The following Fedora 28 Security updates need testing:
Age URL
202
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d510cfd7eb
jgraphx-3.6.0.0-6.fc28
152
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d7aeaa74da
nodejs-brace-expansion-1.1.11-1.fc28
150
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc073fdc1a
nodejs-atob-2.1.1-1.fc28
143
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9dd3f7c013
unrtf-0.21.9-8.fc28
111
https://bodhi.fedoraproject.org/updates/FEDORA-2018-28e9841baf
docker-latest-1.13.1-37.git9cb56fd.fc28
28
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bbbd8cc3a6
python33-3.3.7-6.fc28
26
https://bodhi.fedoraproject.org/updates/FEDORA-2018-cc4b7af297
xerces-c27-2.7.0-28.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-20c24949c0
libarchive-3.3.3-1.fc28
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-49d6e4bc3f
python37-3.7.1-1.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-73dd8de892 xen-4.10.2-2.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-928e15e1db
roundcubemail-1.3.8-1.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7d748596e9
drupal8-8.6.2-1.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3ac43a1e15 feh-2.28-1.fc28
The following Fedora 28 Critical Path updates have yet to be approved:
Age URL
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-749575640e
kernel-headers-4.18.15-200.fc28 kernel-tools-4.18.15-200.fc28 kernel-4.18.15-200.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-20c24949c0
libarchive-3.3.3-1.fc28
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-853074f951
jbigkit-2.1-15.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-210c4be57e
highlight-3.47-1.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-21c31e9e2c
evolution-3.28.5-2.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-73dd8de892 xen-4.10.2-2.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-10d26c3aec
breeze-icon-theme-5.51.0-1.fc28 extra-cmake-modules-5.51.0-1.fc28 kf5-5.51.0-1.fc28
kf5-attica-5.51.0-1.fc28 kf5-baloo-5.51.0-1.fc28 kf5-bluez-qt-5.51.0-1.fc28
kf5-frameworkintegration-5.51.0-1.fc28 kf5-kactivities-5.51.0-1.fc28
kf5-kactivities-stats-5.51.0-1.fc28 kf5-kapidox-5.51.0-1.fc28 kf5-karchive-5.51.0-1.fc28
kf5-kauth-5.51.0-1.fc28 kf5-kbookmarks-5.51.0-1.fc28 kf5-kcmutils-5.51.0-1.fc28
kf5-kcodecs-5.51.0-1.fc28 kf5-kcompletion-5.51.0-1.fc28 kf5-kconfig-5.51.0-1.fc28
kf5-kconfigwidgets-5.51.0-1.fc28 kf5-kcoreaddons-5.51.0-1.fc28 kf5-kcrash-5.51.0-3.fc28
kf5-kdbusaddons-5.51.0-1.fc28 kf5-kdeclarative-5.51.0-1.fc28 kf5-kded-5.51.0-1.fc28
kf5-kdelibs4support-5.51.0-1.fc28 kf5-kdesignerplugin-5.51.0-1.fc28
kf5-kdesu-5.51.0-1.fc28 kf5-kdewebkit-5.51.0-1.fc28 kf5-kdnssd-5.51.0-1.fc28
kf5-kdoctools-5.51.0-1.fc28 kf5-kemoticons-5.51.0-1.fc28 kf5-kfilemetadata-5.51.0-1.fc28
kf5-kglobalaccel-5.51.0-1.fc28 kf5-kguiad
dons-5.51.0-1.fc28 kf5-kholidays-5.51.0-1.fc28 kf5-khtml-5.51.0-1.fc28
kf5-ki18n-5.51.0-1.fc28 kf5-kiconthemes-5.51.0-2.fc28 kf5-kidletime-5.51.0-1.fc28
kf5-kimageformats-5.51.0-1.fc28 kf5-kinit-5.51.0-1.fc28 kf5-kio-5.51.0-2.fc28
kf5-kirigami2-5.51.0-1.fc28 kf5-kitemmodels-5.51.0-1.fc28 kf5-kitemviews-5.51.0-1.fc28
kf5-kjobwidgets-5.51.0-1.fc28 kf5-kjs-5.51.0-1.fc28 kf5-kjsembed-5.51.0-1.fc28
kf5-kmediaplayer-5.51.0-1.fc28 kf5-knewstuff-5.51.0-1.fc28
kf5-knotifications-5.51.0-1.fc28 kf5-knotifyconfig-5.51.0-1.fc28
kf5-kpackage-5.51.0-1.fc28 kf5-kparts-5.51.0-1.fc28 kf5-kpeople-5.51.0-1.fc28
kf5-kplotting-5.51.0-1.fc28 kf5-kpty-5.51.0-1.fc28 kf5-kross-5.51.0-1.fc28
kf5-krunner-5.51.0-1.fc28 kf5-kservice-5.51.0-1.fc28 kf5-ktexteditor-5.51.0-1.fc28
kf5-ktextwidgets-5.51.0-1.fc28 kf5-kunitconversion-5.51.0-1.fc28 kf5-kwallet-5.51.0-1.fc28
kf5-kwayland-5.51.0-1.fc28 kf5-kwidgetsaddons-5.51.0-1.fc28
kf5-kwindowsystem-5.51.0-1.fc28 kf5-kxmlgui-5.51.0-1.fc28 kf5-kxmlrpcclient-5.51.0-1.fc28
kf5-modemmanager-qt-5.51.0-1.fc28 kf5-networkmanager-qt-5.51.0-1.fc28
kf5-plasma-5.51.0-1.fc28 kf5-prison-5.51.0-1.fc28 kf5-purpose-5.51.0-1.fc28
kf5-solid-5.51.0-1.fc28 kf5-sonnet-5.51.0-2.fc28 kf5-syntax-highlighting-5.51.0-1.fc28
kf5-threadweaver-5.51.0-1.fc28 oxygen-icon-theme-5.51.0-1.fc28
qqc2-desktop-style-5.51.0-1.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a58108a0bc
nfs-utils-2.3.3-1.rc1.fc28
The following builds have been pushed to Fedora 28 updates-testing
GAPDoc-1.6.2-1.fc28
NetworkManager-1.10.12-2.fc28
cabextract-1.8-1.fc28
cryptsetup-2.0.5-1.fc28
csmock-2.2.1-1.fc28
drupal7-7.60-2.fc28
dwgrep-0.4-1.fc28
et-5.1.8-1.fc28
feedreader-2.3.0-1.fc28
gap-pkg-aclib-1.3.1-1.fc28
ghostwriter-1.7.3-1.fc28
git-publish-1.4.4-4.fc28
grass-7.4.2-1.fc28
ibus-1.5.19-7.fc28
ibus-libpinyin-1.10.92-1.fc28
ipmctl-01.00.00.3344-1.fc28
java-1.8.0-openjdk-aarch32-1.8.0.191.181022-1.fc28
jglobus-2.1.0-11.fc28
latexmk-4.61-1.fc28
libabigail-1.5-1.fc28
