The following Fedora 28 Security updates need testing:
Age URL
112
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d510cfd7eb
jgraphx-3.6.0.0-6.fc28
84
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c75a37ae9b
blktrace-1.2.0-6.fc28
71
https://bodhi.fedoraproject.org/updates/FEDORA-2018-202c536f70
gifsicle-1.91-1.fc28
62
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d7aeaa74da
nodejs-brace-expansion-1.1.11-1.fc28
60
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc073fdc1a
nodejs-atob-2.1.1-1.fc28
53
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9dd3f7c013
unrtf-0.21.9-8.fc28
21
https://bodhi.fedoraproject.org/updates/FEDORA-2018-28e9841baf
docker-latest-1.13.1-37.git9cb56fd.fc28
13
https://bodhi.fedoraproject.org/updates/FEDORA-2018-0c586e5178
quazip-0.7.6-1.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-33fef25ed1
ghc-hakyll-4.10.0.0-3.fc28 pandoc-citeproc-0.12.2.5-4.fc28 ghc-hs-bibutils-6.6.0.0-1.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7b97e553ff
mingw-gdal-2.2.4-5.fc28 mingw-xerces-c-3.2.1-1.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e071e178f8
mailman-2.1.29-1.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-997efe762f
seamonkey-2.49.4-1.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f17daf1cd6
myrepos-1.20180726-1.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ff8d8c33b1
dpkg-1.18.25-1.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7a9777480c
python-uranium-lulzbot-3.2.23-1.fc28 CuraEngine-lulzbot-3.2.23-1.fc28
cura-lulzbot-3.2.23-1.fc28 lulzbot-marlin-firmware-1.1.8.62-1.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-64955716d6
moodle-3.4.4-1.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-cc812838fb
kernel-headers-4.17.11-1.fc28 kernel-4.17.11-200.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f37cbaafdf
mingw-LibRaw-0.18.13-2.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-816b63ad38
libao-1.2.0-13.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-74fb8b257b qemu-2.11.2-2.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-043bd3349e
libpng-1.6.34-6.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b48e0b8761
libpng15-1.5.30-6.fc28
The following Fedora 28 Critical Path updates have yet to be approved:
Age URL
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-167cedbe01
pungi-4.1.26-2.fc28
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4b3f72d8c9
perl-5.26.2-413.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-0dd9176f34 pcre2-10.31-8.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-25a251c107
perl-HTTP-Tiny-0.074-1.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-cc812838fb
kernel-headers-4.17.11-1.fc28 kernel-4.17.11-200.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-043bd3349e
libpng-1.6.34-6.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-74fb8b257b qemu-2.11.2-2.fc28
The following builds have been pushed to Fedora 28 updates-testing
atomic-reactor-1.6.33-3.fc28
avogadro-1.2.0-19.fc28
ccnet-6.1.8-1.fc28
cockpit-174-1.fc28
dmidecode-3.1-7.fc28
docker-1.13.1-61.git9cb56fd.fc28
esc-1.1.2-2.fc28
exiv2-0.26-12.fc28
gdb-8.1.1-1.fc28
git-cinnabar-0.5.0-0.5.b4.fc28
gsignond-plugin-oauth-0-0.4.20180513.git43fee49.fc28
gsignond-plugin-sasl-0-0.4.20171111.git671022f.fc28
hwdata-0.314-1.fc28
kgb-bot-1.51-1.fc28
lftp-4.8.4-1.fc28
libbytesize-1.4-1.fc28
libmspack-0.7-0.1.alpha.fc28
libpcap-1.9.0-1.fc28
libthai-0.1.28-1.fc28
mediawriter-4.1.2-1.fc28
mingw-glib2-2.56.1-1.fc28
mingw-glibmm24-2.56.0-1.fc28
mingw-mpfr-3.1.6-2.fc28
mingw-tcl-8.6.8-1.fc28
nbdkit-1.4.2-1.fc28
php-symfony-2.8.44-1.fc28
php-symfony3-3.4.14-1.fc28
psad-2.4.6-1.fc28
python-autobahn-18.7.1-1.fc28
python-feedgenerator-1.9-6.fc28
python-pytoml-0.1.18-1.fc28
python-txaio-18.7.1-1.fc28
ravada-0.3.0-0.2.beta6.fc28
roundcubemail-1.3.7-1.fc28
scamp-2.0.4-12.fc28
seafile-6.2.3-2.fc28
seafile-client-6.2.3-1.fc28
timeline-1.18.0-1.fc28
tracker-2.1.1-1.fc28
vim-8.1.233-1.fc28
virtualbox-guest-additions-5.2.16-2.fc28
Details about builds:
================================================================================
atomic-reactor-1.6.33-3.fc28 (FEDORA-2018-fd4c0b69fc)
Improved builder for Docker images
--------------------------------------------------------------------------------
Update Information:
New upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 1 2018 Owen Taylor <otaylor(a)redhat.com> - 1.6.33-3
- Add patch to fix compatibility issues with recent docker/docker-py
- Add patch to drop platforms from target tag that aren't in the cluster config
