The following Fedora 28 Security updates need testing:
Age URL
362
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d510cfd7eb
jgraphx-3.6.0.0-6.fc28
311
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d7aeaa74da
nodejs-brace-expansion-1.1.11-1.fc28
310
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc073fdc1a
nodejs-atob-2.1.1-1.fc28
186
https://bodhi.fedoraproject.org/updates/FEDORA-2018-cc4b7af297
xerces-c27-2.7.0-28.fc28
138
https://bodhi.fedoraproject.org/updates/FEDORA-2018-aa3752ac3c
nginx-1.14.1-1.fc28
118
https://bodhi.fedoraproject.org/updates/FEDORA-2018-cc86ef9e22 squid-4.4-1.fc28
44
https://bodhi.fedoraproject.org/updates/FEDORA-2019-86412405d5
bind-9.11.5-4.P4.fc28
32
https://bodhi.fedoraproject.org/updates/FEDORA-2019-63029a7692
libu2f-host-1.1.8-1.fc28
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ba19e79e9a
thunderbird-60.6.1-1.fc28
10
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8b8c774b84
aria2-1.34.0-4.fc28
10
https://bodhi.fedoraproject.org/updates/FEDORA-2019-0927602e59
chromium-73.0.3683.86-2.fc28
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-a3f67e2364
checkstyle-8.0-4.1.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-253da50ddd php-7.2.17-1.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-a4ed7400f4
httpd-2.4.39-1.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8e7c71f45b
nodejs-simple-markdown-0.4.4-1.fc28
The following Fedora 28 Critical Path updates have yet to be approved:
Age URL
118
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9f541b469b
nfs-utils-2.3.3-1.rc2.fc28
81
https://bodhi.fedoraproject.org/updates/FEDORA-2019-78153d357c
totem-pl-parser-3.26.2-1.fc28
73
https://bodhi.fedoraproject.org/updates/FEDORA-2019-bb30467485
ostree-2019.1-2.fc28 rpm-ostree-2019.1-1.fc28
65
https://bodhi.fedoraproject.org/updates/FEDORA-2019-cb4a3023ef
iproute-4.20.0-1.fc28
48
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6c4e362bd0 dhcp-4.3.6-22.fc28
dnsperf-2.2.1-1.fc28 bind-dyndb-ldap-11.1-13.fc28 bind-9.11.5-2.P1.fc28
28
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c4107ac9d3 koji-1.17.0-5.fc28
27
https://bodhi.fedoraproject.org/updates/FEDORA-2019-cb98bf5ace
fedfind-4.2.2-1.fc28 python-productmd-1.20-1.fc28
24
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d95d1a1e0e
libseccomp-2.4.0-0.fc28
19
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e60ecc03b4
python-productmd-1.21-1.fc28
19
https://bodhi.fedoraproject.org/updates/FEDORA-2019-457ab67a6c
psmisc-23.1-3.1.fc28
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-a0ae4e93b9 sssd-1.16.4-2.fc28
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ba19e79e9a
thunderbird-60.6.1-1.fc28
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4574633aa0 pcre2-10.32-9.fc28
10
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6f16d481c2
glusterfs-4.1.8-1.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-a79729ce2f
highlight-3.50-1.fc28
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-dd57433cec
openjpeg2-2.3.1-1.fc28 mingw-openjpeg2-2.3.1-1.fc28
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-84a56d3908
hwdata-0.322-1.fc28
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-a4a40aeb8f quota-4.04-8.fc28
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-a15e82b4d9
pungi-4.1.35-1.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ba19af6a58
libldb-1.4.0-5.fc28.1.3.8 samba-4.8.10-0.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8e8681281c fuse-2.9.9-2.fc28
The following builds have been pushed to Fedora 28 updates-testing
BackupPC-XS-0.59-1.fc28
R-ggplot2-3.1.1-1.fc28
R-rstudioapi-0.10-1.fc28
R-unitizer-1.4.8-1.fc28
R-whoami-1.3.0-1.fc28
R-xfun-0.6-1.fc28
atomic-reactor-1.6.36.1-3.fc28
libdigidocpp-3.13.9-1.fc28
mate-themes-3.22.19-2.fc28
mpris-scrobbler-0.3.2-1.fc28
openttd-1.9.1-1.fc28
osbs-client-0.52-2.fc28
perl-CPAN-Perl-Releases-3.94-1.fc28
perl-Locale-SubCountry-2.05-1.fc28
perl-re-engine-PCRE2-0.15-1.fc28
phan-1.2.8-1.fc28
php-alcaeus-mongo-php-adapter-1.1.7-1.fc28
python-click-plugins-1.1.1-1.fc28
python-xnat-0.3.17-1.fc28
radare2-3.4.1-1.fc28.1
sanlock-3.7.1-1.fc28
vim-8.1.1137-1.fc28
Details about builds:
================================================================================
BackupPC-XS-0.59-1.fc28 (FEDORA-2019-0b452a6e7d)
Implementation of various BackupPC functions in a perl-callable module
--------------------------------------------------------------------------------
Update Information:
BackupPC-XS 0.59 = Fix to use correct int format when reading v3 attrib files,
reported and fixed by Jeff Kosowsky.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 8 2019 Richard Shaw <hobbes1069(a)gmail.com> - 0.59-1
- Update to 0.59.