libgit2-0.26.8-1.fc28
libmodulemd-1.7.0-1.fc28
libmspack-0.8-0.1.alpha.fc28
libreoffice-6.0.6.2-3.fc28
libssh-0.8.5-1.fc28
libtaskotron-0.9.1-1.fc28
libwpd-0.10.2-4.fc28
lollypop-0.9.610-1.fc28
metamath-0.165-1.fc28
mkvtoolnix-28.2.0-1.fc28
ostree-2018.9-1.fc28
perl-5.26.2-414.fc28
perl-CPAN-Perl-Releases-3.80-1.fc28
perl-Convert-Base32-0.06-2.fc28
perl-DateTime-TimeZone-2.21-1.fc28
perl-IRI-0.009-1.fc28
perl-Sentry-Raven-1.10-2.fc28
php-Smarty2-2.6.31-2.fc28
php-myclabs-php-enum-1.6.4-1.fc28
php-pear-CAS-1.3.6-1.fc28
php-pecl-psr-0.5.1-1.fc28
php-phpunit-php-token-stream3-3.0.1-1.fc28
php-samyoul-u2f-php-server-1.1.4-1.fc28
podman-0.10.1.3-3.gitdb08685.fc28
pungi-4.1.30-1.fc28
python-requests-2.20.0-1.fc28
python-sqlalchemy-1.2.12-1.fc28
qt-virt-manager-0.70.91-1.fc28
rpm-4.14.2.1-2.fc28
rpm-ostree-2018.9-1.fc28
systemd-238-10.git438ac26.fc28
units-2.18-1.fc28
uronode-2.9-4.fc28
webkit2gtk3-2.22.3-1.fc28
wine-3.19-1.fc28
wingpanel-indicator-notifications-2.1.2-1.fc28
xfig-3.2.7a-1.fc28
Details about builds:
================================================================================
GAPDoc-1.6.2-1.fc28 (FEDORA-2018-0812f47890)
GAP documentation tool
--------------------------------------------------------------------------------
Update Information:
Changes in version 1.6.2: - Improved 'InitialSubstringUTF8String' by an
optional argument to return a string with a suffix. - Change access of
javascript code for MathJax to https protocol (such that MathJax works for
help pages accessed via https). - Added option ".uri := true" to
'SearchMR' to
return URI instead of sending a request to MathSciNet. - Added many cases
handled by 'HeuristicTranslationsLaTeX2XML', this is needed because MathSciNet
has changed the markup for accented characters in many cases. - Made
'SearchMR' work again using 'wget' or 'curl' (MathSciNet is now
only
accessible via HTTPS). - Better ordering of help matches if the first word is
the query string (patch provided by Max Horn). - Escape the special
characters @!|" for 'makeindex' in index entries for LaTeX. - Removed
dependency on 'a4wide.sty' file in LaTeX installation.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 30 2018 Jerry James <loganjerry(a)gmail.com> - 1.6.2-1
- New upstream version
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6.1-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
NetworkManager-1.10.12-2.fc28 (FEDORA-2018-7243f31304)
Network connection manager and user applications
--------------------------------------------------------------------------------
Update Information:
- ifcfg: fix crash parsing DNS entries (rh #1607866) - dhcp: fix out-of-bounds
heap write for DHCPv6 with internal plugin (CVE-2018-15688)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 29 2018 Thomas Haller <thaller(a)redhat.com> - 1:1.10.12-2
- ifcfg: fix crash parsing DNS entries (rh #1607866)
- dhcp: fix out-of-bounds heap write for DHCPv6 with internal plugin (CVE-2018-15688)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1639067 - CVE-2018-15688 systemd: Out-of-bounds heap write in
systemd-networkd dhcpv6 option handling
https://bugzilla.redhat.com/show_bug.cgi?id=1639067
--------------------------------------------------------------------------------
================================================================================
cabextract-1.8-1.fc28 (FEDORA-2018-cb337fb199)
Utility for extracting cabinet (.cab) archives
--------------------------------------------------------------------------------
Update Information:
Latest stable releases of libmspack and cabextract, includes security fixes for
CVE-2018-14680, CVE-2018-14681, CVE-2018-14682, CVE-2018-18584, CVE-2018-18585
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 30 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 1.8-1
- 1.8
* Wed Jul 25 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 1.7-1
- 1.7 (#1186186)
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1644215 - CVE-2018-18585 libmspack: NULL pointer dereference in
chmd_read_headers in mspack/chmd.c
https://bugzilla.redhat.com/show_bug.cgi?id=1644215
[ 2 ] Bug #1644214 - CVE-2018-18584 libmspack: Out-of-bounds write in mspack/cab.h
https://bugzilla.redhat.com/show_bug.cgi?id=1644214
[ 3 ] Bug #1610941 - CVE-2018-14682 libmspack: off-by-one error in the TOLOWER() macro
for CHM decompression
https://bugzilla.redhat.com/show_bug.cgi?id=1610941
[ 4 ] Bug #1610934 - CVE-2018-14680 libmspack: off-by-one error in the CHM chunk number
validity checks
https://bugzilla.redhat.com/show_bug.cgi?id=1610934
[ 5 ] Bug #1610896 - CVE-2018-14681 libmspack: out-of-bounds write in kwajd_read_headers
in mspack/kwajd.c
https://bugzilla.redhat.com/show_bug.cgi?id=1610896
--------------------------------------------------------------------------------