- Add patch to use Flatpak code from flatpak-module-tools, rather than cut-and-paste
* Tue Jul 31 2018 Clement Verna <cverna(a)fedoraproject.org> - 1.6.33-2
- Add patch to manage jsonschema version
* Mon Jul 30 2018 Clement Verna <cverna(a)fedoraproject.org> - 1.6.33-1
- New upstream release
- Drop patches
- Drop stop_autorebuild_if_disabled plugin
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1560118 - atomic-reactor-1.6.33 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1560118
--------------------------------------------------------------------------------
================================================================================
avogadro-1.2.0-19.fc28 (FEDORA-2018-b26667e9e6)
An advanced molecular editor for chemical purposes
--------------------------------------------------------------------------------
Update Information:
- Install Python modules in python_sitearch ---- - Add 'povray' dependency
(bz#1556808)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 1 2018 Antonio Trande <sagitter(a)fedoraproject.org> - 1.2.0-19
- Install Python modules in python_sitearch
* Thu Jul 19 2018 Antonio Trande <sagitter(a)fedoraproject.org> - 1.2.0-18
- Add 'povray' dependency (bz#1556808)
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.0-17
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Tue May 1 2018 Jonathan Wakely <jwakely(a)redhat.com> - 1.2.0-16
- Add BuildRequires: boost-python2-devel
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1556808 - POV-Ray export is unusable
https://bugzilla.redhat.com/show_bug.cgi?id=1556808
--------------------------------------------------------------------------------
================================================================================
ccnet-6.1.8-1.fc28 (FEDORA-2018-5e6ee32662)
A framework for writing networked applications in C
--------------------------------------------------------------------------------
Update Information:
Update to 6.2.3
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 1 2018 Julien Enselme <jujens(a)jujens.eu> - 6.1.8-1
- Update to 6.1.8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1562039 - ccnet-6.1.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1562039
--------------------------------------------------------------------------------
================================================================================
cockpit-174-1.fc28 (FEDORA-2018-8d71fcc86d)
A user interface for Linux servers
--------------------------------------------------------------------------------
Update Information:
- Kubernetes: VM detail page - Realmd: Install on demand
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 1 2018 Marius Vollmer <mvollmer(a)redhat.com> - 174-1
- Kubernetes: VM detail page
- Realmd: Install on demand
--------------------------------------------------------------------------------
================================================================================
dmidecode-3.1-7.fc28 (FEDORA-2018-9e37171f84)
Tool to analyse BIOS DMI data
--------------------------------------------------------------------------------
Update Information:
patched up to upstream commit bd78a5dfd4
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 2 2018 Anton Arapov <aarapov(a)redhat.com> - 1:3.1-7
- patched up to upstream commit bd78a5dfd4
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:3.1-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
docker-1.13.1-61.git9cb56fd.fc28 (FEDORA-2018-b416bc3799)
Automates deployment of containerized applications
--------------------------------------------------------------------------------
Update Information:
simplify d-s-s config file installation
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 23 2018 Jonathan Lebon <jonathan(a)jlebon.com> - 2:1.13.1-61.git9cb56fd
- simplify d-s-s config file installation
--------------------------------------------------------------------------------
================================================================================
esc-1.1.2-2.fc28 (FEDORA-2018-65e12473ef)
Enterprise Security Client Smart Card Client
--------------------------------------------------------------------------------
Update Information:
Remove uneeded Requires and no longer put in autostart directory. ---- Build
bare bones esc, without xulrunner, using gjs / gobject ---- Rebuild. ----
Remove coolkey dependencies, replace with opensc.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 1 2018 Jack Magne <jmagne(a)redhat.com> - 1.1.2-1
- Remove uneeded Requires and no longer put in autostart directory.
