The following Fedora 28 Security updates need testing:
Age URL
74
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d510cfd7eb
jgraphx-3.6.0.0-6.fc28
46
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c75a37ae9b
blktrace-1.2.0-6.fc28
33
https://bodhi.fedoraproject.org/updates/FEDORA-2018-202c536f70
gifsicle-1.91-1.fc28
23
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d7aeaa74da
nodejs-brace-expansion-1.1.11-1.fc28
22
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc073fdc1a
nodejs-atob-2.1.1-1.fc28
16
https://bodhi.fedoraproject.org/updates/FEDORA-2018-57a9f93beb
sox-14.4.2.0-22.fc28
15
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9dd3f7c013
unrtf-0.21.9-8.fc28
14
https://bodhi.fedoraproject.org/updates/FEDORA-2018-049dee041d
mupdf-1.13.0-8.fc28
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-866bd0e3c2
dcraw-9.28.0-1.fc28
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f972c1b36e
python-XStatic-jquery-ui-1.12.0.1-2.fc28
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d3cb6f113c xen-4.10.1-4.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-0c9ce03fce
cri-o-1.10.3-1.gite558bd5.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-68349e3094
phpMyAdmin-4.8.2-1.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5c8854a808
qutebrowser-1.3.3-1.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2b96ea9fec
podman-0.6.4-1.gitd5beb2f.fc28
The following Fedora 28 Critical Path updates have yet to be approved:
Age URL
22
https://bodhi.fedoraproject.org/updates/FEDORA-2018-94ac0eace1
iproute-4.16.0-1.fc28
12
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6a92e4f47a
glusterfs-4.1.0-1.fc28
12
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4b709ebc5e lorax-28.15-1.fc28
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8683c6de9b
totem-pl-parser-3.26.1-1.fc28
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-0075e05ecb
perl-Time-Local-1.280-1.fc28
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d3cb6f113c xen-4.10.1-4.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-583469bc5d
python-productmd-1.15-1.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-faae97d0c2
uboot-tools-2018.03-6.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e993db60cc
edk2-20180529gitee3198e672e2-2.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-44436d4611 exo-0.12.2-1.fc28
xfce4-settings-4.12.4-1.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d384eab19a
ostree-2018.6-3.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-0ca2efd3f6
pulseaudio-12.0-1.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1cc52e0dd5
wpa_supplicant-2.6-16.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a89957bdb7 dtc-1.4.6-5.fc28
The following builds have been pushed to Fedora 28 updates-testing
drupal7-backup_migrate-3.5-1.fc28
drupal7-eva-1.4-1.fc28
drupal7-job_scheduler-2.0-1.fc28
drupal7-lang_dropdown-2.6-1.fc28
drupal7-taxonomy_access_fix-2.4-1.fc28
golang-github-elithrar-simple-scrypt-1.3.0-3.fc28
golang-github-kurin-blazer-0.4.4-1.fc28
golang-github-pkg-xattr-0.3.0-1.fc28
golang-github-restic-chunker-0.2.0-1.fc28
lollypop-0.9.516-1.fc28
mkvtoolnix-24.0.0-1.fc28
php-horde-Horde-Image-2.5.3-1.fc28
php-horde-Horde-Imap-Client-2.29.16-1.fc28
wine-3.11-1.fc28
Details about builds:
================================================================================
drupal7-backup_migrate-3.5-1.fc28 (FEDORA-2018-d257909403)
Backup the Drupal database and files or migrate them to another environment
--------------------------------------------------------------------------------
Update Information:
*
https://www.drupal.org/project/backup_migrate/releases/7.x-3.5 *
https://www.drupal.org/project/backup_migrate/releases/7.x-3.4 *
https://www.drupal.org/sa-contrib-2018-004 *
https://www.drupal.org/project/backup_migrate/releases/7.x-3.3
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 24 2018 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 3.5-1
- Update to 3.5 (RHBZ #1503867)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1503867 - drupal7-backup_migrate-3.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1503867
--------------------------------------------------------------------------------
================================================================================
drupal7-eva-1.4-1.fc28 (FEDORA-2018-7d7718fa20)
Provides a Views display type that can be attached to entities
--------------------------------------------------------------------------------
Update Information:
*
https://www.drupal.org/project/eva/releases/7.x-1.4
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 24 2018 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 1.4-1
- Update to 1.4 (RHBZ #1536729)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1536729 - drupal7-eva-1.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1536729
--------------------------------------------------------------------------------
================================================================================
drupal7-job_scheduler-2.0-1.fc28 (FEDORA-2018-73de7e6d24)
Simple API for scheduling tasks
--------------------------------------------------------------------------------
Update Information:
*
https://www.drupal.org/project/job_scheduler/releases/7.x-2.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 24 2018 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 2.0-1
- Update to 2.0 (RHBZ #1544736)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1544736 - drupal7-job_scheduler-2.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1544736
--------------------------------------------------------------------------------
================================================================================