================================================================================
cryptsetup-2.0.5-1.fc28 (FEDORA-2018-8936092f99)
A utility for setting up encrypted disks
--------------------------------------------------------------------------------
Update Information:
update
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 29 2018 Ondrej Kozina <okozina(a)redhat.com> - 2.0.5-1
- Update to cryptsetup 2.0.5.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1643686 - Wrong slot number message
https://bugzilla.redhat.com/show_bug.cgi?id=1643686
[ 2 ] Bug #1594217 - luksmeta slots come back from the dead when formatting a LUKS
device
https://bugzilla.redhat.com/show_bug.cgi?id=1594217
--------------------------------------------------------------------------------
================================================================================
csmock-2.2.1-1.fc28 (FEDORA-2018-64cde6f567)
A mock wrapper for Static Analysis tools
--------------------------------------------------------------------------------
Update Information:
- update to the latest upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 29 2018 Kamil Dudka <kdudka(a)redhat.com> 2.2.1-1
- update to latest upstream release
--------------------------------------------------------------------------------
================================================================================
drupal7-7.60-2.fc28 (FEDORA-2018-18023f40fa)
An open-source content-management platform
--------------------------------------------------------------------------------
Update Information:
*
https://www.drupal.org/project/drupal/releases/7.60 * [SA-
CORE-2018-006](https://www.drupal.org/SA-CORE-2018-006)
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 28 2018 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 7.60-2
- Explicit python dependencies
- Explicit python2 except el5
- See
https://koji.fedoraproject.org/koji/buildinfo?buildID=1156502
* Sat Oct 27 2018 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 7.60-1
- Update to 7.60 (RHBZ #1643121 / RHBZ #1643122 / RHBZ #1643124 / SA-CORE-2018-006)
- Remove patch drupal-7.14-CVE-2012-2922 (see
https://groups.drupal.org/node/230373)
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 7.59-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1643121 - drupal: Multiple Vulnerabilities - SA-CORE-2018-006
https://bugzilla.redhat.com/show_bug.cgi?id=1643121
--------------------------------------------------------------------------------
================================================================================
dwgrep-0.4-1.fc28 (FEDORA-2018-9de264a370)
A tool for querying Dwarf (debuginfo) graphs
--------------------------------------------------------------------------------
Update Information:
- Rebase to 0.4 (
https://github.com/pmachata/dwgrep/releases/tag/0.4)
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 28 2018 Petr Machata <pmachata(a)gmail.com> - 0.4-1
- Rebase to 0.4
--------------------------------------------------------------------------------
================================================================================
et-5.1.8-1.fc28 (FEDORA-2018-8c8a5796d0)
Remote shell that survives IP roaming and disconnect
--------------------------------------------------------------------------------
Update Information:
Fix crash when two clients join the same server simultaneously
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 29 2018 Michel Alexandre Salim <salimma(a)fedoraproject.org> - 5.1.8-1
-
https://github.com/MisterTea/EternalTerminal/releases/tag/et-v5.1.8
--------------------------------------------------------------------------------
================================================================================
feedreader-2.3.0-1.fc28 (FEDORA-2018-ed6f13299f)
RSS desktop client
--------------------------------------------------------------------------------
Update Information:
Update to 2.3.0
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 29 2018 Pete Walter <pwalter(a)fedoraproject.org> - 2.3.0-1
- Update to 2.3.0
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
gap-pkg-aclib-1.3.1-1.fc28 (FEDORA-2018-ac60782b5b)
Almost Crystallographic groups library for GAP
--------------------------------------------------------------------------------
Update Information:
Some uses of NaturalHomomorphism were changed to
NaturalHomomorphismByNormalSubgroup.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 30 2018 Jerry James <loganjerry(a)gmail.com> - 1.3.1-1
- New upstream version
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
ghostwriter-1.7.3-1.fc28 (FEDORA-2018-3c481b35c9)
Cross-platform, aesthetic, distraction-free Markdown editor
--------------------------------------------------------------------------------
Update Information:
Initial release.