* Mon Jul 30 2018 Jack Magne <jmagne(a)redhat.com> - 1.1.2-1
- Build bare bones esc, without xulrunner, using gjs / gobject
- introspection.
* Thu Jun 7 2018 Jack Magne <jmagne(a)redhat.com> - 1.1.1-5
- Rebuild.
* Mon Apr 23 2018 Jack Magne <jmagne(a)redhat.com> - 1.1.1-4
- Remove coolkey dependencies, replace with opensc.
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Thu Jan 11 2018 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 1.1.1-2
- Remove obsolete scriptlets
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1538645 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1538645
--------------------------------------------------------------------------------
================================================================================
exiv2-0.26-12.fc28 (FEDORA-2018-8b67a5c7e2)
Exif and Iptc metadata manipulation library
--------------------------------------------------------------------------------
Update Information:
Exiv2 update with security fixes.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 24 2018 Jan Grulich <jgrulich(a)redhat.com> - 0.26-12
- Security fix for CVE-2017-17723, CVE-2017-17725, CVE-2018-10958, CVE-2018-10998,
CVE-2018-11531, CVE-2018-12264, CVE-2018-12265, CVE-2018-14046, CVE-2018-5772,
CVE-2018-8976, CVE-2018-8977, CVE-2018-9144
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.26-11
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1566735 - CVE-2018-9305 exiv2: out of bounds read in IptcData::printStructure
in iptc.c
https://bugzilla.redhat.com/show_bug.cgi?id=1566735
--------------------------------------------------------------------------------
================================================================================
gdb-8.1.1-1.fc28 (FEDORA-2018-8a9a9881fa)
A stub package for GNU source-level debugger
--------------------------------------------------------------------------------
Update Information:
Rebase to FSF GDB 8.1.1.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 1 2018 Sergio Durigan Junior <sergiodj(a)redhat.com> - 8.1.1-1.fc28
- Rebase to FSF GDB 8.1.1.
- Rebase gdb-rhbz881849-ipv6-3of3.patch.
--------------------------------------------------------------------------------
================================================================================
git-cinnabar-0.5.0-0.5.b4.fc28 (FEDORA-2018-5352ed57ac)
Git remote helper to interact with mercurial repositories
--------------------------------------------------------------------------------
Update Information:
Update to latest beta
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 16 2018 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> -
0.5.0-0.5.b4
- Update to latest beta
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
0.5.0-0.4.b3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Sat Jun 16 2018 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> -
0.5.0-0.3.b3
- Make Python byte-compilation explicit
--------------------------------------------------------------------------------
================================================================================
gsignond-plugin-oauth-0-0.4.20180513.git43fee49.fc28 (FEDORA-2018-f787a57ed7)
OAuth plugin for gsignond
--------------------------------------------------------------------------------
Update Information:
Bump to commit 43fee49 and add patch to fix building with meson 0.47+.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 27 2018 Fabio Valentini <decathorpe(a)gmail.com> -
0-0.4.20180513.git43fee49
- Bump to commit 43fee49.
- Add patch to fix building with meson 0.47+.
--------------------------------------------------------------------------------
================================================================================
gsignond-plugin-sasl-0-0.4.20171111.git671022f.fc28 (FEDORA-2018-e8a48a536d)
SASL plugin for gsignond
--------------------------------------------------------------------------------
Update Information:
Add patch to fix building with meson 0.47+.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 27 2018 Fabio Valentini <decathorpe(a)gmail.com> -
0-0.4.20171111.git671022f
- Add patch to fix building with meson 0.47+.
--------------------------------------------------------------------------------
================================================================================
hwdata-0.314-1.fc28 (FEDORA-2018-257415f762)
Hardware identification and configuration data
--------------------------------------------------------------------------------
Update Information:
Updated pci, usb and vendor ids.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 2 2018 Vitezslav Crhonek <vcrhonek(a)redhat.com> - 0.314-1
- Updated pci, usb and vendor ids.
