The following Fedora 28 Security updates need testing:
Age URL
275
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d510cfd7eb
jgraphx-3.6.0.0-6.fc28
224
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d7aeaa74da
nodejs-brace-expansion-1.1.11-1.fc28
223
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc073fdc1a
nodejs-atob-2.1.1-1.fc28
216
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9dd3f7c013
unrtf-0.21.9-8.fc28
184
https://bodhi.fedoraproject.org/updates/FEDORA-2018-28e9841baf
docker-latest-1.13.1-37.git9cb56fd.fc28
99
https://bodhi.fedoraproject.org/updates/FEDORA-2018-cc4b7af297
xerces-c27-2.7.0-28.fc28
51
https://bodhi.fedoraproject.org/updates/FEDORA-2018-997a9e3e1f xen-4.10.2-4.fc28
51
https://bodhi.fedoraproject.org/updates/FEDORA-2018-aa3752ac3c
nginx-1.14.1-1.fc28
42
https://bodhi.fedoraproject.org/updates/FEDORA-2018-70fe6a4d75
nagios-4.4.2-3.fc28
37
https://bodhi.fedoraproject.org/updates/FEDORA-2018-dbcb80405c
nbdkit-1.4.4-1.fc28
30
https://bodhi.fedoraproject.org/updates/FEDORA-2018-cc86ef9e22 squid-4.4-1.fc28
27
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b18f9dd65b
tomcat-8.5.35-1.fc28
8
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8deebad756
perl-Email-Address-1.912-1.fc28
8
https://bodhi.fedoraproject.org/updates/FEDORA-2019-348547a32d
chromium-71.0.3578.98-1.fc28
8
https://bodhi.fedoraproject.org/updates/FEDORA-2019-541a12b809
python3-3.6.8-1.fc28 python3-docs-3.6.8-1.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-fb2ce5f6d9
php-horde-Horde-Form-2.0.19-1.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e6ca5847c7
python-django-2.0.10-1.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b6ce519120
gitolite3-3.6.11-1.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d4d8af2c22
radare2-3.2.0-1.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-a6511b0eed php-7.2.14-1.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b1da89df11
polkit-0.115-2.1.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-0398d1b049
haproxy-1.8.17-1.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e70c729d8a
gnupg2-2.2.12-1.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-337484d88b
kernel-headers-4.19.14-200.fc28 kernel-4.19.14-200.fc28 kernel-tools-4.19.14-200.fc28
The following Fedora 28 Critical Path updates have yet to be approved:
Age URL
51
https://bodhi.fedoraproject.org/updates/FEDORA-2018-997a9e3e1f xen-4.10.2-4.fc28
44
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3222e7c914 radvd-2.17-11.fc28
42
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c86898e4a7 gdb-8.1.1-4.fc28
40
https://bodhi.fedoraproject.org/updates/FEDORA-2018-12c54ca4bf gjs-1.52.5-1.fc28
30
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9f541b469b
nfs-utils-2.3.3-1.rc2.fc28
26
https://bodhi.fedoraproject.org/updates/FEDORA-2018-816dbc3486
osinfo-db-20181214-1.fc28
21
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4dddcb3e5e
highlight-3.48-1.fc28
8
https://bodhi.fedoraproject.org/updates/FEDORA-2019-541a12b809
python3-3.6.8-1.fc28 python3-docs-3.6.8-1.fc28
8
https://bodhi.fedoraproject.org/updates/FEDORA-2019-af22d27d88
libical-3.0.4-1.fc28
8
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6ae95964c0 rsync-3.1.3-4.fc28
8
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4a2458eb49
hwdata-0.319-1.fc28
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-729922a177
analitza-18.04.3-3.fc28 appmenu-qt5-0.3.0+16.10.20160628.1-11.fc28 calibre-3.34.0-2.fc28
dnscrypt-proxy-gui-1.21.16-2.fc28 fcitx-qt5-1.2.3-4.fc28 gammaray-2.9.0-5.fc28
gsettings-qt-0-0.11.20170715bzr83.fc28.3 hedgewars-0.9.24.1-4.fc28
kf5-akonadi-server-18.08.3-2.fc28 kf5-frameworkintegration-5.53.0-3.fc28
kf5-kdeclarative-5.53.0-3.fc28 kf5-kwayland-5.53.0-3.fc28 kf5-kxmlgui-5.53.0-3.fc28
kwin-5.13.5-2.fc28 libfm-qt-0.11.2-13.fc28 libqtxdg-2.0.0-14.fc28
lxqt-qtplugin-0.11.1-13.fc28 mscore-2.2.1-6.fc28 plasma-integration-5.13.5-2.fc28
