The following Fedora 28 Security updates need testing:
Age URL
197
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d510cfd7eb
jgraphx-3.6.0.0-6.fc28
147
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d7aeaa74da
nodejs-brace-expansion-1.1.11-1.fc28
145
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc073fdc1a
nodejs-atob-2.1.1-1.fc28
138
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9dd3f7c013
unrtf-0.21.9-8.fc28
106
https://bodhi.fedoraproject.org/updates/FEDORA-2018-28e9841baf
docker-latest-1.13.1-37.git9cb56fd.fc28
23
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bbbd8cc3a6
python33-3.3.7-6.fc28
21
https://bodhi.fedoraproject.org/updates/FEDORA-2018-cc4b7af297
xerces-c27-2.7.0-28.fc28
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1f3a47bfbb
sos-collector-1.5-3.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ce61c1147d
java-11-openjdk-11.0.1.13-1.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-aa8855384d
rpm-4.14.2.1-1.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-63465e1846
teeworlds-0.6.5-1.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-20c24949c0
libarchive-3.3.3-1.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-49d6e4bc3f
python37-3.7.1-1.fc28
The following Fedora 28 Critical Path updates have yet to be approved:
Age URL
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d69f3ea54e lorax-28.19-1.fc28
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-19f6ce3a0c
pungi-4.1.29-3.fc28
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f2829fc1e6 qt-4.8.7-44.fc28
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-749575640e
kernel-headers-4.18.15-200.fc28 kernel-tools-4.18.15-200.fc28 kernel-4.18.15-200.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-aa8855384d
rpm-4.14.2.1-1.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-20c24949c0
libarchive-3.3.3-1.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-853074f951
jbigkit-2.1-15.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e56e34f62f
libdrm-2.4.95-1.fc28
The following builds have been pushed to Fedora 28 updates-testing
containerd-1.2.0-1.fc28
evolution-3.28.5-2.fc28
gnome-shell-extension-netspeed-3.28-0.6.20181019gitc109544.fc28
gnome-shell-extension-topicons-plus-21-7.20181024.6470a38.fc28
python-carbon-1.1.3-2.fc28
roundcubemail-1.3.8-1.fc28
torrent-file-editor-0.3.13-1.fc28
xen-4.10.2-2.fc28
Details about builds:
================================================================================
containerd-1.2.0-1.fc28 (FEDORA-2018-5661b2f2d9)
An industry-standard container runtime
--------------------------------------------------------------------------------
Update Information:
- Latest upstream
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 25 2018 Carl George <carl(a)george.computer> - 1.2.0-1
- Latest upstream
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1624480 - containerd-1.2.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1624480
--------------------------------------------------------------------------------
================================================================================
evolution-3.28.5-2.fc28 (FEDORA-2018-21c31e9e2c)
Mail and calendar client for GNOME
--------------------------------------------------------------------------------
Update Information:
Explicitly require `killall` binary, also when building, thus the code can find
it and use it when `evolution --force-shutdown`, alias
`/usr/libexec/evolution/killev`, is called. Without that for example a restore
from backup would not work properly until the background processes are
restarted.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 26 2018 Milan Crha <mcrha(a)redhat.com> - 3.28.5-2
- Add BuildRequires/Requires for 'killall' binary
--------------------------------------------------------------------------------
================================================================================
gnome-shell-extension-netspeed-3.28-0.6.20181019gitc109544.fc28 (FEDORA-2018-32c4228937)
A gnome-shell extension to show speed of the internet
--------------------------------------------------------------------------------
Update Information:
Update to 3.28-0.6.20181019gitc109544
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 25 2018 Martin Gansser <martinkg(a)fedoraproject.org> -
3.28-0.6.20181019gitc109544
- Update to recent git version 3.28-0.6.20181019gitc109544
--------------------------------------------------------------------------------
================================================================================
gnome-shell-extension-topicons-plus-21-7.20181024.6470a38.fc28 (FEDORA-2018-02d9c2fac3)
Move all legacy tray icons to the top panel
--------------------------------------------------------------------------------
Update Information:
Upstream developer phocean is merging various forks back into the original
project, and fixing more stability issues.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 25 2018 Andrew Toskin <andrew(a)tosk.in> - 21-7.20181024.6470a38
- phocean is merging various forks back into the original project, and
fixing more stability issues.
--------------------------------------------------------------------------------
================================================================================
python-carbon-1.1.3-2.fc28 (FEDORA-2018-74dc52a940)
Back-end data caching and persistence daemon for Graphite
--------------------------------------------------------------------------------
Update Information:
Fix interpreter in scripts to Use Python 2
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 26 2018 Piotr Popieluch <piotr1212(a)gmail.com> - 1.1.3-2
- Fix interpreter in scripts to Use Python 2
--------------------------------------------------------------------------------
================================================================================
roundcubemail-1.3.8-1.fc28 (FEDORA-2018-928e15e1db)
Round Cube Webmail is a browser-based multilingual IMAP client
--------------------------------------------------------------------------------
Update Information:
**Version 1.3.8** This is a service release to update the stable version 1.3 of
Roundcube Webmail. It contains fixes to several bugs backported from the master
branch including a security fix for a reported XSS vulnerability plus updates to
ensure compatibility with PHP 7.3 and recent versions of Courier-IMAP, Dovecot
and MySQL 8. See the complete changelog below. **Changelog** - Fix PHP
warnings on dummy QUOTA responses in Courier-IMAP 4.17.1 (#6374) - Fix so
fallback from BINARY to BODY FETCH is used also on [PARSE] errors in dovecot 2.3
(#6383) - Enigma: Fix deleting keys with authentication subkeys (#6381) - Fix
invalid regular expressions that throw warnings on PHP 7.3 (#6398) - Fix so
Classic skin splitter does not escape out of window (#6397) - Fix XSS issue in
handling invalid style tag content (#6410) - Fix compatibility with MySQL 8 -
error on 'system' table use - Managesieve: Fix bug where show_real_foldernames
setting wasn't respected (#6422) - New_user_identity: Fix %fu/%u vars
substitution in user specific LDAP params (#6419) - Fix support for "allow-from
<uri>" in "x_frame_options" config option (#6449) - Fix bug where
valid content
between HTML comments could have been skipped in some cases (#6464) - Fix
multiple VCard field search (#6466) - Fix session issue on long running requests
(#6470)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 26 2018 Remi Collet <remi(a)remirepo.net> - 1.3.8-1
- update to 1.3.8
--------------------------------------------------------------------------------
================================================================================
torrent-file-editor-0.3.13-1.fc28 (FEDORA-2018-dc3898ffb4)
Qt based GUI tool designed to create and edit .torrent files
--------------------------------------------------------------------------------
Update Information:
Bump to v0.3.13 ---- Bump to v0.3.12
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 26 2018 Ivan Romanov <drizt72(a)zoho.eu> - 0.3.13-1
- Bump to v0.3.13
* Sun Aug 5 2018 Ivan Romanov <drizt72(a)zoho.eu> - 0.3.12-1
- Bump to v0.3.12
* Sun Jul 15 2018 Ivan Romanov <drizt72(a)zoho.eu> - 0.3.11-1
- Bump to v0.3.11
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.10-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
xen-4.10.2-2.fc28 (FEDORA-2018-73dd8de892)
Xen is a virtual machine monitor
--------------------------------------------------------------------------------
Update Information:
x86: Nested VT-x usable even when disabled [XSA-278]
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1643116 - xen: Nested VT-x usable even when disabled
https://bugzilla.redhat.com/show_bug.cgi?id=1643116
--------------------------------------------------------------------------------