drupal7-lang_dropdown-2.6-1.fc28 (FEDORA-2018-e894cd6404)
Provides a dropdown select to switch between available languages
--------------------------------------------------------------------------------
Update Information:
*
https://www.drupal.org/project/lang_dropdown/releases/7.x-2.6
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 24 2018 Shawn Iwinski <shawn.iwinski(a)gmail.com> 2.6-1
- Update to 2.6 (RHBZ #1541368)
- Spec cleanup
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1541368 - drupal7-lang_dropdown-2.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1541368
--------------------------------------------------------------------------------
================================================================================
drupal7-taxonomy_access_fix-2.4-1.fc28 (FEDORA-2018-3518cc7614)
Fixes the crooked access checks for Taxonomy pages
--------------------------------------------------------------------------------
Update Information:
*
https://www.drupal.org/project/taxonomy_access_fix/releases/7.x-2.4
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 24 2018 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 2.4-1
- Updated to 2.4 (RHBZ #1544047)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1544047 - drupal7-taxonomy_access_fix-2.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1544047
--------------------------------------------------------------------------------
================================================================================
golang-github-elithrar-simple-scrypt-1.3.0-3.fc28 (FEDORA-2018-fd30524e80)
Go Library for password hashes using the scrypt KDF
--------------------------------------------------------------------------------
Update Information:
First release of package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1592476 - Review Request: golang-github-elithrar-simple-scrypt - Go Library
for password hashes using the scrypt KDF
https://bugzilla.redhat.com/show_bug.cgi?id=1592476
--------------------------------------------------------------------------------
================================================================================
golang-github-kurin-blazer-0.4.4-1.fc28 (FEDORA-2018-eda3fb68c3)
A Go library for Backblaze's B2.
--------------------------------------------------------------------------------
Update Information:
First package for Fedora
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1592448 - Review Request: golang-github-kurin-blazer - A Go library for
Backblaze's B2
https://bugzilla.redhat.com/show_bug.cgi?id=1592448
--------------------------------------------------------------------------------
================================================================================
golang-github-pkg-xattr-0.3.0-1.fc28 (FEDORA-2018-88c5d4defa)
Extended attribute support library for Go
--------------------------------------------------------------------------------
Update Information:
First package for Fedora
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1592457 - Review Request: golang-github-pkg-xattr - Extended attribute
support library for Go
https://bugzilla.redhat.com/show_bug.cgi?id=1592457
--------------------------------------------------------------------------------
================================================================================
golang-github-restic-chunker-0.2.0-1.fc28 (FEDORA-2018-d42108319b)
Implementation of Content Defined Chunking (CDC) in Go
--------------------------------------------------------------------------------
Update Information:
First package for Fedora
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1592482 - Review Request: golang-github-restic-chunker - Implementation of
Content Defined Chunking (CDC) in Go
https://bugzilla.redhat.com/show_bug.cgi?id=1592482
--------------------------------------------------------------------------------
================================================================================
lollypop-0.9.516-1.fc28 (FEDORA-2018-4938f7f54f)
Music player for GNOME
--------------------------------------------------------------------------------
Update Information:
Update to 0.9.516 ---- Update to 0.9.515
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 25 2018 Martin Gansser <martinkg(a)fedoraproject.org> - 0.9.516-1
- Update to 0.9.516
* Thu Jun 21 2018 Martin Gansser <martinkg(a)fedoraproject.org> - 0.9.515-1
- Update to 0.9.515
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 0.9.514-2
- Rebuilt for Python 3.7
--------------------------------------------------------------------------------
================================================================================
mkvtoolnix-24.0.0-1.fc28 (FEDORA-2018-5afef847a0)
Matroska container manipulation utilities
--------------------------------------------------------------------------------
Update Information:
# Version 24.0.0 "Beyond The Pale" 2018-06-10 ## New features and enhancements
* mkvmerge: MP4 reader: improved the detection of edit lists consisting of two
identical entries, each spanning the file's duration as given in the movie
header atom. The second entry is ignored in such cases. See #2306. * mkvmerge:
JSON identification: the "display unit" video track property is now reported
as `display_unit`. The JSON schema has been bumped to v11 for this change. *
mkvmerge, mkvextract: AVC/h.264: empty NALUs will now be removed. * mkvextract:
VobSub extraction: empty SPU packets will now be dropped during extraction as
other tools such as MP4Box cannot handle them correctly. Implements #2293. ##
Bug fixes * mkvmerge: E-AC-3 parser: fixed determining the number of channels
for streams that contain an AC-3 core with dependent E-AC-3 frames. Fixes #2283.