pyotherside-1.5.3-14.fc28 python-qt5-5.10.1-5.fc28 pythonqt-3.2-11.fc28
qgnomeplatform-0.5-6.fc28 qstardict-1.3-5.fc28 qt-creator-4.6.2-3.fc28 qt5-5.11.3-1.fc28
qt5-qt3d-5.11.3-1.fc28 qt5-qtbase-5.11.3-1.fc28 qt5-qtcanvas3d-5.11.3-1.fc28
qt5-qtcharts-5.11.3-1.fc28 qt5-qtconnectivity-5.11.3-1.fc28 qt5-qtdatavis3d-5.11.3-1.fc28
qt5-qtdeclarative-5.11.3-1.fc28 qt5-qtdoc-5.11.3-1.fc28 qt5
-qtenginio-1.6.2-20.fc28 qt5-qtgamepad-5.11.3-1.fc28 qt5-qtgraphicaleffects-5.11.3-1.fc28
qt5-qtimageformats-5.11.3-1.fc28 qt5-qtlocation-5.11.3-1.fc28
qt5-qtmultimedia-5.11.3-1.fc28 qt5-qtquickcontrols-5.11.3-1.fc28
qt5-qtquickcontrols2-5.11.3-1.fc28 qt5-qtremoteobjects-5.11.3-1.fc28
qt5-qtscript-5.11.3-1.fc28 qt5-qtscxml-5.11.3-1.fc28 qt5-qtsensors-5.11.3-1.fc28
qt5-qtserialbus-5.11.3-1.fc28 qt5-qtserialport-5.11.3-1.fc28 qt5-qtspeech-5.11.3-1.fc28
qt5-qtstyleplugins-5.0.0-29.fc28 qt5-qtsvg-5.11.3-1.fc28 qt5-qttools-5.11.3-1.fc28
qt5-qttranslations-5.11.3-1.fc28 qt5-qtvirtualkeyboard-5.11.3-1.fc28
qt5-qtwayland-5.11.3-1.fc28 qt5-qtwebchannel-5.11.3-1.fc28 qt5-qtwebengine-5.11.3-2.fc28
qt5-qtwebkit-5.212.0-0.31.alpha2.fc28 qt5-qtwebsockets-5.11.3-1.fc28
qt5-qtwebview-5.11.3-1.fc28 qt5-qtx11extras-5.11.3-1.fc28 qt5-qtxmlpatterns-5.11.3-1.fc28
qt5ct-0.35-3.fc28 qtcurve-1.9.1-2.fc28 skrooge-2.14.0-3.fc28 texmaker-5.0.2-7.fc28
ugene-1.31.0-4.fc28 xdg-desktop-portal-kde-5.13.5-3.fc28 ya
rock-1.3.1-3.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b26c33cba4 vim-8.1.702-1.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4fa6c9304d lorax-28.24-1.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-337484d88b
kernel-headers-4.19.14-200.fc28 kernel-4.19.14-200.fc28 kernel-tools-4.19.14-200.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-41e014abdd
libassuan-2.5.2-1.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-645886c622
libgpg-error-1.33-1.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e70c729d8a
gnupg2-2.2.12-1.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-1692c82673
pcmanfm-1.3.1-2.D20181227git0619a81f.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-f1d84fda6e koji-1.16.1-3.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b1da89df11
polkit-0.115-2.1.fc28
The following builds have been pushed to Fedora 28 updates-testing
ardour5-5.12.0-10.fc28
cabal-install-2.0.0.1-10.fc28
container-selinux-2.79-1.git6f01752.fc28
elementary-xfce-icon-theme-0.13.1-1.fc28
firefox-64.0.2-1.fc28
gnutls-3.6.5-2.fc28
lmdb-0.9.23-1.fc28
lua-cqueues-20171014-1.fc28
matrix-synapse-0.34.0.1-1.fc28
nodejs-rhea-0.3.9-1.fc28
pcre-8.42-6.fc28
pcre2-10.32-5.fc28
perl-Type-Tiny-1.004004-1.fc28
poedit-2.2-2.fc28
pungi-4.1.32-3.fc28
quodlibet-4.2.1-1.fc28
stlink-1.5.1-0.1.20190103git7651d21.fc28
systemd-238-11.gita76ee90.fc28
wordpress-5.0.3-1.fc28
xfig-3.2.7a-2.fc28
xrdp-0.9.9-1.fc28
Details about builds:
================================================================================
ardour5-5.12.0-10.fc28 (FEDORA-2019-84721de758)
Digital Audio Workstation
--------------------------------------------------------------------------------
Update Information:
This update lets the package obsolete the long obsolescent ardour2 package and
restores the contents of the appdata file.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 8 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 5.12.0-10
- Obsolete ardour2 on Fedora 29+
* Fri Nov 9 2018 Nils Philippsen <nils(a)tiptoe.de> - 5.12.0-9
- set LC_ALL=C.UTF-8 to only require minimal glibc langpacks
* Mon Jul 30 2018 Adam Williamson <awilliam(a)redhat.com> - 5.12.0-8
- Rebuild for new aubio
* Fri Jul 13 2018 Guido Aulisi <guido.aulisi(a)gmail.com> - 5.12.0-7
- Fix FTBFS due to the move of /usr/bin/python into a separate package
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.12.0-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1660810 - ardour5 appdata file is 0 bytes
https://bugzilla.redhat.com/show_bug.cgi?id=1660810
[ 2 ] Bug #1657558 - ardour5 should obsolete ardour2?