--------------------------------------------------------------------------------
================================================================================
git-publish-1.4.4-4.fc28 (FEDORA-2018-d5841b6f69)
Prepare and store patch revisions as git tags
--------------------------------------------------------------------------------
Update Information:
Add missing git-email package dependency
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 29 2018 Stefan Hajnoczi <stefanha(a)gmail.com> - 1.4.4-4
- Add missing git-email package dependency
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.4-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 1.4.4-2
- Rebuilt for Python 3.7
* Mon Jun 18 2018 Stefan Hajnoczi <stefanha(a)gmail.com> - 1.4.4-1
- Merge To: list but offer --override-to to stop this behavior
- Add --blurb-template for cover-letter templates
- Pass through extra arguments to git-format-patch(1)
- Add missing UTF-8 encoding for 's'elect menu item
- Don't treat config strings as lists in Python 3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1640197 - Missing dep on git-email package
https://bugzilla.redhat.com/show_bug.cgi?id=1640197
--------------------------------------------------------------------------------
================================================================================
grass-7.4.2-1.fc28 (FEDORA-2018-42c6d57012)
GRASS GIS - Geographic Resources Analysis Support System
--------------------------------------------------------------------------------
Update Information:
new upstream version GRASS GIS 7.4.2
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 28 2018 Markus Neteler <neteler(a)mundialis.de> - 7.4.2-0
- new upstream version 7.4.2
* Sun Sep 9 2018 Pavel Raiskup <praiskup(a)redhat.com> - 7.4.1-8
- Clean up of PostgreSQL support (PR#4)
* Tue Jul 31 2018 Florian Weimer <fweimer(a)redhat.com> - 7.4.1-7
- Rebuild with fixed binutils
--------------------------------------------------------------------------------
================================================================================
ibus-1.5.19-7.fc28 (FEDORA-2018-998a7b6fc3)
Intelligent Input Bus for Linux OS
--------------------------------------------------------------------------------
Update Information:
IBus 1.5.19 in Fedora 29 is now back-ported to Fedora 28 and emoji typing is now
enabled with preedit on each application instead of launching emoji dialog. Also
now ibus-gtk3 won't require ibus packages but ibus-libs 1.5.19 conflicts with
ibus 1.5.18 ``` % rpm -q --requires ibus-gtk3 | grep ibus ibus-libs(aarch-64) =
1.5.19-6.fc28 libibus-1.0.so.5()(64bit) % rpm -q --conflicts ibus-libs
ibus(x86-64) < 1.5.19 % rpm -q --requires ibus | grep dbus dbus-x11 ```
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 31 2018 Takao Fujiwara <tfujiwar(a)redhat.com> - 1.5.19-7
- RHEL code reviews
* Fri Oct 26 2018 Takao Fujiwara <tfujiwar(a)redhat.com> - 1.5.19-6
- dbus-x11 is not required in Fedora 30
- Add Conflicts for Fedora 28
* Tue Oct 23 2018 Takao Fujiwara <tfujiwar(a)redhat.com> - 1.5.19-5
- Use __python3 instead of python3
- Delete Requires ibus in ibus-gtk* for Flatpak
* Fri Sep 14 2018 Takao Fujiwara <tfujiwar(a)redhat.com> - 1.5.19-4
- Fix Bug SEGV Choose an emoji by mouse from the emoji category list
* Thu Aug 30 2018 Takao Fujiwara <tfujiwar(a)redhat.com> - 1.5.19-3
- Fix Bug 1618682 - SEGV with ASCII on emojier in Wayland
- Support Shift-Space on emojier preedit
- Do not move Emojier popup with the active candidate in Xorg
* Wed Aug 22 2018 Takao Fujiwara <tfujiwar(a)redhat.com> - 1.5.19-2
- Do not clear Unicode data when emoji annotation lang is changed
* Wed Aug 8 2018 Takao Fujiwara <tfujiwar(a)redhat.com> - 1.5.19-1
- Bumped to 1.5.19
* Mon Aug 6 2018 Takao Fujiwara <tfujiwar(a)redhat.com> - 1.5.18-14
- Fixed Man page scan results for ibus
- Added IBUS_DISCARD_PASSWORD env variable for password dialog in firefox
- Added history annotation for previous emojis
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1643864 - ibus-gtk3 should not require ibus
https://bugzilla.redhat.com/show_bug.cgi?id=1643864
[ 2 ] Bug #1619096 - IBus emoji does not work with Firefox
https://bugzilla.redhat.com/show_bug.cgi?id=1619096
--------------------------------------------------------------------------------
================================================================================
ibus-libpinyin-1.10.92-1.fc28 (FEDORA-2018-01fd5f9add)
Intelligent Pinyin engine based on libpinyin for IBus
--------------------------------------------------------------------------------
Update Information:
- Update to 1.10.92 - fixes Enter handling
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 31 2018 Peng Wu <pwu(a)redhat.com> - 1.10.92-1
- Update to 1.10.92
- fixes Enter handling
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1641989 - No pre-edit shown when using ibus-libpinyin
https://bugzilla.redhat.com/show_bug.cgi?id=1641989
--------------------------------------------------------------------------------
================================================================================
ipmctl-01.00.00.3344-1.fc28 (FEDORA-2018-80bb1856fd)
Utility for managing Intel Optane DC persistent memory modules
--------------------------------------------------------------------------------
Update Information:
Release v01.00.00.3344
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 30 2018 Juston Li <juston.li(a)intel.com> - 01.00.00.3344-1
- Release 01.00.00.3279
- logrotate and python spec patches removed, in upstream
--------------------------------------------------------------------------------
================================================================================
java-1.8.0-openjdk-aarch32-1.8.0.191.181022-1.fc28 (FEDORA-2018-5857f28069)
OpenJDK Runtime Environment in a preview of the OpenJDK AArch32 project
--------------------------------------------------------------------------------
Update Information:
8u191 update
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 30 2018 Alex Kashchenko <akashche(a)redhat.com> - 1:1.8.0.191-1.181022
- update sources to 8u191
- sync with mainline package
--------------------------------------------------------------------------------
================================================================================
jglobus-2.1.0-11.fc28 (FEDORA-2018-febd3e223b)
Globus Java client libraries
--------------------------------------------------------------------------------
Update Information:
Apply patches from OSG/WLCG.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 30 2018 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 2.1.0-11
- Apply patches from OSG/WLCG
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.1.0-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
latexmk-4.61-1.fc28 (FEDORA-2018-8b69c184ff)
A make-like utility for LaTeX files
--------------------------------------------------------------------------------
Update Information:
Changes in version 4.61: - Add -pdfxelatex and -pdflualatex options to set
commands for xelatex and lualatex (in analogy with -pdflatex and -latex. -
Correct bug that use of --gg option with -deps-file option did not create deps
file. - After run of latex/pdflatex (etc), report count of warnings about
missing characters (typically unavailable Unicode characters). Messages about