--------------------------------------------------------------------------------
================================================================================
kgb-bot-1.51-1.fc28 (FEDORA-2018-8087ea3a46)
IRC Collaboration Bot
--------------------------------------------------------------------------------
Update Information:
New upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 1 2018 Andrea Veri <averi(a)fedoraproject.org> - 1.51-1
- New upstream release.
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.31-17
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Sat Jun 30 2018 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.31-16
- Perl 5.28 rebuild
--------------------------------------------------------------------------------
================================================================================
lftp-4.8.4-1.fc28 (FEDORA-2018-70840f64e1)
A sophisticated file transfer program
--------------------------------------------------------------------------------
Update Information:
New version 4.8.4
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 1 2018 Michal Ruprich <mruprich(a)redhat.com> - 4.8.4-1
- New version 4.8.4
* Thu Apr 26 2018 Tomas Hozza <thozza(a)redhat.com> - 4.8.3-3
- Added gcc-c++ as an explicit BuildRequires
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1610769 - lftp-4.8.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1610769
--------------------------------------------------------------------------------
================================================================================
libbytesize-1.4-1.fc28 (FEDORA-2018-491cb9d82d)
A library for working with sizes in bytes
--------------------------------------------------------------------------------
Update Information:
New upstream release; Small bugfixes, mostly in tests.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 2 2018 Vojtech Trefny <vtrefny(a)redhat.com> - 1.4-1
- Squashed 'translation-canary/' changes from 840c2d6..fccbb1b (vtrefny)
- Make sure the test script fails if one of the test runs fail (vtrefny)
- Do not try to run python2 tests without python2 support (vtrefny)
- Fix licence header for "gettext.h" (vtrefny)
- Do not use rpm to check for Zanata client (vtrefny)
- Use new ldconfig_scriptlets macro in spec (vtrefny)
--------------------------------------------------------------------------------
================================================================================
libmspack-0.7-0.1.alpha.fc28 (FEDORA-2018-ddda173f56)
Library for CAB and related files compression and decompression
--------------------------------------------------------------------------------
Update Information:
New upstream version 0.7alpha. Fixes CVE-2018-14679 libmspack: off-by-one error
in the CHM PMGI/PMGL chunk number validity checks
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 1 2018 Richard W.M. Jones <rjones(a)redhat.com> - 0.7-0.1.alpha
- New upstream version 0.7alpha.
- No tarball was uploaded so temporarily use tarball from github.
- Fixes CVE-2018-14679 libmspack: off-by-one error in the CHM PMGI/PMGL
chunk number validity checks
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
0.6-0.3.alpha
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1610890 - CVE-2018-14679 libmspack: off-by-one error in the CHM PMGI/PMGL
chunk number validity checks
https://bugzilla.redhat.com/show_bug.cgi?id=1610890
--------------------------------------------------------------------------------
================================================================================
libpcap-1.9.0-1.fc28 (FEDORA-2018-b66b267b31)
A system-independent interface for user-level packet capture
--------------------------------------------------------------------------------
Update Information:
New version 1.9.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 1 2018 Michal Ruprich <mruprich(a)redhat.com> - 14:1.9.0-1
- new version 1.9.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1607187 - libpcap-1.9.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1607187
--------------------------------------------------------------------------------
================================================================================
libthai-0.1.28-1.fc28 (FEDORA-2018-8fc92c9687)
Thai language support routines
--------------------------------------------------------------------------------
Update Information:
Update to 0.1.28
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 2 2018 Peng Wu <pwu(a)redhat.com> - 0.1.28-1
- Update to 0.1.28
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.1.27-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1610770 - libthai-0.1.28 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1610770
--------------------------------------------------------------------------------
================================================================================
mediawriter-4.1.2-1.fc28 (FEDORA-2018-5c59964d12)
Fedora Media Writer
--------------------------------------------------------------------------------
Update Information:
Update to 4.1.2
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 2 2018 Martin B����za <m(a)rtinbriza.cz> - 4.1.2-1
- Update to 4.1.2
- Update URLs
- Resolves #1590315
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.1.1-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.1.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1590315 - Fedora Media Writer Crashes when clicking to download Fedora Server
Edition.