https://bugzilla.redhat.com/show_bug.cgi?id=1657558
--------------------------------------------------------------------------------
================================================================================
cabal-install-2.0.0.1-10.fc28 (FEDORA-2019-d6c8b2201e)
The command-line interface for Cabal and Hackage
--------------------------------------------------------------------------------
Update Information:
- no longer requires ghc-Cabal-devel - requires bind-utils for nslookup (used
for secure mirror dns lookup)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 14 2018 Jens Petersen <petersen(a)redhat.com> - 2.0.0.1-10
- drop the rpmlint whitelist of ghc-Cabal-devel again since no longer Requires
* Thu Nov 22 2018 Jens Petersen <petersen(a)redhat.com> - 2.0.0.1-9
- require bind-utils for nslookup used for secure mirror dns lookup
* Wed Nov 21 2018 Jens Petersen <petersen(a)redhat.com> - 2.0.0.1-8
- no longer requires ghc-Cabal-devel
--------------------------------------------------------------------------------
================================================================================
container-selinux-2.79-1.git6f01752.fc28 (FEDORA-2019-40cf995d4b)
SELinux policies for container runtimes
--------------------------------------------------------------------------------
Update Information:
Fix labeling on docker in user namespace and /var/lib/registries.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 11 2019 Dan Walsh <dwalsh(a)fedoraproject.org> - 2.79-1
- Fix labeling on /var/lib/registries
* Thu Jan 10 2019 Dan Walsh <dwalsh(a)fedoraproject.org> - 2.78-1
- Fix labeling for images in docker daemon user namespace
--------------------------------------------------------------------------------
================================================================================
elementary-xfce-icon-theme-0.13.1-1.fc28 (FEDORA-2019-1d3ded60fe)
Icons for Xfce based on the elementary Project Icon Theme
--------------------------------------------------------------------------------
Update Information:
- update to 0.13.1 - changelog
https://github.com/shimmerproject/elementary-
xfce/releases/tag/v0.13.1
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 11 2019 Johannes Lips <hannes(a)fedoraproject.org> - 0.13.1-1
- update to latest upstream version 0.13.1
--------------------------------------------------------------------------------
================================================================================
firefox-64.0.2-1.fc28 (FEDORA-2019-87d7d9ad56)
Mozilla Firefox Web browser
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream version. ---- - Enable PGO/LTO gcc optimizations to
speed up Fedora Firefox builds. The builds should match Mozilla binaries at
browser responsibility test (
https://browserbench.org/Speedometer2.0/)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 10 2019 Jan Horak <jhorak(a)redhat.com> - 64.0.2-1
- Update to 64.0.2
* Mon Jan 7 2019 Jan Horak <jhorak(a)redhat.com> - 64.0-7
- Pipewire patch rebased (thanks to Tomas Popela)
- Enabled PGO on some arches.