* mkvmerge: Matroska reader: fixed mkvmerge buffering the whole file if a video
track is multiplexed that consists of only one or a few frames. Fixes #2304. *
mkvmerge: the "display unit" video track property will now be kept if it is set
in the source file. Fixes #2317. * MKVToolNix GUI: multiplexer: when scanning
playlists, all playlists were offered for selection regardless of the value of
the "minimum playlist duration" setting. Fixes #2299. * MKVToolNix GUI:
multiplexer: deriving track languages from file names: the regular sub-
expressions for ISO 639-1 codes could match on empty strings, too, causing
matches in wrong places and hence no language being recognized in certain
situations. Fixes #2298. * MKVToolNix GUI: header editor: fixed a crash when
saving the file fails (e.g. because it isn't writable). Fixes #2319. *
MKVToolNix GUI: header editor: the editor was wrongfully claiming that mandatory
elements with default values cannot be removed in the "status" text. Fixes
#2320. * MKVToolNix GUI: preferences: on macOS & Linux the setting "enable
copying tracks by their type" wasn't restored on program start. Fixes #2297.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 23 2018 Dominik Mierzejewski <rpm(a)greysector.net> - 24.0.0-1
- update to 24.0.0 (#1589516)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1589516 - mkvtoolnix-24.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1589516
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Image-2.5.3-1.fc28 (FEDORA-2018-43f23549a9)
Horde Image API
--------------------------------------------------------------------------------
Update Information:
**Horde_Image 2.5.3** * [mjr] Fix regression in resizing images (PR: 1, chris).
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 25 2018 Remi Collet <remi(a)remirepo.net> - 2.5.3-1
- update to 2.5.3
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Imap-Client-2.29.16-1.fc28 (FEDORA-2018-d2d80f9732)
Horde IMAP abstraction interface
--------------------------------------------------------------------------------
Update Information:
**Horde_Imap_Client 2.29.16** * [mjr] Allow searching by DateTime as well as
Date (PR #3, Robin Appelman). * [mjr] Fix corruption of search terms due to
sticky reference (PR #2). * [mjr] Fix retrying FETCH after an UNKNOWN-CTE error
in certain cases (PR #1, stefanolaf). * [mjr] Fix fatal error in dealing with
certain exceptions.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 25 2018 Remi Collet <remi(a)remirepo.net> - 2.29.16-1
- update to 2.29.16
--------------------------------------------------------------------------------
================================================================================
wine-3.11-1.fc28 (FEDORA-2018-695156bb57)
A compatibility layer for windows applications
--------------------------------------------------------------------------------
Update Information:
- More debugger support for Wow64 processes. - Support for sha256/sha384
hashes in ECDSA signatures. - Better reporting of hyper-threaded CPUs. -
Improvements to the standard Task Dialog. - Various bug fixes.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 24 2018 Michael Cronenworth <mike(a)cchtml.com> 3.11-1
- version update
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1594445 - wine-3.11 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1594445
[ 2 ] Bug #1594399 - RFE: Add StartupWMClass also to bundled .desktop files such as
wine-notepad.desktop
https://bugzilla.redhat.com/show_bug.cgi?id=1594399
--------------------------------------------------------------------------------