https://bugzilla.redhat.com/show_bug.cgi?id=1590315
--------------------------------------------------------------------------------
================================================================================
mingw-glib2-2.56.1-1.fc28 (FEDORA-2018-3238d4da59)
MinGW Windows GLib2 library
--------------------------------------------------------------------------------
Update Information:
- update to 2.56.x
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 28 2018 Thomas Sailer <t.sailer(a)alumni.ethz.ch> - 2.56.1-1
- Update to 2.56.1
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.54.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1470113 - CVE-2017-11164 mingw-glib2: pcre: OP_KETRMAX feature in the match
function in pcre_exec.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470113
[ 2 ] Bug #1437487 - CVE-2017-7244 CVE-2017-7245 CVE-2017-7246 mingw-glib2: various
flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1437487
[ 3 ] Bug #1434514 - CVE-2017-7186 mingw-glib2: pcre, pcre2: Invalid Unicode property
lookup [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1434514
--------------------------------------------------------------------------------
================================================================================
mingw-glibmm24-2.56.0-1.fc28 (FEDORA-2018-3238d4da59)
MinGW Windows C++ interface for GTK2 (a GUI library for X)
--------------------------------------------------------------------------------
Update Information:
- update to 2.56.x
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 2 2018 Thomas Sailer <t.sailer(a)alumni.ethz.ch> - 2.56.0-1
- update to 2.56.0
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.54.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1470113 - CVE-2017-11164 mingw-glib2: pcre: OP_KETRMAX feature in the match
function in pcre_exec.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470113
[ 2 ] Bug #1437487 - CVE-2017-7244 CVE-2017-7245 CVE-2017-7246 mingw-glib2: various
flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1437487
[ 3 ] Bug #1434514 - CVE-2017-7186 mingw-glib2: pcre, pcre2: Invalid Unicode property
lookup [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1434514
--------------------------------------------------------------------------------
================================================================================
mingw-mpfr-3.1.6-2.fc28 (FEDORA-2018-60ce3bef1b)
MinGW C library for multiple-precision floating-point computations
--------------------------------------------------------------------------------
Update Information:
- update to 3.1.6 ---- - update to 3.1.6 to match native version
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 2 2018 Thomas Sailer <t.sailer(a)alumni.ethz.ch> - 3.1.6-2
- update to 3.1.6
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.1.5-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
mingw-tcl-8.6.8-1.fc28 (FEDORA-2018-29187bb798)
MinGW Windows Tool Command Language, pronounced tickle
--------------------------------------------------------------------------------
Update Information:
- update to 8.6.8
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 2 2018 Thomas Sailer <t.sailer(a)alumni.ethz.ch> - 8.6.8-1
- update to 8.6.8
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 8.6.7-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
nbdkit-1.4.2-1.fc28 (FEDORA-2018-6a6d6e7d97)
NBD server
--------------------------------------------------------------------------------
Update Information:
New upstream version 1.4.2. ---- New upstream version 1.4.1.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 1 2018 Richard W.M. Jones <rjones(a)redhat.com> - 1.4.2-1
- New upstream version 1.4.2.
* Fri Jul 20 2018 Richard W.M. Jones <rjones(a)redhat.com> - 1.4.1-1
- New upstream version 1.4.1.
- Small refactorings in the spec file.
