject.org - 1.17.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Tue Jun 19 2018 Miro Hron��ok mhroncok@redhat.com - 1.17.0-2 - Rebuilt for Python 3.7 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1632612 - Update to mycli 1.18.2 - fixing various bugs https://bugzilla.redhat.com/show_bug.cgi?id=1632612 --------------------------------------------------------------------------------
================================================================================ notejot-1.5.0-1.fc28 (FEDORA-2018-3869a1c9ed) Stupidly-simple sticky notes applet -------------------------------------------------------------------------------- Update Information:
Update to version 1.5.0. -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 12 2018 Fabio Valentini decathorpe@gmail.com - 1.5.0-1 - Update to version 1.5.0. * Sat Sep 8 2018 Fabio Valentini decathorpe@gmail.com - 1.4.5-1 - Update to version 1.4.5. * Fri Sep 7 2018 Fabio Valentini decathorpe@gmail.com - 1.4.3-1 - Update to version 1.4.3. --------------------------------------------------------------------------------
================================================================================ perl-Object-Tiny-1.09-1.fc28 (FEDORA-2018-12cec8002a) Class building as simple as it gets -------------------------------------------------------------------------------- Update Information:
This release improves a build script and a documentation. -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 12 2018 Petr Pisar ppisar@redhat.com - 1.09-1 - 1.09 bump -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1648875 - Upgrade perl-Object-Tiny to 1.09 https://bugzilla.redhat.com/show_bug.cgi?id=1648875 --------------------------------------------------------------------------------
================================================================================ perl-RT-Client-REST-0.54-1.fc28 (FEDORA-2018-ceee4e53a5) Talk to RT using REST protocol -------------------------------------------------------------------------------- Update Information:
This release fixes white space handling in attachments and handling a 401 HTTP response. ---- This release exposes CC and Admin CC adresses on Queues. -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 12 2018 Petr Pisar ppisar@redhat.com - 0.54-1 - 0.54 bump * Tue Nov 6 2018 Petr Pisar ppisar@redhat.com - 0.53-1 - 0.53 bump -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1648877 - Upgrade perl-RT-Client-REST to 0.54 https://bugzilla.redhat.com/show_bug.cgi?id=1648877 [ 2 ] Bug #1646997 - Upgrade perl-RT-Client-REST to 0.53 https://bugzilla.redhat.com/show_bug.cgi?id=1646997 --------------------------------------------------------------------------------
================================================================================ php-pecl-psr-0.6.0-1.fc28 (FEDORA-2018-ecd7344318) PSR interfaces -------------------------------------------------------------------------------- Update Information:
**Version 0.6.0** - Added PSR-18 support (@flyinghail) - Documentation/CI improvements (@sergeyklay) - Set minimum PHP version to 5.6 -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 12 2018 Remi Collet remi@remirepo.net - 0.6.0-1 - update to 0.6.0 - raise dependency on PHP 5.6 --------------------------------------------------------------------------------
================================================================================ python-ansi2html-1.5.1-3.fc28 (FEDORA-2018-8586a09c0d) Python module that converts text with ANSI color to HTML -------------------------------------------------------------------------------- Update Information:
Updating to gate on the CI pipeline! \��/ ---- Bump release to pick up gating.yaml. ---- Latest upstream. -------------------------------------------------------------------------------- ChangeLog:
* Fri Nov 2 2018 Ralph Bean rbean@redhat.com - 1.5.1-3 - Bump version to pick up gating.yaml file. * Fri Nov 2 2018 Ralph Bean rbean@redhat.com - 1.5.1-2 - Bump version to pick up gating.yaml file. * Fri Oct 19 2018 Ralph Bean rbean@redhat.com - 1.5.1-1 - New version - Dropped python2 subpackage and modernized macros. * Fri Jul 13 2018 Fedora Release Engineering releng@fedoraproject.org - 1.2.0-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Tue Jun 19 2018 Miro Hron��ok mhroncok@redhat.com - 1.2.0-7 - Rebuilt for Python 3.7 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1563201 - python-ansi2html-1.5.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1563201 --------------------------------------------------------------------------------
================================================================================ python-djangoql-0.12.0-1.fc28 (FEDORA-2018-ac143d7fac) DjangoQL: Advanced search language for Django -------------------------------------------------------------------------------- Update Information:
New release 0.12.0 -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 12 2018 Viliam Krizan vkrizan@redhat.com 0.12.0-1 - New release 0.12.0 --------------------------------------------------------------------------------
================================================================================ python-fsleyes-0.26.4-1.fc28 (FEDORA-2018-2204562903) FSLeyes, the FSL image viewer -------------------------------------------------------------------------------- Update Information:
New package! -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1648916 - Review Request: python-fsleyes - FSLeyes, the FSL image viewer https://bugzilla.redhat.com/show_bug.cgi?id=1648916 --------------------------------------------------------------------------------
================================================================================ python-indexed_gzip-0.8.7-1.fc28 (FEDORA-2018-91502577f3) Fast random access of gzip files in Python -------------------------------------------------------------------------------- Update Information:
New package! -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1648709 - Review Request: python-indexed_gzip - Fast random access of gzip files in Python https://bugzilla.redhat.com/show_bug.cgi?id=1648709 --------------------------------------------------------------------------------
================================================================================ python-pybids-0.6.5-2.gite35ced6.fc28 (FEDORA-2018-1e92147c94) Interface with datasets conforming to BIDS -------------------------------------------------------------------------------- Update Information:
New package! -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1534067 - Review Request: python-pybids - Interface with datasets conforming to BIDS https://bugzilla.redhat.com/show_bug.cgi?id=1534067 --------------------------------------------------------------------------------
================================================================================ python-twisted-18.4.0-5.fc28 (FEDORA-2018-6f451eaecb) Twisted is a networking engine written in Python -------------------------------------------------------------------------------- Update Information:
Recommend pythonX-service-identity -------------------------------------------------------------------------------- ChangeLog:
* Mon Oct 22 2018 Miro Hron��ok mhroncok@redhat.com - 18.4.0-5 - Recommend pythonX-service-identity --------------------------------------------------------------------------------
================================================================================ ruby-2.5.3-94.fc28 (FEDORA-2018-6070bcf454) An interpreter of object-oriented scripting language -------------------------------------------------------------------------------- Update Information:
* Update to Ruby 2.5.3. -------------------------------------------------------------------------------- ChangeLog:
* Fri Oct 19 2018 Jun Aruga jaruga@redhat.com - 2.5.3-94 - Update to Ruby 2.5.3. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1643091 - CVE-2018-16395 CVE-2018-16396 ruby: various flaws [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1643091 --------------------------------------------------------------------------------
================================================================================ rubygem-rack-2.0.4-4.fc28 (FEDORA-2018-02e965a729) A modular Ruby webserver interface -------------------------------------------------------------------------------- Update Information:
* Buffer size in multipart parser allows for denial of service (CVE-2018-16470). * Cross-site scripting (XSS) via `scheme` method on `Rack::Request` (CVE-2018-16471). -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 12 2018 V��t Ondruch vondruch@redhat.com - 1:2.0.4-4 - Buffer size in multipart parser allows for denial of service (CVE-2018-16470). - Cross-site scripting (XSS) via `scheme` method on `Rack::Request` (CVE-2018-16471). -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1646814 - CVE-2018-16470 rubygem-rack: Buffer size in multipart parser allows for denial of service https://bugzilla.redhat.com/show_bug.cgi?id=1646814 [ 2 ] Bug #1646818 - CVE-2018-16471 rubygem-rack: Cross-site scripting (XSS) via `scheme` method on `Rack::Request` https://bugzilla.redhat.com/show_bug.cgi?id=1646818 --------------------------------------------------------------------------------
================================================================================ rust-1.30.1-7.fc28 (FEDORA-2018-4a6004ff8e) The Rust Programming Language -------------------------------------------------------------------------------- Update Information:
Fixes a compiler panic in some cases of building documentation -- see the release notes for [1.30.1](https://blog.rust- lang.org/2018/11/08/Rust-1.30.1.html). -------------------------------------------------------------------------------- ChangeLog:
* Thu Nov 8 2018 Josh Stone jistone@redhat.com - 1.30.1-7 - Update to 1.30.1. --------------------------------------------------------------------------------
================================================================================ skychart-4.1.1-1.3792svn.fc28 (FEDORA-2018-d6e49b8366) Planetarium software for the advanced amateur astronomer -------------------------------------------------------------------------------- Update Information:
Update to latest available development version. -------------------------------------------------------------------------------- ChangeLog:
* Sat Nov 3 2018 Mattia Verga mattia.verga@protonmail.com - 4.1.1-1.3792svn - Update svn version * Sat Jul 14 2018 Fedora Release Engineering releng@fedoraproject.org - 4.1-2.3730svn - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ tzdata-2018g-1.fc28 (FEDORA-2018-7d685d4be7) Timezone data -------------------------------------------------------------------------------- Update Information:
Rebase to tzdata-2018g - Morocco will change from UTC+00/+01 to permanent +01 effective 2018-10-27. - Includes changes for tzdata-2018f. - Volgograd will change from UTC+03 to UTC+04 on 2018-10-28 at 02:00. - Fiji will end DST on 2019-01-13 instead of the 2019-01-20 as previously predicted. - Most of Chile will end DST on the first Saturday in April at 24:00 and restart DST on the first Saturday in September at 24:00. -------------------------------------------------------------------------------- ChangeLog:
* Sun Oct 28 2018 Patsy Griffin Franklin pfrankli@redhat.com - 2018g-1 - Rebase to tzdata-2018g Includes changes for tzdata-2018f. - Volgograd will change from UTC+03 to UTC+04 on 2018-10-28 at 02:00. - Fiji will end DST on 2019-01-13 instead of the 2019-01-20 as previously predicted. - Most of Chile will end DST on the first Saturday in April at 24:00 and restart DST on the first Saturday in September at 24:00. - Morocco will change from UTC+00/+01 to permanent +01 effective 2018-10-27. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1646930 - The current version lags behind the upstream's. https://bugzilla.redhat.com/show_bug.cgi?id=1646930 [ 2 ] Bug #1604030 - /usr/share/zoneinfo/tzdata.zi says "version unknown" https://bugzilla.redhat.com/show_bug.cgi?id=1604030 --------------------------------------------------------------------------------
================================================================================ valgrind-3.14.0-1.fc28 (FEDORA-2018-1b3667301f) Tool for finding memory management bugs in programs -------------------------------------------------------------------------------- Update Information:
valgrind 3.14.0 final. -------------------------------------------------------------------------------- ChangeLog:
* Tue Oct 9 2018 Mark Wielaard mjw@fedoraproject.org - 3.14.0-1 - valgrind 3.14.0 final. * Thu Oct 4 2018 Mark Wielaard mjw@fedoraproject.org - 3.14.0-0.2.RC2 - Upgrade to RC2. - Drop valgrind-3.14.0-add-vector-h.patch. * Fri Sep 14 2018 Mark Wielaard mjw@fedoraproject.org - 3.14.0-0.1.GIT - New upstream (pre-)release. - Add valgrind-3.14.0-add-vector-h.patch. * Fri Aug 10 2018 Mark Wielaard mjw@fedoraproject.org - 3.13.0-28 - Add valgrind-3.13.0-utime.patch * Fri Aug 3 2018 Mark Wielaard mjw@fedoraproject.org - 3.13.0-27 - Add valgrind-3.13.0-ppc64-xsmaxcdp.patch * Fri Aug 3 2018 Mark Wielaard mjw@fedoraproject.org - 3.13.0-26 - Use valgrind_arches for ExclusiveArch when defined. - Use restorecon for scl on rhel6 to work around rpm bug (#1610676). * Tue Jul 31 2018 Mark Wielaard mjw@fedoraproject.org - 3.13.0-25 - Add valgrind-3.13.0-x86-arch_prctl.patch (#1610304) * Tue Jul 31 2018 Florian Weimer fweimer@redhat.com - 3.13.0-24 - Rebuild with fixed binutils * Fri Jul 27 2018 Mark Wielaard mjw@fedoraproject.org - 3.13.0-23 - Remove valgrind-3.13.0-arm-disable-vfp-test.patch * Thu Jul 26 2018 Mark Wielaard mjw@fedoraproject.org - 3.13.0-22 - Add valgrind-3.13.0-arch_prctl.patch (#1608824) * Thu Jul 12 2018 Mark Wielaard mjw@fedoraproject.org - 3.13.0-21 - Add valgrind-3.13.0-separate-code.patch (#1600034) - Add valgrind-3.13.0-arm-disable-vfp-test.patch --------------------------------------------------------------------------------
================================================================================ wireshark-2.6.4-1.fc28 (FEDORA-2018-89413a04e0) Network traffic analyzer -------------------------------------------------------------------------------- Update Information:
New version 2.6.4, contains security fix for CVE-2018-16056, CVE-2018-16057, CVE-2018-16058. -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 12 2018 Michal Ruprich mruprich@redhat.com - 1:2.6.4-1 - New version 2.6.4 - Contains fixes for CVE-2018-16056, CVE-2018-16057, CVE-2018-16058 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1625921 - CVE-2018-16058 wireshark: Bluetooth AVDTP dissector crash https://bugzilla.redhat.com/show_bug.cgi?id=1625921 [ 2 ] Bug #1625922 - CVE-2018-16056 wireshark: Bluetooth Attribute Protocol dissector crash https://bugzilla.redhat.com/show_bug.cgi?id=1625922 [ 3 ] Bug #1625925 - CVE-2018-16057 wireshark: Radiotap dissector crash https://bugzilla.redhat.com/show_bug.cgi?id=1625925 --------------------------------------------------------------------------------
================================================================================ xcircuit-3.10.12-1.fc28 (FEDORA-2018-f18f212ad2) Electronic circuit schematic drawing program -------------------------------------------------------------------------------- Update Information:
New version 3.10.12 is released. -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 12 2018 Mamoru TASAKA mtasaka@fedoraproject.org - 3.10.12-1 - 3.10.12 * Sat Jul 14 2018 Fedora Release Engineering releng@fedoraproject.org - 3.10.10-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ zsh-5.5.1-3.fc28 (FEDORA-2018-ce98e47882) Powerful interactive shell -------------------------------------------------------------------------------- Update Information:
- fix programming mistakes detected by static analysis -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 12 2018 Kamil Dudka kdudka@redhat.com - 5.5.1-3 - fix programming mistakes detected by static analysis --------------------------------------------------------------------------------