The following Fedora 28 Security updates need testing:
Age URL
161
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d510cfd7eb
jgraphx-3.6.0.0-6.fc28
111
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d7aeaa74da
nodejs-brace-expansion-1.1.11-1.fc28
109
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc073fdc1a
nodejs-atob-2.1.1-1.fc28
102
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9dd3f7c013
unrtf-0.21.9-8.fc28
70
https://bodhi.fedoraproject.org/updates/FEDORA-2018-28e9841baf
docker-latest-1.13.1-37.git9cb56fd.fc28
19
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4f0089c995
yum-utils-1.1.31-515.fc28
13
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1735cbc422 CImg-2.3.6-1.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b6072889db php-7.2.10-1.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2bba84217a
php-tcpdf-6.2.22-1.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9fc46b45ab
visualboyadvance-m-2.1.0-2.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1758d97170
yaml-cpp-0.6.1-4.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e9821afbca
mozilla-noscript-10.1.9.6-1.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-690535d30b
moodle-3.4.5-1.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-37a27807e0
hylafax+-5.6.1-1.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2062cd7548
libbson-1.9.5-3.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1e79c12af0
zchunk-0.9.10-1.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1cb4c4a6d8 lcms2-2.9-4.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d42addb489
spamassassin-3.4.2-1.fc28
The following Fedora 28 Critical Path updates have yet to be approved:
Age URL
19
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4f0089c995
yum-utils-1.1.31-515.fc28
18
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9403743de2
edk2-20180815gitcb5f4f45ce-1.fc28
13
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6a3d2795ab
pungi-4.1.28-1.fc28
13
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f06af0ec34 qemu-2.11.2-4.fc28
13
https://bodhi.fedoraproject.org/updates/FEDORA-2018-221c934152
perl-File-Path-2.16-1.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b34ee01b0d
iproute-4.18.0-1.fc28
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8217a06c3a pcre2-10.32-1.fc28
perl-re-engine-PCRE2-0.14-4.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-33c28dc24f
dash-0.5.10.2-1.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-038d8f7b50
NetworkManager-1.10.12-1.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1cb4c4a6d8 lcms2-2.9-4.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b26195ce1d
dmidecode-3.2-1.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-337910120d pcre2-10.32-2.fc28
The following builds have been pushed to Fedora 28 updates-testing
R-simmer-4.0.1-1.fc28
argbash-2.7.1-1.fc28
beakerlib-libraries-0.3-1.fc28
chrony-3.4-1.fc28
cockpit-178-1.fc28
colin-0.2.0-1.fc28
cups-2.2.6-23.fc28
gnome-shell-extension-system-monitor-applet-36-1.20180919git21ae32a.fc28
guayadeque-0.4.5-0.17.beta1git9688c4d.fc28
ipmctl-01.00.00.3262-1.fc28
kernel-4.18.9-200.fc28
kernel-headers-4.18.9-200.fc28
libopusenc-0.2-1.fc28
opensips-2.3.5-1.fc28
opus-1.3-0.7.rc2.fc28
opus-tools-0.2-1.fc28
opusfile-0.11-1.fc28
pdns-4.1.4-1.fc28
perl-DateTime-Format-Flexible-0.31-1.fc28
perl-Inline-CPP-0.75-1.fc28
podman-0.9.2-2.git81df604.fc28
python-blessings-1.7-3.fc28
python-celery-4.0.2-7.fc28
vim-8.1.408-1.fc28
Details about builds:
================================================================================
R-simmer-4.0.1-1.fc28 (FEDORA-2018-e34843f0b2)
Discrete-Event Simulation for R
--------------------------------------------------------------------------------
Update Information:
Update to 4.0.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 19 2018 I��aki ��car <iucar(a)fedoraproject.org> - 4.0.1-1
- Update to 4.0.1
- Reflow indentations
--------------------------------------------------------------------------------
================================================================================
argbash-2.7.1-1.fc28 (FEDORA-2018-e203dd7b84)
Bash argument parsing code generator
--------------------------------------------------------------------------------
Update Information:
Update to argbash 2.7.1
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 20 2018 Stephen Gallagher <sgallagh(a)redhat.com> - 2.7.1-1
- Update to 2.7.1
- The bash completion now supports arguments of one-of-restricted values.