--------------------------------------------------------------------------------
================================================================================
php-symfony-2.8.44-1.fc28 (FEDORA-2018-9b54497b6e)
PHP framework for web projects
--------------------------------------------------------------------------------
Update Information:
## 2.8.44 (2018-08-01) * security #cve-2018-14774 [HttpKernel] fix trusted
headers management in HttpCache and InlineFragmentRenderer (nicolas-grekas) *
security #cve-2018-14773 [HttpFoundation] Remove support for legacy and risky
HTTP headers (nicolas-grekas) * bug #28003 [HttpKernel] Fixes invalid
REMOTE_ADDR in inline subrequest when configuring trusted proxy with subnet
(netiul) * bug #28045 [HttpFoundation] Fix Cookie::isCleared (ro0NL) * bug
#28080 [HttpFoundation] fixed using _method parameter with invalid type
(Phobetor) ## 2.8.43 (2018-07-23) * bug #28005 [HttpKernel] Fixed
templateExists on parse error of the template name (yceruto) * bug #27997
Serbo-Croatian has Serbian plural rule (kylekatarnls) * bug #27941
[WebProfilerBundle] Fixed icon alignment issue using Bootstrap 4.1.2 (jmsche) *
bug #27937 [HttpFoundation] reset callback on StreamedResponse when
setNotModified() is called (rubencm) * bug #27927 [HttpFoundation] Suppress
side effects in 'get' and 'has' methods of NamespacedAttributeBag
(webnet-fr) *
bug #27904 [Filesystem] fix lock file permissions (fritzmg) * bug #27758
[WebProfilerBundle] Prevent toolbar links color override by css (alcalyn) * bug
#27831 Check for Hyper terminal on all operating systems. (azjezz) * bug
#27794 Add color support for Hyper terminal . (azjezz) * bug #27809
[HttpFoundation] Fix tests: new message for status 425 (dunglas) * bug #27716
[DI] fix dumping deprecated service in yaml (nicolas-grekas)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 1 2018 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 2.8.44-1
- Update to 2.8.44 (CVE-2018-14773 / CVE-2018-14774)
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.8.42-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
php-symfony3-3.4.14-1.fc28 (FEDORA-2018-9c38d1dc1d)
Symfony PHP framework (version 3)
--------------------------------------------------------------------------------
Update Information:
## 3.4.14 (2018-08-01) * security #cve-2018-14774 [HttpKernel] fix trusted
headers management in HttpCache and InlineFragmentRenderer (nicolas-grekas) *
security #cve-2018-14773 [HttpFoundation] Remove support for legacy and risky
HTTP headers (nicolas-grekas) * bug #28003 [HttpKernel] Fixes invalid
REMOTE_ADDR in inline subrequest when configuring trusted proxy with subnet
(netiul) * bug #28007 [FrameworkBundle] fixed guard event names for transitions
(destillat) * bug #28045 [HttpFoundation] Fix Cookie::isCleared (ro0NL) * bug
#28080 [HttpFoundation] fixed using _method parameter with invalid type
(Phobetor) * bug #28052 [HttpKernel] Fix merging bindings for controllers'
locators (nicolas-grekas) ## 3.4.13 (2018-07-23) * bug #28005 [HttpKernel]
Fixed templateExists on parse error of the template name (yceruto) * bug #27997
Serbo-Croatian has Serbian plural rule (kylekatarnls) * bug #26193 Fix false-
positive deprecation notices for TranslationLoader and WriteCheckSessionHandler
(iquito) * bug #27941 [WebProfilerBundle] Fixed icon alignment issue using
Bootstrap 4.1.2 (jmsche) * bug #27937 [HttpFoundation] reset callback on
StreamedResponse when setNotModified() is called (rubencm) * bug #27927
[HttpFoundation] Suppress side effects in 'get' and 'has' methods of
NamespacedAttributeBag (webnet-fr) * bug #27923 [Form/Profiler] Massively
reducing memory footprint of form profiling pages... (VincentChalnot) * bug
#27918 [Console] correctly return parameter's default value on "--"
(seschwar)
* bug #27904 [Filesystem] fix lock file permissions (fritzmg) * bug #27903
[Lock] fix lock file permissions (fritzmg) * bug #27889 [Form] Replace
.initialism with .text-uppercase. (vudaltsov) * bug #27902 Fix the detection of
the Process new argument (stof) * bug #27885 [HttpFoundation] don't encode
cookie name for BC (nicolas-grekas) * bug #27782 [DI] Fix dumping ignore-on-
uninitialized references to synthetic services (nicolas-grekas) * bug #27435
[OptionResolver] resolve arrays (Doctrs) * bug #27728 [TwigBridge] Fix missing
path and separators in loader paths list on debug:twig output (yceruto) * bug
#27837 [PropertyInfo] Fix dock block lookup fallback loop (DerManoMann) * bug
#27758 [WebProfilerBundle] Prevent toolbar links color override by css (alcalyn)
* bug #27834 [DI] Don't show internal service id on binding errors (nicolas-
grekas) * bug #27831 Check for Hyper terminal on all operating systems.