this may appear only in the .log file and are therefore easily missed by the
user. Fix problem that if biber gets a remote file, latexmk would report it
incorrectly as a missing file. - Provide routines for setting all of $latex,
etc, with a common pattern. Variables, options, placeholders for executing code
in \*latex before inputting source file. The new variable is $pre_tex_code, the
options are -pretex, -usepretex, and the new placeholders are %P and %U. -
Improved definitions provided for the configuration of latexmk to use pythontex;
see the file pythontex-latexmkrc in the directory example_rcfiles. - Correction
to use of specifications in $clean_ext and $clean_full_ext so that %R can appear
in the interior of a string as in 'pythontex-files-%R/*'.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 30 2018 Jerry James <loganjerry(a)gmail.com> - 4.61-1
- Update to 4.61
--------------------------------------------------------------------------------
================================================================================
libabigail-1.5-1.fc28 (FEDORA-2018-39ac89021d)
Set of ABI analysis tools
--------------------------------------------------------------------------------
Update Information:
Update to upstream 1.5 tarball
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 25 2018 Dodji Seketeli <dodji(a)seketeli.org> - 1.5-1
- Update to upstream 1.5 tarball
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1638554 - abipkgdiff: abg-comp-filter.cc:902: bool
abigail::comparison::filtering::is_mostly_distinct_diff(const abigail::comparison::diff*):
Assertion `td' failed.
https://bugzilla.redhat.com/show_bug.cgi?id=1638554
--------------------------------------------------------------------------------
================================================================================
libgit2-0.26.8-1.fc28 (FEDORA-2018-f6c972fc06)
C implementation of the Git core methods as a library with a solid API
--------------------------------------------------------------------------------
Update Information:
Update to 0.26.8
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 26 2018 Pete Walter <pwalter(a)fedoraproject.org> - 0.26.8-1
- Update to 0.26.8
- Update upstream URL
--------------------------------------------------------------------------------
================================================================================
libmodulemd-1.7.0-1.fc28 (FEDORA-2018-c0c798ad3f)
Module metadata manipulation library
--------------------------------------------------------------------------------
Update Information:
Update to 1.7.0 * Enhance YAML parser for use with `fedmod lint` * Support
running unit tests against installed packages * Include all NSVCs for
ModuleStreams in Modulemd.ImprovedModule
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 26 2018 Stephen Gallagher <sgallagh(a)redhat.com> - 1.7.0-1
- Update to 1.7.0
- Enhance YAML parser for use with `fedmod lint`
- Support running unit tests against installed packages
- Include all NSVCs for ModuleStreams in ImprovedModule
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1611460 - Man page scan results for libmodulemd
https://bugzilla.redhat.com/show_bug.cgi?id=1611460
--------------------------------------------------------------------------------
================================================================================
libmspack-0.8-0.1.alpha.fc28 (FEDORA-2018-cb337fb199)
Library for CAB and related files compression and decompression
--------------------------------------------------------------------------------
Update Information:
Latest stable releases of libmspack and cabextract, includes security fixes for
CVE-2018-14680, CVE-2018-14681, CVE-2018-14682, CVE-2018-18584, CVE-2018-18585
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 30 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 0.8-0.1.alpha
- 0.8alpha
- use %make_build %make_install %ldconfig_scriptlets %license
- devel: use %{?_isa} to tighten dep on main pkg
- drop deprecated Group: tag
- %files: tighten to include library soname
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1644215 - CVE-2018-18585 libmspack: NULL pointer dereference in
chmd_read_headers in mspack/chmd.c
https://bugzilla.redhat.com/show_bug.cgi?id=1644215
[ 2 ] Bug #1644214 - CVE-2018-18584 libmspack: Out-of-bounds write in mspack/cab.h
https://bugzilla.redhat.com/show_bug.cgi?id=1644214
[ 3 ] Bug #1610941 - CVE-2018-14682 libmspack: off-by-one error in the TOLOWER() macro
for CHM decompression
https://bugzilla.redhat.com/show_bug.cgi?id=1610941
[ 4 ] Bug #1610934 - CVE-2018-14680 libmspack: off-by-one error in the CHM chunk number
validity checks
https://bugzilla.redhat.com/show_bug.cgi?id=1610934
[ 5 ] Bug #1610896 - CVE-2018-14681 libmspack: out-of-bounds write in kwajd_read_headers
in mspack/kwajd.c
https://bugzilla.redhat.com/show_bug.cgi?id=1610896
--------------------------------------------------------------------------------
================================================================================
libreoffice-6.0.6.2-3.fc28 (FEDORA-2018-a3bc4aa1f3)
Free Software Productivity Suite
--------------------------------------------------------------------------------
Update Information:
- tdf#120376 fix duplicated styles on copy paste in draw
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 27 2018 Caol��n McNamara <caolanm(a)redhat.com> - 1:6.0.6.2-3
- tdf#120376 fix duplicated styles on copy paste in draw
--------------------------------------------------------------------------------
================================================================================
libssh-0.8.5-1.fc28 (FEDORA-2018-6cd653e005)
A library implementing the SSH protocol
--------------------------------------------------------------------------------
Update Information:
Update to version 0.8.5
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 29 2018 Andreas Schneider <asn(a)redhat.com> - 0.8.5-1
- Update to version 0.8.5
https://www.libssh.org/2018/10/29/libssh-0-8-5-and-libssh-0-7-7/
--------------------------------------------------------------------------------
================================================================================
libtaskotron-0.9.1-1.fc28 (FEDORA-2018-d6cd93a7b7)
Taskotron Support Library
--------------------------------------------------------------------------------
Update Information:
Update for Fedora 29 GA
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 30 2018 Frantisek Zatloukal <fzatlouk(a)redhat.com> - 0.9.1-1
- Fedora 29 GA
--------------------------------------------------------------------------------
================================================================================
libwpd-0.10.2-4.fc28 (FEDORA-2018-e40b8de89e)
A library for import of WordPerfect documents
--------------------------------------------------------------------------------
Update Information:
- fix crash on loading specific wpd document
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 30 2018 Caol��n McNamara <caolanm(a)redhat.com> - 0.10.2-4
- Resolves: rhbz#1643752 crash in specific wpd file
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.10.2-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.10.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1643752 - [fix available] There is a illegal address access at function
WP6ContentListener::defineTable in software libwpd.