* Fri Jan 4 2019 Carmen Bianca Bakker <carmenbianca(a)fedoraproject.org> - 64.0-6
- Changed locale detector to handle Esperanto (rhbz#1656900)
* Fri Dec 21 2018 Martin Stransky <stransky(a)redhat.com> - 64.0-5
- Test PGO build.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1628549 - Enable gcc lto/pgo optimizations for Fedora Firefox builds
https://bugzilla.redhat.com/show_bug.cgi?id=1628549
--------------------------------------------------------------------------------
================================================================================
gnutls-3.6.5-2.fc28 (FEDORA-2019-1a0d4443f8)
A TLS protocol implementation
--------------------------------------------------------------------------------
Update Information:
Added explicit Requires for nettle >= 3.4.1
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 11 2019 Anderson Sasaki <ansasaki(a)redhat.com> - 3.6.5-2
- Add explicit Requires for nettle >= 3.4.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1659095 - CVE-2018-16868 gnutls: Bleichenbacher-like side channel leakage in
PKCS#1 v1.5 verification and padding oracle verification [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1659095
[ 2 ] Bug #1665484 - /usr/lib64/libgnutls.so: undefined reference to
`nettle_rsa_sec_decrypt@HOGWEED_4' in gnutls 3.6.5-1.fc28
https://bugzilla.redhat.com/show_bug.cgi?id=1665484
--------------------------------------------------------------------------------
================================================================================
lmdb-0.9.23-1.fc28 (FEDORA-2019-e40793e509)
Memory-mapped key-value database
--------------------------------------------------------------------------------
Update Information:
Upgraded to version 0.9.23
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 9 2019 Tomas Krizek <tomas.krizek(a)nic.cz> - 0.9.23-1
- Updated to 0.9.23
--------------------------------------------------------------------------------
================================================================================
lua-cqueues-20171014-1.fc28 (FEDORA-2019-b4352f3219)
Stackable Continuation Queues for the Lua Programming Language
--------------------------------------------------------------------------------
Update Information:
Rebuild for released Fedora/CentOS versions (fedpkg update was missing)
--------------------------------------------------------------------------------
================================================================================
matrix-synapse-0.34.0.1-1.fc28 (FEDORA-2019-c6044b3fce)
A Matrix reference homeserver written in Python using Twisted
--------------------------------------------------------------------------------
Update Information:
Fix for CVE-2019-5885
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 11 2019 Jeremy Cline <jeremy(a)jcline.org> - 0.34.0.1-1
- Update to v0.34.0.1, fixes CVE-2019-5885
--------------------------------------------------------------------------------
================================================================================
nodejs-rhea-0.3.9-1.fc28 (FEDORA-2019-44c4ffcd0c)
A reactive messaging library based on the AMQP protocol
--------------------------------------------------------------------------------
Update Information:
Rebased to latest: 0.3.9
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 10 2019 Irina Boverman <iboverma(a)redhat.com> - 0.3.9-1
- Rebased to 0.3.9
* Mon Jan 7 2019 Irina Boverman <iboverma(a)redhat.com> - 0.3.8-1
- Rebased to 0.3.8
* Fri Jan 4 2019 Irina Boverman <iboverma(a)redhat.com> - 0.3.6-1
- Rebased to 0.3.6
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1613353 - nodejs-rhea-0.2.20 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1613353
--------------------------------------------------------------------------------
================================================================================
pcre-8.42-6.fc28 (FEDORA-2019-1c1cd19344)
Perl-compatible regular expression library
--------------------------------------------------------------------------------
Update Information:
This release fixes an undefined behavior in aarch64 JIT compiler and OpenPOWER
64-bit ELFv2 ABI detection in the JIT compiler.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 3 2019 Petr Pisar <ppisar(a)redhat.com> - 8.42-6
- Fix OpenPOWER 64-bit ELFv2 ABI detection in JIT compiler (upstream bug #2353)
- Fix an undefined behavior in aarch64 JIT compiler (upstream bug #2355)
--------------------------------------------------------------------------------
================================================================================
pcre2-10.32-5.fc28 (FEDORA-2019-637e5c7a74)
Perl-compatible regular expression library
--------------------------------------------------------------------------------
Update Information:
This release fixes anchoring a pattern preceded with (*MARK). It also corrects
an undefined behavior in aarch64 JIT compiler and OpenPOWER 64-bit ELFv2 ABI
detection in JIT compiler.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 3 2019 Petr Pisar <ppisar(a)redhat.com> - 10.32-5
- Fix anchoring a pattern preceded with (*MARK)
- Fix OpenPOWER 64-bit ELFv2 ABI detection in JIT compiler (upstream bug #2353)
- Fix an undefined behavior in aarch64 JIT compiler (upstream bug #2355)
--------------------------------------------------------------------------------
================================================================================
perl-Type-Tiny-1.004004-1.fc28 (FEDORA-2019-f94fce8c83)
Tiny, yet Moo(se)-compatible type constraint
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 11 2019 Ralf Cors��pius <corsepiu(a)fedoraproject.org> - 1.004004-1
- Update to 1.004004.