(azjezz) * bug #27794 Add color support for Hyper terminal . (azjezz) * bug
#27809 [HttpFoundation] Fix tests: new message for status 425 (dunglas) * bug
#27618 [PropertyInfo] added handling of nullable types in PhpDoc (oxan) * bug
#27659 [HttpKernel] Make AbstractTestSessionListener compatible with
CookieClearingLogoutHandler (thewilkybarkid) * bug #27752 [Cache] provider does
not respect option maxIdLength with versioning enabled (Constantine Shtompel) *
bug #27776 [ProxyManagerBridge] Fix support of private services (bis) (nicolas-
grekas) * bug #27714 [HttpFoundation] fix session tracking counter (nicolas-
grekas, dmaicher) * bug #27747 [HttpFoundation] fix registration of session
proxies (nicolas-grekas) * bug #27722 Redesign the Debug error page in prod
(javiereguiluz) * bug #27716 [DI] fix dumping deprecated service in yaml
(nicolas-grekas)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 1 2018 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 3.4.14-1
- Update to 3.4.14 (CVE-2018-14773 / CVE-2018-14774)
- Add conflict php-composer(phpdocumentor/type-resolver) < 0.3.0
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.4.12-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
psad-2.4.6-1.fc28 (FEDORA-2018-88e267a058)
Port Scan Attack Detector (psad) watches for suspect traffic
--------------------------------------------------------------------------------
Update Information:
* Add EMAIL_APPEND_HEADER to allow psad alerts to have custom email headers
appended to outbound emails. This uses the '-a' command line argument offered by
the 'mail' command. An example usage would be to set the 'From' email
header. *
Bug fix for ENABLE_OVERRIDE_FW_CMD feature to allow global option settings to
the underlying firewall command to be controlled via a new variable FW_CMD_ARGS.
This variable is only used when ENABLE_OVERRIDE_FW_CMD is enabled, and is set to
NONE by default. Normally, on systems running firewalld, the command line
arguments '--direct --passthrough ipv4' are set provided, but FW_CMD_ARGS can be
used to control this. * For iptables logs generated by fwsnort, include the
contents of the 'metadata' Snort rule field in psad email alerts. * Updated to
bundle the latest Emerging Threats rule set in deps/snort_rules.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 1 2018 Dominik Mierzejewski <rpm(a)greysector.net> - 2.4.6-1
- update to 2.4.6 (#1611013)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1611013 - psad-2.4.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1611013
--------------------------------------------------------------------------------
================================================================================
python-autobahn-18.7.1-1.fc28 (FEDORA-2018-0a25215226)
Python networking library for WebSocket and WAMP
--------------------------------------------------------------------------------
Update Information:
Update to 18.7.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 1 2018 Julien Enselme <jujens(a)jujens.eu> - 18.7.1-1
- Update to 18.7.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1609525 - python-autobahn-18.7.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1609525
--------------------------------------------------------------------------------
================================================================================
python-feedgenerator-1.9-6.fc28 (FEDORA-2018-0d2c427d03)
Standalone version of Django's feedgenerator module
--------------------------------------------------------------------------------
Update Information:
New package!
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1379651 - Review Request: python-feedgenerator - Standalone version of
Django's feedgenerator module
https://bugzilla.redhat.com/show_bug.cgi?id=1379651
--------------------------------------------------------------------------------
================================================================================
python-pytoml-0.1.18-1.fc28 (FEDORA-2018-2aedf21b24)
Parser for TOML
--------------------------------------------------------------------------------
Update Information:
Update to 0.1.18
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 1 2018 Julien Enselme <jujens(a)jujens.eu> - 0.1.18-1
- Update to 0.1.18
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1597060 - python-pytoml-v0.1.18 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1597060
--------------------------------------------------------------------------------
================================================================================
python-txaio-18.7.1-1.fc28 (FEDORA-2018-f503249d73)
Compatibility API between asyncio/Twisted/Trollius
--------------------------------------------------------------------------------
Update Information:
Update to 18.7.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 1 2018 Julien Enselme <jujens(a)jujens.eu> - 18.7.1-1
- Update to 18.7.1
--------------------------------------------------------------------------------
================================================================================
ravada-0.3.0-0.2.beta6.fc28 (FEDORA-2018-13d236bee8)
Remote Virtual Desktops Manager
--------------------------------------------------------------------------------
Update Information:
Add missing BR for tests ---- Pre-release 0.3.0 beta6
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 1 2018 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.3.0-0.2.beta6
- Add missing BR for tests
- Install rvd_benchmark_create
* Fri Jul 27 2018 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.3.0-0.1.beta6