https://bugzilla.redhat.com/show_bug.cgi?id=1643752
--------------------------------------------------------------------------------
================================================================================
lollypop-0.9.610-1.fc28 (FEDORA-2018-00aa724615)
Music player for GNOME
--------------------------------------------------------------------------------
Update Information:
Update to 0.9.610 ---- Update to 0.9.609 ---- Update to 0.9.608 ----
Update to 0.9.607 ---- Update to 0.9.605
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 29 2018 Martin Gansser <martinkg(a)fedoraproject.org> - 0.9.610-1
- Update to 0.9.610
* Thu Oct 25 2018 Martin Gansser <martinkg(a)fedoraproject.org> - 0.9.609-1
- Update to 0.9.609
* Thu Oct 25 2018 Martin Gansser <martinkg(a)fedoraproject.org> - 0.9.608-1
- Update to 0.9.608
* Mon Oct 22 2018 Martin Gansser <martinkg(a)fedoraproject.org> - 0.9.607-1
- Update to 0.9.607
* Fri Oct 19 2018 Martin Gansser <martinkg(a)fedoraproject.org> - 0.9.605-1
- Update to 0.9.605
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1641370 - [abrt] lollypop: _on_populated():
view.py:272:_on_populated:AttributeError: 'RadioWidget' object has no attribute
'is_populated'
https://bugzilla.redhat.com/show_bug.cgi?id=1641370
--------------------------------------------------------------------------------
================================================================================
metamath-0.165-1.fc28 (FEDORA-2018-a2864fa27e)
Construct mathematics from basic axioms
--------------------------------------------------------------------------------
Update Information:
Changes in version 0.165: - added ~ mmtheorems#abc type anchor in TOC details -
fix bug (reported by Benoit Jubin) that changes "_" in labels to subscript -
remove unused COMPLETE qualifier from SHOW PROOF - enhance special cases of web
page spacing identified by Benoit Jubin - updates to set.mm
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 29 2018 Jerry James <loganjerry(a)gmail.com> - 0.165-1
- New upstream version
--------------------------------------------------------------------------------
================================================================================
mkvtoolnix-28.2.0-1.fc28 (FEDORA-2018-317ecbb54f)
Matroska container manipulation utilities
--------------------------------------------------------------------------------
Update Information:
# Version 28.2.0 "The Awakening" 2018-10-25 ## Bug fixes * mkvmerge, mkvinfo,
mkvextract, mkvpropedit, MKVToolNix GUI's info tool & chapter editor: fixed a
case of memory being accessed after it had been freed earlier. This can be
triggered by specially crafted Matroska files and lead to arbitrary code
execution. The vulnerability was reported as Cisco TALOS 2018-0694 on
2018-10-25. # Version 28.1.0 "Morning Child" 2018-10-23 ## Bug fixes *
mkvmerge: AV1 parser: fixed an error in the sequence header parser if neither
the `reduced_still_picture_header` nor the `frame_id_numbers_present_flag` is
set. Part of the fix for #2410. * mkvmerge: AV1 parser: when creating the `av1C`
structure for the Codec Private element the sequence header OBU wasn't copied
completely: its common data (type field & OBU size among others) was missing.
Part of the fix for #2410. * mkvmerge: Matroska reader, AV1: mkvmerge will try
to re-create the `av1C` data stored in Codec Private when reading AV1 from
Matroska or WebM files created by mkvmerge v28.0.0. Part of the fix for #2410. *
MKVToolNix GUI: info tool: the tool will no longer stop scanning elements when
an EBML Void element is found after the first Cluster element. Fixes #2413. #
Version 28.0.0 "Voice In My Head" 2018-10-20 ## New features and enhancements
* mkvmerge: AV1 parser: updated the code for the finalized AV1 bitstream
specification. Part of the implementation of #2261. * mkvmerge: AV1 packetizer:
updated the code for the finalized AV1-in-Matroska & WebM mapping specification.
Part of the implementation of #2261. * mkvmerge: AV1 support: the `--engage
enable_av1` option has been removed again. Part of the implementation of #2261.