- Tests pass when there is no dash shell installed.
- The double-dash handling when -- is the last argument has been improved.
- The generated bash completion is now complementing (i.e. not shadowing) the
default bash completion.
- Docopt fatal regression has been fixed.
- Tests were added for docopt output.
* Thu Jul 19 2018 Stephen Gallagher <sgallagh(a)redhat.com> - 2.7.0-1
- Update to 2.7.0
-
https://github.com/matejak/argbash/releases/tag/2.7.0
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.6.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1603145 - argbash-2.7.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1603145
--------------------------------------------------------------------------------
================================================================================
beakerlib-libraries-0.3-1.fc28 (FEDORA-2018-c8d0435095)
Beakerlib libraries
--------------------------------------------------------------------------------
Update Information:
Update to 0.3
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
chrony-3.4-1.fc28 (FEDORA-2018-81c6859230)
An NTP client/server
--------------------------------------------------------------------------------
Update Information:
Update to the latest upstream release.
https://chrony.tuxfamily.org/news.html
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 19 2018 Miroslav Lichvar <mlichvar(a)redhat.com> 3.4-1
- update to 3.4
* Fri Aug 31 2018 Miroslav Lichvar <mlichvar(a)redhat.com> 3.4-0.1.pre1
- update to 3.4-pre1
* Mon Aug 13 2018 Miroslav Lichvar <mlichvar(a)redhat.com> 3.3-5
- fix PIDFile in local chronyd.service on upgrades from chrony < 3.3-2
- add workaround for late reload of unit file (#1614751)
* Mon Jul 16 2018 Miroslav Lichvar <mlichvar(a)redhat.com> 3.3-4
- add gcc-c++ to build requirements
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.3-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Mon Jun 18 2018 Miroslav Lichvar <mlichvar(a)redhat.com> 3.3-2
- move pidfile to /var/run/chrony to allow chronyd to remove it on exit
- avoid blocking in getrandom system call
--------------------------------------------------------------------------------
================================================================================
cockpit-178-1.fc28 (FEDORA-2018-d8a4c9b097)
A user interface for Linux servers
--------------------------------------------------------------------------------
Update Information:
- Dropped support for KubeVirt
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 19 2018 Marius Vollmer <mvollmer(a)redhat.com> - 178-1
- Dropped support for KubeVirt
--------------------------------------------------------------------------------
================================================================================
colin-0.2.0-1.fc28 (FEDORA-2018-89d470cd1a)
Tool to check generic rules/best-practices for containers/images/dockerfiles.
--------------------------------------------------------------------------------
Update Information:
New upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 19 2018 Jiri Popelka <jpopelka(a)redhat.com> 0.2.0-1
- 0.2.0 release
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.1.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 0.1.0-2
- Rebuilt for Python 3.7
* Wed May 30 2018 Jiri Popelka <jpopelka(a)redhat.com> 0.1.0-1
- 0.1.0 release
--------------------------------------------------------------------------------
================================================================================
cups-2.2.6-23.fc28 (FEDORA-2018-d1672574e5)
CUPS printing system
--------------------------------------------------------------------------------
Update Information:
1618018 - Make cups systemd unit files more upstream-like
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 19 2018 Zdenek Dohnal <zdohnal(a)redhat.com> - 1:2.2.6-23
- 1618018 - Make cups systemd unit files more upstream-like
--------------------------------------------------------------------------------
================================================================================
gnome-shell-extension-system-monitor-applet-36-1.20180919git21ae32a.fc28
(FEDORA-2018-b258b6bf3f)
A Gnome shell system monitor extension
--------------------------------------------------------------------------------
Update Information:
Updated to last upstream commits
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 19 2018 Nicolas Vi��ville <nicolas.vieville(a)univ-valenciennes.fr> -
1:36-1.20180919git21ae32a
- Updated to last upstream commits
- Support for gnome-shell 3.30 added
- Close unwanted _stdin_ and _stderr_ file descriptors
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
1:35-3.20180629gitd0b3a3a
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
guayadeque-0.4.5-0.17.beta1git9688c4d.fc28 (FEDORA-2018-88cfe24f34)
Music player
--------------------------------------------------------------------------------
Update Information:
Update to 0.4.5-0.17.beta1git9688c4d ---- Update to 0.4.5-0.16.beta1gitfa7ab20