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.58-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
R-ggplot2-3.1.1-1.fc28 (FEDORA-2019-9929010880)
Create Elegant Data Visualisations Using the Grammar of Graphics
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 7 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 3.1.1-1
- Update to latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1697086 - R-ggplot2-3.1.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1697086
--------------------------------------------------------------------------------
================================================================================
R-rstudioapi-0.10-1.fc28 (FEDORA-2019-2a6327c8bc)
Safely Access the RStudio API
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 8 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.10-1
- Update to latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1697462 - R-rstudioapi-0.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1697462
--------------------------------------------------------------------------------
================================================================================
R-unitizer-1.4.8-1.fc28 (FEDORA-2019-08095e7381)
Interactive R Unit Tests
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 8 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 1.4.8-1
- Update to latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1697453 - R-unitizer-1.4.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1697453
--------------------------------------------------------------------------------
================================================================================
R-whoami-1.3.0-1.fc28 (FEDORA-2019-39afc97f25)
Username, Full Name, Email Address, 'GitHub' Username of the Current User
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 8 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 1.3.0-1
- Update to latest version
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1697362 - R-whoami-1.3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1697362
--------------------------------------------------------------------------------
================================================================================
R-xfun-0.6-1.fc28 (FEDORA-2019-35da5773f8)
Miscellaneous Functions by 'Yihui Xie'
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 8 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.6-1
- Update to latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1697457 - R-xfun-0.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1697457
--------------------------------------------------------------------------------
================================================================================
atomic-reactor-1.6.36.1-3.fc28 (FEDORA-2019-782e6e61ce)
Improved builder for Docker images
--------------------------------------------------------------------------------
Update Information:
Fixes for
https://bugzilla.redhat.com/show_bug.cgi?id=1694523
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 8 2019 Clement Verna <cverna(a)fedoraproject.org> - 1.6.36.1-3
- Fixes for
https://bugzilla.redhat.com/show_bug.cgi?id=1694523
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1694523 - CVE-2019-1002162 atomic-reactor: Information exposure on push fail
logged exceptions [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1694523
--------------------------------------------------------------------------------
================================================================================
libdigidocpp-3.13.9-1.fc28 (FEDORA-2019-593ff6764f)
Library offers creating, signing and verification of digitally signed documents
--------------------------------------------------------------------------------
Update Information:
- Upstream release 3.13.9
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 7 2019 Dmitri Smirnov <dmitri(a)smirnov.ee> - 3.13.9-1
- Upstream release 3.13.9
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.13.8-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1651386 - Run F28 and F27 update
https://bugzilla.redhat.com/show_bug.cgi?id=1651386
--------------------------------------------------------------------------------
================================================================================
mate-themes-3.22.19-2.fc28 (FEDORA-2019-86a22ba124)
MATE Desktop themes
--------------------------------------------------------------------------------
Update Information:
- add some upstream patches - improvements for using metacity-theme-3 with Menta
themes - highcontrast icon-theme improvement
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 8 2019 Wolfgang Ulbrich <fedora(a)raveit.de> - 3.22.19-2
- add some upstream patches
- improvements for using metacity-theme-3 with Menta themes
- highcontrast icon-theme improvement
--------------------------------------------------------------------------------
================================================================================
mpris-scrobbler-0.3.2-1.fc28 (FEDORA-2019-4fdfc19b10)
User daemon to submit currently playing song to LastFM, LibreFM, ListenBrainz
--------------------------------------------------------------------------------
Update Information:
Update package to latest upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 8 2019 Justin W. Flory <jflory7(a)fedoraproject.org> - 0.3.2-1
- Update package to latest upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1697112 - mpris-scrobbler-0.3.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1697112