- Pre-release 0.3.0 beta6
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1609338 - RFE - Please provide update to Ravada Ravada 0.3.0-rc1
https://bugzilla.redhat.com/show_bug.cgi?id=1609338
--------------------------------------------------------------------------------
================================================================================
roundcubemail-1.3.7-1.fc28 (FEDORA-2018-b67ae97f7a)
Round Cube Webmail is a browser-based multilingual IMAP client
--------------------------------------------------------------------------------
Update Information:
Update to 1.3.7, a bugfix release.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 1 2018 Kevin Fenzi <kevin(a)scrye.com> - 1.3.7-1
- Update to 1.3.7. Fixes bug #1609445
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.6-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1609445 - roundcubemail-1.3.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1609445
--------------------------------------------------------------------------------
================================================================================
scamp-2.0.4-12.fc28 (FEDORA-2018-3104a8117b)
compute astrometric and photometric solutions from sextractor catalogs
--------------------------------------------------------------------------------
Update Information:
Added patch to fix a segfault in fields.c
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 2 2018 Christian Dersch <lupinix.fedora(a)gmail.com> - 2.0.4-12
- Fix segfault in field.c:343
* Mon Jul 23 2018 Orion Poplawski <orion(a)nwra.com> - 2.0.4-11
- Rebuild for plplot 5.13
- Cleanup spec
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.4-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
seafile-6.2.3-2.fc28 (FEDORA-2018-5e6ee32662)
Cloud storage cli client
--------------------------------------------------------------------------------
Update Information:
Update to 6.2.3
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 1 2018 Julien Enselme <jujens(a)jujens.eu> - 6.2.3-2
- Correct ccnet requirement
* Wed Aug 1 2018 Julien Enselme <jujens(a)jujens.eu> - 6.2.3-1
- Update to 6.2.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1562039 - ccnet-6.1.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1562039
--------------------------------------------------------------------------------
================================================================================
seafile-client-6.2.3-1.fc28 (FEDORA-2018-5e6ee32662)
Seafile cloud storage desktop client
--------------------------------------------------------------------------------
Update Information:
Update to 6.2.3
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 1 2018 Julien Enselme <jujens(a)jujens.eu> - 6.2.3-1
- Update to 6.2.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1562039 - ccnet-6.1.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1562039
--------------------------------------------------------------------------------
================================================================================
timeline-1.18.0-1.fc28 (FEDORA-2018-0e7d003c48)
Displays and navigates events on a timeline
--------------------------------------------------------------------------------
Update Information:
1.18.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 1 2018 Gwyn Ciesla <limburgher(a)gmail.com> - 1.18.0-1
- 1.18.0
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.17.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1610579 - timeline-1.18.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1610579
[ 2 ] Bug #1606520 - timeline: FTBFS in Fedora rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1606520
--------------------------------------------------------------------------------
================================================================================
tracker-2.1.1-1.fc28 (FEDORA-2018-28271bc6d4)
Desktop-neutral metadata database and search tool
--------------------------------------------------------------------------------
Update Information:
tracker 2.1.1 release. * libtracker-direct: Plug leaks * libtracker-sparql-
backend: Fix fallback from direct to bus connection for queries.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 1 2018 Kalev Lember <klember(a)redhat.com> - 2.1.1-1
- Update to 2.1.1
--------------------------------------------------------------------------------
================================================================================
vim-8.1.233-1.fc28 (FEDORA-2018-c826547822)
The VIM editor
--------------------------------------------------------------------------------
Update Information:
The newest upstream commit
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 2 2018 Zdenek Dohnal <zdohnal(a)redhat.com> - 2:8.1.233-1
- patchlevel 233
* Tue Jul 31 2018 Florian Weimer <fweimer(a)redhat.com> - 2:8.1.229-2
- Rebuild with fixed binutils
--------------------------------------------------------------------------------
================================================================================
virtualbox-guest-additions-5.2.16-2.fc28 (FEDORA-2018-76c85a4bd6)
VirtualBox Guest Additions
--------------------------------------------------------------------------------
Update Information:
Hack to force instalation of same version VirtualBox-kmodsrc and
virtualBox-guest-additions
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 1 2018 S��rgio Basto <sergio(a)serjux.com> - 5.2.16-2
- Force instalation of same version VirtualBox-kmodsrc and
virtualBox-guest-additions
--------------------------------------------------------------------------------