* Tue Aug 7 2018 Ralf Cors��pius <corsepiu(a)fedoraproject.org> - 1.004002-1
- Update to 1.004002.
- Add BR: perl(IO::String).
- Add and comment out BR: perl(MouseX::Types::Common).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1664970 - Upgrade perl-Type-Tiny to 1.004004
https://bugzilla.redhat.com/show_bug.cgi?id=1664970
--------------------------------------------------------------------------------
================================================================================
poedit-2.2-2.fc28 (FEDORA-2019-ec4b2dc690)
GUI editor for GNU gettext .po files
--------------------------------------------------------------------------------
Update Information:
Add upstream patches poedit-2.2-fix_dark_mode_assert.patch, fixes #1639361
poedit-2.2-fix_wayland_incompatibility.patch, fixes #1659253
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 11 2019 Wolfgang St��ggl <c72578(a)yahoo.de> - 2.2-2
- Add patches:
poedit-2.2-fix_dark_mode_assert.patch, fixes #1639361
poedit-2.2-fix_wayland_incompatibility.patch, fixes #1659253
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1639361 - [abrt] poedit: wxTrap(): poedit killed by SIGTRAP
https://bugzilla.redhat.com/show_bug.cgi?id=1639361
[ 2 ] Bug #1659253 - Poedit is missing an application icon
https://bugzilla.redhat.com/show_bug.cgi?id=1659253
--------------------------------------------------------------------------------
================================================================================
pungi-4.1.32-3.fc28 (FEDORA-2019-2bd43510d5)
Distribution compose tool
--------------------------------------------------------------------------------
Update Information:
New upstream release - /usr/bin/pungi command ported to use createrepo_c and
use productmd to generate metadata (thanks to @fepitre) - improved documentation
for product IDs (thanks to @ktdreyer) - includes a new experimental tool to
create multiple linked composes
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 10 2019 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.32-3
- Replace basearch in ostree ref in message
* Wed Jan 9 2019 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.32-2
- Drop dependency on python3-enum34
* Tue Jan 8 2019 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.32-1
- Add script to orchestrate multiple composes (lsedlar)
- buildinstall: Expose lorax's --rootfs-size argument (lsedlar)
- Support for pungi-legacy with productmd format (frederic.pierret)
- Unify update-docs.sh script with rpkg (onosek)
- Remove createrepo references from doc and spec (lsedlar)
- CreaterepoWrapper: add 'basedir' and 'compress-type' args for
createrepo_c
(frederic.pierret)
- gather.py: use createrepo_c for creating repodata instead of obsolete
createrepo python library (frederic.epitre)
- Fix import of ConfigParser for NoSectionError and NoOptionError
(frederic.pierret)
- doc: explain product_id_allow_missing results in detail (kdreyer)
- doc: describe product_id's output and purpose (kdreyer)
* Wed Dec 12 2018 Stephen Gallagher <sgallagh(a)redhat.com> - 4.1.31-3
- Update dependency for libmodulemd
* Wed Dec 5 2018 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.31-2
- Send correct ostree ref to fedmsg
--------------------------------------------------------------------------------
================================================================================
quodlibet-4.2.1-1.fc28 (FEDORA-2019-67f1c21899)
A music management program
--------------------------------------------------------------------------------
Update Information:
- update to 4.2.1 - changelog
https://quodlibet.readthedocs.io/en/latest/changelog.html#do-not-wear-the...