--------------------------------------------------------------------------------
================================================================================
openttd-1.9.1-1.fc28 (FEDORA-2019-1e5dc7cebd)
Transport system simulation game
--------------------------------------------------------------------------------
Update Information:
Updated to latest upstream bugfix release ---- Update to latest upstream
release
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 8 2019 Felix Kaechele <heffer(a)fedoraproject.org> - 1.9.1-1
- update to 1.9.1
* Tue Apr 2 2019 Felix Kaechele <heffer(a)fedoraproject.org> - 1.9.0-1
- Update to 1.9.0
- Upstream changed source URLs
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.8.0-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Wed Jan 23 2019 Pete Walter <pwalter(a)fedoraproject.org> - 1.8.0-6
- Rebuild for ICU 63
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.8.0-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Tue Jul 10 2018 Pete Walter <pwalter(a)fedoraproject.org> - 1.8.0-4
- Rebuild for ICU 62
--------------------------------------------------------------------------------
================================================================================
osbs-client-0.52-2.fc28 (FEDORA-2019-2fff3c6889)
Python command line client for OpenShift Build Service
--------------------------------------------------------------------------------
Update Information:
Fixes for
https://bugzilla.redhat.com/show_bug.cgi?id=1697217
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 8 2019 Clement Verna <cverna(a)fedoraproject.org> - 0.52-2
- Fixes for
https://bugzilla.redhat.com/show_bug.cgi?id=1697217
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1697217 - osbs-client: Debug log contains URL part with oauth access_token of
openshift [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1697217
--------------------------------------------------------------------------------
================================================================================
perl-CPAN-Perl-Releases-3.94-1.fc28 (FEDORA-2019-4e6d9989e7)
Mapping Perl releases on CPAN to the location of the tarballs
--------------------------------------------------------------------------------
Update Information:
Updated to the latest release
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 8 2019 Jitka Plesnikova <jplesnik(a)redhat.com> - 3.94-1
- 3.94 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1696882 - perl-CPAN-Perl-Releases-3.94 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1696882
--------------------------------------------------------------------------------
================================================================================
perl-Locale-SubCountry-2.05-1.fc28 (FEDORA-2019-23c6655da7)
ISO 3166-2 two letter subcountry codes
--------------------------------------------------------------------------------
Update Information:
This release updates a subcountry locale database.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 8 2019 Petr Pisar <ppisar(a)redhat.com> - 2.05-1
- 2.05 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1696928 - perl-Locale-SubCountry-2.05 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1696928
--------------------------------------------------------------------------------
================================================================================
perl-re-engine-PCRE2-0.15-1.fc28 (FEDORA-2019-803014da31)
PCRE2 regular expression engine for Perl
--------------------------------------------------------------------------------
Update Information:
This release improves tests. We deliver it only to provide an up-to-date version
string.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 8 2019 Petr Pisar <ppisar(a)redhat.com> - 0.15-1
- 0.15 bump
--------------------------------------------------------------------------------
================================================================================
phan-1.2.8-1.fc28 (FEDORA-2019-ad717876dc)
A static analyzer for PHP
--------------------------------------------------------------------------------
Update Information:
06 Apr 2019, **Phan 1.2.8** **New features (CLI):** + Fix edge cases
initializing directory list and target versions of config files (#2629, #2160)
**New features (Analysis):** + Support analyzing `if (false !==
is_string($var))` and similar complex conditions. (#2613) + Emit
`PhanUnusedGotoLabel` for labels without a corresponding `goto` in the same
function scope. (#2617) (note that Phan does not understand the effects of
goto on control flow) + Don't emit `PhanUnreferencedClass` for anonymous
classes. (#2604) + Detect undeclared types in phpdoc callables and closures.
(#2562) + Warn about unreferenced PHPDoc `@property`/`@property-
read`/`@property-write` annotations in `--dead-code-detection`. New issue
types: `PhanWriteOnlyPHPDocProperty`, `PhanReadOnlyPHPDocProperty`,
`PhanUnreferencedPHPDocProperty`. **Maintenance:** + Make escaped string
arguments fit on a single line for more issue types. + Rename
`UseContantNoEffect` to `UseConstantNoEffect`. + Rename
`AddressableElement::isStrictlyMoreVisibileThan()` to
`isStrictlyMoreVisibleThan`. **Plugins:** + Fix edge case where
`WhitespacePlugin` would not detect trailing whitespace. + Detect
`PhanPluginDuplicateSwitchCaseLooseEquality` in `DuplicateArrayKeyPlugin`.
(#2310) Warn about cases of switch cases that are loosely equivalent to
earlier cases, and which might get unexpectedly missed because of that. (e.g.