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 20 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
0.4.5-0.17.beta19688c4d
- Update to 0.4.5-0.17.beta19688c4d
* Thu Sep 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
0.4.5-0.16.beta1fa7ab20
- Update to 0.4.5-0.16.beta1gitfa7ab20
--------------------------------------------------------------------------------
================================================================================
ipmctl-01.00.00.3262-1.fc28 (FEDORA-2018-fc4e7fc9bc)
Utility for managing Intel Optane DC persistent memory modules
--------------------------------------------------------------------------------
Update Information:
Initial release 01.00.00.3262
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1628752 - Review Request: ipmctl - Utility for managing Intel DCPMM
https://bugzilla.redhat.com/show_bug.cgi?id=1628752
--------------------------------------------------------------------------------
================================================================================
kernel-4.18.9-200.fc28 (FEDORA-2018-e820fccd83)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 4.18.9 stable update contains a number of important fixes across the tree.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 20 2018 Laura Abbott <labbott(a)redhat.com> - 4.18.9-200
- Linux v4.18.9
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1631205 - CVE-2018-17182 kernel: Use-after-free in the vmacache_flush_all
function resulting in a possible privilege escalation
https://bugzilla.redhat.com/show_bug.cgi?id=1631205
--------------------------------------------------------------------------------
================================================================================
kernel-headers-4.18.9-200.fc28 (FEDORA-2018-e820fccd83)
Header files for the Linux kernel for use by glibc
--------------------------------------------------------------------------------
Update Information:
The 4.18.9 stable update contains a number of important fixes across the tree.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 20 2018 Laura Abbott <labbott(a)redhat.com> - 4.18.9-200
- Linux v4.18.9
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1631205 - CVE-2018-17182 kernel: Use-after-free in the vmacache_flush_all
function resulting in a possible privilege escalation
https://bugzilla.redhat.com/show_bug.cgi?id=1631205
--------------------------------------------------------------------------------
================================================================================
libopusenc-0.2-1.fc28 (FEDORA-2018-6053f02a8d)
A library that provides an easy way to encode Ogg Opus files
--------------------------------------------------------------------------------
Update Information:
New upstream opus releases
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 19 2018 Peter Robinson <pbrobinson(a)fedoraproject.org> 0.2-1
- New upstream 0.2 release
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.1.1-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
opensips-2.3.5-1.fc28 (FEDORA-2018-747d462386)
Open Source SIP Server
--------------------------------------------------------------------------------
Update Information:
* OpenSIPS ver. 2.3.5
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 20 2018 Peter Lemenkov <lemenkov(a)gmail.com> - 2.3.5-1
- Ver. 2.3.5
* Tue Jul 24 2018 Adam Williamson <awilliam(a)redhat.com> - 2.3.4-4
- Rebuild for new net-snmp
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.3.4-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Fri Jun 29 2018 Jitka Plesnikova <jplesnik(a)redhat.com> - 2.3.4-2
- Perl 5.28 rebuild
--------------------------------------------------------------------------------
================================================================================
opus-1.3-0.7.rc2.fc28 (FEDORA-2018-6053f02a8d)
An audio codec for use in low-delay speech and audio communication
--------------------------------------------------------------------------------
Update Information:
New upstream opus releases
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 19 2018 Peter Robinson <pbrobinson(a)fedoraproject.org> 1.3-0.7.rc2
- Update to 1.3 rc2
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
1.3-0.6.rc
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
opus-tools-0.2-1.fc28 (FEDORA-2018-6053f02a8d)
A set of tools for the opus audio codec
--------------------------------------------------------------------------------
Update Information:
New upstream opus releases
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 19 2018 Peter Robinson <pbrobinson(a)fedoraproject.org> 0.2-1
- update to 0.2
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.1.10-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
opusfile-0.11-1.fc28 (FEDORA-2018-6053f02a8d)
A high-level API for decoding and seeking within .opus files
--------------------------------------------------------------------------------
Update Information:
New upstream opus releases