under-any-circumstances
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 11 2019 Johannes Lips <hannes(a)fedoraproject.org> - 4.2.0-1
- update to recent upstream release 4.2.1
* Mon Dec 10 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 4.2.0-2
- Require python3-gobject instead of python2-gobject
--------------------------------------------------------------------------------
================================================================================
stlink-1.5.1-0.1.20190103git7651d21.fc28 (FEDORA-2019-e660622427)
STM32 discovery line Linux programmer
--------------------------------------------------------------------------------
Update Information:
Update to latest git.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 11 2019 Vasiliy N. Glazov <vascom2(a)gmail.com> -
1.5.1-0.1.20190103git7651d21
- Update to latest git
--------------------------------------------------------------------------------
================================================================================
systemd-238-11.gita76ee90.fc28 (FEDORA-2019-e0eb3d797e)
System and Service Manager
--------------------------------------------------------------------------------
Update Information:
- systemd-journald and systemd-journal-remote reject entries which contain too
many fields (CVE-2018-16865, #1664973) and set limits on the process' command
line length (CVE-2018-16864, #1664972) - Fix out-of-bounds read when parsing a
crafted syslog message in systemd-journald (CVE-2018-16866, #1664975) No need
to log out or reboot.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 11 2019 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> -
238-11.gita76ee90
- systemd-journald and systemd-journal-remote reject entries which
contain too many fields (CVE-2018-16865, #1664973) and set limits on the
process' command line length (CVE-2018-16864, #1664972)
- Fix out-of-bounds read when parsing a crafted syslog message in systemd-journald
(CVE-2018-16866, #1664975)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1664975 - CVE-2018-16866 systemd: out-of-bounds read when parsing a crafted
syslog message [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1664975
[ 2 ] Bug #1664972 - CVE-2018-16864 systemd: stack overflow when calling syslog from a
command with long cmdline [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1664972
[ 3 ] Bug #1664973 - CVE-2018-16865 systemd: stack overflow when receiving many journald
entries [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1664973
--------------------------------------------------------------------------------
================================================================================
wordpress-5.0.3-1.fc28 (FEDORA-2019-b77f35895c)
Blog tool and publishing platform
--------------------------------------------------------------------------------
Update Information:
See upstream announcement: [WordPress 5.0.3 Maintenance
Release](https://wordpress.org/news/2019/01/wordpress-5-0-3-maintenance-
release/)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 11 2019 Remi Collet <remi(a)remirepo.net> - 5.0.3-1
- WordPress 5.0.3 Maintenance Release
--------------------------------------------------------------------------------
================================================================================
xfig-3.2.7a-2.fc28 (FEDORA-2019-0d339a774f)
An X Window System tool for drawing basic vector graphics
--------------------------------------------------------------------------------
Update Information:
- Fix spline drawing (rhbz#1665237)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 11 2019 Hans de Goede <hdegoede(a)redhat.com> - 3.2.7a-2
- Fix spline drawing (rhbz#1665237)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1665237 - xfig interpolated spline draws polyline instead of spline
https://bugzilla.redhat.com/show_bug.cgi?id=1665237
--------------------------------------------------------------------------------
================================================================================
xrdp-0.9.9-1.fc28 (FEDORA-2019-70657a363b)
Open source remote desktop protocol (RDP) server
--------------------------------------------------------------------------------
Update Information:
Release notes for xrdp v0.9.9 (2018/12/25) Release cycle From the next
release, release cycle will be changed from quarterly to every 4 months. xrdp
will be released in April, August, December. New features - Disconnection by
idle timeout (requires xorgxrdp v0.2.9 or later) #1227 - Glyph cache v2 (fixes
no font issue on iOS/macOS/Android client) #367 #1235 Bug fixes - Fix xrdp-
chansrv crashes caused in drive redirection #1202 #1225 - Fix build with FDK
AAC v2 #1257 - Do not enable RemoteApp if the INFO_RAIL flag is not set (RDP-
RDP proxy) #1253 Other changes - Add Spanish Latin Amarican keyboard #1237
#1240 #1244 - Dynamic channel improvements #1222 #1224 - Remove some
deprecated sesman session types #1232 - Refactoring and cleanups Known issues
- FreeRDP 2.0.0-rc4 or later might not able to connect to xrdp due to - xrdp's
bad-mannered behaviour, add +glyph-cache option to FreeRDP to connect #1266 -
Audio redirection by MP3 codec doesn't sound with some client, use AAC instead
#965 ---- Required xrdp-selinux sub-package.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 11 2019 Bojan Smojver <bojan(a)rexurive.com> - 1:0.9.9-1
- Bump up to 0.9.9
- Fix sesman.ini patch
- Fix xrdp.ini patch
* Wed Nov 14 2018 Bojan Smojver <bojan(a)rexurive.com> - 1:0.9.8-2
- Make main and selinux packages codependent
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1575019 - xrdp should require xrdp-selinux sub-package
https://bugzilla.redhat.com/show_bug.cgi?id=1575019
--------------------------------------------------------------------------------