* mkvmerge: MP4 reader: added support for AV1. Part of the implementation of
#2261. * mkvmerge: DTS: implemented dialog normalization gain removal for
extension substreams. Implements #2377. * mkvmerge, mkvextract: simple text
subtitles: added a workaround for simple text subtitle tracks that don't contain
a duration. Implements #2397. * mkvextract: added support for extracting AV1 to
IVF. Part of the implementation of #2261. * mkvextract: IVF extractor (AV1, VP8,
VP9): precise values will be used for the frame rate numerator & denominator
header fields for certain well-known values of the track's default duration. *
mkvmerge: VP9: mkvmerge will now create codec private data according to the VP9
codec mapping described in the WebM specifications. Implements #2379. *
MKVToolNix GUI: automatic scaling for high DPI displays is activated if the GUI
is compiled with Qt ��� 5.6.0. Fixes #1996 and #2383. * MKVToolNix GUI: added a
menu item ("Help" ��� "System information") for displaying information
about the
system MKVToolNix is running on in order to make debugging easier. * MKVToolNix
GUI: multiplexer, header editor: the user can enter a list of predefined track
names in the preferences. She can later select from them in "track name" combo
box. Implements #2230. ## Bug fixes * mkvmerge: JSON identification: fixed a
bug when removing invalid UTF-8 data from strings before they're output as JSON.
Fixes #2398. * mkvmerge: MP4/QuickTime reader: fixed handling of PCM audio with
FourCC `in24`. Fixes #2391. * mkvmerge: MPEG transport stream reader, teletext
subtitles: the decision whether or not to keep frames around in order to
potentially merge them with the following frame is made sooner. That avoids
problems if there are large gaps between teletext subtitle frames which could
lead to frames being interleaved too late. Fixes #2393. * mkvextract: IVF
extractor (AV1, VP8, VP8): the frame rate header fields weren't clamped to 16
bits properly causing wrong frame rates to be written in certain situations. *
mkvpropedit, MKVToolNix GUI's header editor: fixed file corruption when a one-
byte space must be covered with a new EBML void element but all surrounding
elements have a "size length" field that's eight bytes long already. Fixes
#2406.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 30 2018 Dominik Mierzejewski <rpm(a)greysector.net> - 28.2.0-1
- update to 28.2.0
- fixes CVE-2018-4022 (#1644258)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1644258 - CVE-2018-4022 mkvtoolnix: MKVINFO read_one_element code execution
vulnerability
https://bugzilla.redhat.com/show_bug.cgi?id=1644258
--------------------------------------------------------------------------------
================================================================================
ostree-2018.9-1.fc28 (FEDORA-2018-f15ba17ffa)
Tool for managing bootable, immutable filesystem trees
--------------------------------------------------------------------------------
Update Information:
New upstream releases. For details see:
https://github.com/ostreedev/ostree/releases/tag/v2018.9
https://github.com/projectatomic/rpm-ostree/releases/tag/v2018.9
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 25 2018 Colin Walters <walters(a)verbum.org> - 2018.9-1
-
https://github.com/ostreedev/ostree/releases/tag/v2018.9
* Wed Oct 17 2018 Jonathan Lebon <jonathan(a)jlebon.com>
- Add conditional for tests and disable by default on RHEL > 7
--------------------------------------------------------------------------------
================================================================================
perl-5.26.2-414.fc28 (FEDORA-2018-9fe5584400)
Practical Extraction and Report Language
--------------------------------------------------------------------------------
Update Information:
Fix annocheck failure by passing CFLAGS to dtrace
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 25 2018 Jitka Plesnikova <jplesnik(a)redhat.com> - 4:5.26.2-414
- Fix annocheck failure by passing CFLAGS to dtrace
--------------------------------------------------------------------------------
================================================================================
perl-CPAN-Perl-Releases-3.80-1.fc28 (FEDORA-2018-d56a1fbf52)
Mapping Perl releases on CPAN to the location of the tarballs
--------------------------------------------------------------------------------
Update Information:
Updated to the latest version ---- Updated to the latest version
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 29 2018 Jitka Plesnikova <jplesnik(a)redhat.com> - 3.80-1
- 3.80 bump
* Tue Oct 23 2018 Jitka Plesnikova <jplesnik(a)redhat.com> - 3.78-1
- 3.78 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1643844 - Upgrade perl-CPAN-Perl-Releases to 3.80
https://bugzilla.redhat.com/show_bug.cgi?id=1643844
[ 2 ] Bug #1641955 - Upgrade perl-CPAN-Perl-Releases to 3.78
https://bugzilla.redhat.com/show_bug.cgi?id=1641955
--------------------------------------------------------------------------------
================================================================================
perl-Convert-Base32-0.06-2.fc28 (FEDORA-2018-6364359a85)
Encoding and decoding of base32 strings
--------------------------------------------------------------------------------
Update Information:
First build.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1640640 - Review Request: perl-Convert-Base32 - Encoding and decoding of
base32 strings
https://bugzilla.redhat.com/show_bug.cgi?id=1640640
--------------------------------------------------------------------------------
================================================================================
perl-DateTime-TimeZone-2.21-1.fc28 (FEDORA-2018-a9fab4644d)
Time zone object base class and factory
--------------------------------------------------------------------------------
Update Information:
Updated to the latest version ---- Updated to the latest version
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 29 2018 Jitka Plesnikova <jplesnik(a)redhat.com> - 2.21-1
- 2.21 bump (2018g Olson database)
* Fri Oct 19 2018 Jitka Plesnikova <jplesnik(a)redhat.com> - 2.20-1