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 19 2018 Peter Robinson <pbrobinson(a)fedoraproject.org> 0.11
- Update to 0.11
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.10-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
pdns-4.1.4-1.fc28 (FEDORA-2018-a38f643927)
A modern, advanced and high performance authoritative-only nameserver
--------------------------------------------------------------------------------
Update Information:
- Update to 4.1.4 Release notes:
https://doc.powerdns.com/authoritative/changelog/4.1.html#change-4.1.4
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 19 2018 Morten Stevens <mstevens(a)fedoraproject.org> - 4.1.4-1
- Update to 4.1.4
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.1.3-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
perl-DateTime-Format-Flexible-0.31-1.fc28 (FEDORA-2018-eb4edad894)
Flexibly parse strings and turn them into DateTime objects
--------------------------------------------------------------------------------
Update Information:
This release adds support for "Sep 10, 2018 12:58" and "Sep 10, 18
12:58"
formats.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 19 2018 Petr Pisar <ppisar(a)redhat.com> - 0.31-1
- 0.31 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1630736 - perl-DateTime-Format-Flexible-0.31 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1630736
--------------------------------------------------------------------------------
================================================================================
perl-Inline-CPP-0.75-1.fc28 (FEDORA-2018-fb0dd6c1b7)
Write Perl subroutines and classes in C++
--------------------------------------------------------------------------------
Update Information:
This release fixes info() method invocation.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 19 2018 Petr Pisar <ppisar(a)redhat.com> - 0.75-1
- 0.75 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1630741 - perl-Inline-CPP-0.75 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1630741
--------------------------------------------------------------------------------
================================================================================
podman-0.9.2-2.git81df604.fc28 (FEDORA-2018-52fc2506a0)
Manage Pods, Containers and Container Images
--------------------------------------------------------------------------------
Update Information:
Upstream 0.9.2
--------------------------------------------------------------------------------
ChangeLog:
* Sat Sep 15 2018 baude <bbaude(a)redhat.com> - 0.9.2-2.git81df604
- Upstream 0.9.2
* Tue Sep 11 2018 Lokesh Mandvekar <lsm5(a)fedoraproject.org> -
1:0.9.1.1-1.dev.git95dbcad
- bump to v0.9.1.1
- built commit 95dbcad
* Tue Sep 11 2018 baude <bbaude(a)redhat.com> - 1:0.9.1-1.dev.git123de30
- Upstream release of 0.9.1
- Do not build with devicemapper
--------------------------------------------------------------------------------
================================================================================
python-blessings-1.7-3.fc28 (FEDORA-2018-e36abedfc1)
Python library for terminal coloring, styling, and positioning
--------------------------------------------------------------------------------
Update Information:
Upstream bug fix release 1.7:
https://pypi.org/project/blessings/#version-
history
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.7-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Mon Jul 2 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 1.7-2
- Rebuilt for Python 3.7
* Tue Jun 26 2018 Dan Callaghan <dcallagh(a)redhat.com> - 1.7-1
- Upstream release 1.7 (RHBZ#1594040)
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 1.5-16
- Rebuilt for Python 3.7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1616075 - Please upgrade F28 to blessings 1.7
https://bugzilla.redhat.com/show_bug.cgi?id=1616075
--------------------------------------------------------------------------------
================================================================================
python-celery-4.0.2-7.fc28 (FEDORA-2018-4e30254b83)
Distributed Task Queue
--------------------------------------------------------------------------------
Update Information:
Celery's docs are licensed CC-BY-SA, not BSD.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 19 2018 Randy Barlow <bowlofeggs(a)fedoraproject.org> - 4.0.2-7
- Celery's docs are licensed CC-BY-SA, not BSD.
--------------------------------------------------------------------------------
================================================================================
vim-8.1.408-1.fc28 (FEDORA-2018-9ad881cf30)
The VIM editor
--------------------------------------------------------------------------------
Update Information:
The newest upstream commit
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 19 2018 Zdenek Dohnal <zdohnal(a)redhat.com> - 2:8.1.408-1
- patchlevel 408
- src/libvterm/src/termscreen.c is missing
--------------------------------------------------------------------------------