`0` and `'foo'`) **Bug fixes:** + Catch and handle "Cannot access parent
when
not in object context" when parsing global functions incorrectly using `parent`
parameter type. (#2619) + Improve the performance of `--progress-bar` when the
terminal width can't be computed by symfony. (#2634)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 8 2019 Remi Collet <remi(a)remirepo.net> - 1.2.8-1
- update to 1.2.8
--------------------------------------------------------------------------------
================================================================================
php-alcaeus-mongo-php-adapter-1.1.7-1.fc28 (FEDORA-2019-c6e591164a)
Mongo PHP Adapter
--------------------------------------------------------------------------------
Update Information:
**Version 1.1.7** (2019-04-06) All issues and pull requests under this release
may be found under the [
1.1.7](https://github.com/alcaeus/mongo-php-
adapter/issues?q=milestone%3A1.1.7) milestone. *
[#250](https://github.com/alcaeus/mongo-php-adapter/pull/250) fixes type
conversion when passing write concern to `MongoClient` via URL arguments.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 8 2019 Remi Collet <remi(a)remirepo.net> - 1.1.7-1
- update to 1.1.7
--------------------------------------------------------------------------------
================================================================================
python-click-plugins-1.1.1-1.fc28 (FEDORA-2019-03e40093e4)
Click extension to register CLI commands via setuptools
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 8 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 1.1.1-1
- Update to latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1696105 - python-click-plugins-1.1.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1696105
--------------------------------------------------------------------------------
================================================================================
python-xnat-0.3.17-1.fc28 (FEDORA-2019-f402329036)
A new XNAT client that exposes XNAT objects/functions as python objects/functions.
--------------------------------------------------------------------------------
Update Information:
New upstream version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1697456 - python-xnat-0.3.17 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1697456
--------------------------------------------------------------------------------
================================================================================
radare2-3.4.1-1.fc28.1 (FEDORA-2019-cf55660808)
The reverse engineering framework
--------------------------------------------------------------------------------
Update Information:
rebase to upstream version 3.4.1
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 8 2019 Riccardo Schirone <rschirone91(a)gmail.com> - 3.4.1-1
- rebase to upstream version 3.4.1
* Tue Feb 19 2019 Riccardo Schirone <rschirone91(a)gmail.com> - 3.3.0-2
- rebase to upstream version 3.3.0
* Sat Feb 2 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.2.0-2.1
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Thu Jan 10 2019 Riccardo Schirone <rschirone91(a)gmail.com> 3.2.0-2
- fix version reported by radare2 -V
--------------------------------------------------------------------------------
================================================================================
sanlock-3.7.1-1.fc28 (FEDORA-2019-2f7165dc3f)
A shared storage lock manager
--------------------------------------------------------------------------------
Update Information:
Update to sanlock 3.7.1
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 8 2019 Nir Soffer <nsoffer(a)redhat.com> - 3.7.1-1
- Update to sanlock 3.7.1
- Fix read_resource_owners (414abfe)
* Wed Mar 20 2019 Nir Soffer <nsoffer(a)redhat.com> - 3.7.0-1
- remove unneeded with_systemd macro
- update to sanlock 3.7.0
--------------------------------------------------------------------------------
================================================================================
vim-8.1.1137-1.fc28 (FEDORA-2019-acd6fbb8ff)
The VIM editor
--------------------------------------------------------------------------------
Update Information:
patchlevel 1137 ---- The newest upstream commit
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 8 2019 Zdenek Dohnal <zdohnal(a)redhat.com> - 2:8.1.1137-1
- patchlevel 1137
* Mon Apr 8 2019 Zdenek Dohnal <zdohnal(a)redhat.com> - 2:8.1.1099-2
- 1697104 - new spec file template contains deprecated tags
* Tue Apr 2 2019 Zdenek Dohnal <zdohnal(a)redhat.com> - 2:8.1.1099-1
- patchlevel 1099
* Tue Mar 26 2019 Zdenek Dohnal <zdohnal(a)redhat.com> - 2:8.1.1048-2
- add bundled libvterm
* Mon Mar 25 2019 Zdenek Dohnal <zdohnal(a)redhat.com> - 2:8.1.1048-1
- patchlevel 1048
* Fri Mar 8 2019 Zdenek Dohnal <zdohnal(a)redhat.com> - 2:8.1.998-1
- patchlevel 998
* Fri Mar 8 2019 Zdenek Dohnal <zdohnal(a)redhat.com> - 2:8.1.994-2
- F30 is already active in bodhi
--------------------------------------------------------------------------------