- 2.20 bump (2018f Olson database)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1643850 - Upgrade perl-DateTime-TimeZone to 2.21
https://bugzilla.redhat.com/show_bug.cgi?id=1643850
[ 2 ] Bug #1640990 - Upgrade perl-DateTime-TimeZone to 2.20
https://bugzilla.redhat.com/show_bug.cgi?id=1640990
--------------------------------------------------------------------------------
================================================================================
perl-IRI-0.009-1.fc28 (FEDORA-2018-3f62e4930b)
Internationalized Resource Identifiers
--------------------------------------------------------------------------------
Update Information:
This release corrects required minimal Perl version. We deliver it only to
provide up-to-date module version string.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 31 2018 Petr Pisar <ppisar(a)redhat.com> - 0.009-1
- 0.009 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1644619 - Upgrade perl-IRI to 0.009
https://bugzilla.redhat.com/show_bug.cgi?id=1644619
--------------------------------------------------------------------------------
================================================================================
perl-Sentry-Raven-1.10-2.fc28 (FEDORA-2018-492b9ed69a)
Perl sentry client
--------------------------------------------------------------------------------
Update Information:
Initial package.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1644266 - Review Request: perl-Sentry-Raven - Perl sentry client
https://bugzilla.redhat.com/show_bug.cgi?id=1644266
--------------------------------------------------------------------------------
================================================================================
php-Smarty2-2.6.31-2.fc28 (FEDORA-2018-2d2739ebed)
Smarty - the compiling PHP template engine
--------------------------------------------------------------------------------
Update Information:
2017-11-03 * replace functions deprecated in PHP 7.2 2016-09-11 Uwe Tews *
{math} fix parameter checking order to avoid misleading message * {math} replace
wrong versiom 2016-07-19 Uwe Tews * {math} shell injection vulnerability
patch provided by Tim Weber 2015-12-30 Uwe Tews * fixed plugin filepath
cache must not be static, because of possible problem when using multiple
Smarty instances with diffrent plugins_dir settings
https://github.com/smarty-
php/smarty/issues/146 2015-06-21 Uwe Tews * PHP7 raises E_DEPRECATED use
__construct for compatibility 2013-09-30 * Fixed old vulnerability bug
https://bugs.gentoo.org/show_bug.cgi?id=356615 2013-07-16 Uwe Tews * Fixed
made Smarty_Compiler.class.php compatible with PHP 5.5
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 27 2018 Shawn Iwinski <shawn(a)iwin.ski> - 2.6.31-2
- Add composer provides
* Sat Oct 27 2018 Shawn Iwinski <shawn(a)iwin.ski> - 2.6.31-1
- Update to 2.6.31
- Update license from LGPLv2+ to LGPLv3
- Full spec update
- Remove broken demo files
- Add autoloader
- Move license file from docs directory to shared licenses directory
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.6.27-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
php-myclabs-php-enum-1.6.4-1.fc28 (FEDORA-2018-449dff820c)
PHP Enum implementation
--------------------------------------------------------------------------------
Update Information:
**Version 1.6.4** * Fix #80 Fix validating key with null value * Fix #82 Fix
coding style and setup
https://prettyci.com ---- **Version 1.6.3** * Fix #77
#78: better support for null values in enums.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 30 2018 Remi Collet <remi(a)remirepo.net> - 1.6.4-1
- update to 1.6.4
* Mon Oct 29 2018 Remi Collet <remi(a)remirepo.net> - 1.6.3-1
- update to 1.6.3
--------------------------------------------------------------------------------
================================================================================
php-pear-CAS-1.3.6-1.fc28 (FEDORA-2018-0bc91454ce)
Central Authentication Service client library in php
--------------------------------------------------------------------------------
Update Information:
**Version 1.3.6** **Security Fixes:** * Fix XSS in proxy mode [#271]
(Joachim Fritschi) **Bug Fixes:** * Fix bad condition [#252] (Brice
Vercoustre) * Hash ticket strings to generate valid-length session-ids [#224,
#244, #248] (Adam Franco) * Fix "phpCAS" class capitalization in code [#273,
#277] (phy25) **Improvement:** * Remove fallback for __autoload [#247]
(marinaglancy) * More robust check for Windows OS in File.php [#275]
(xamount) * Fix continue statement within switch/case for php 7.3
compatibility [#278] (stonk7)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 26 2018 Remi Collet <remi(a)remirepo.net> - 1.3.6-1
- update to 1.3.6
- new github and packagist owner
--------------------------------------------------------------------------------
================================================================================
php-pecl-psr-0.5.1-1.fc28 (FEDORA-2018-a5ec0311ce)
PSR interfaces
--------------------------------------------------------------------------------
Update Information:
**Version 0.5.1** - Fix `Psr\Http\Message\ServerRequestInterface` not actually
extending `Psr\Http\Message\RequestInterface`
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 30 2018 Remi Collet <remi(a)remirepo.net> - 0.5.1-1
- update to 0.5.1
--------------------------------------------------------------------------------
================================================================================
php-phpunit-php-token-stream3-3.0.1-1.fc28 (FEDORA-2018-c61b355365)
Wrapper around PHP tokenizer extension
--------------------------------------------------------------------------------
Update Information:
**Version 3.0.1** - 2018-10-30 * **Fixed** * Fixed
[#78](https://github.com/sebastianbergmann/php-token-stream/pull/78):
`getEndTokenId()` does not handle string-dollar (`"${var}"`) interpolation
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 30 2018 Remi Collet <remi(a)remirepo.net> - 3.0.1-1
- update to 3.0.1
--------------------------------------------------------------------------------
================================================================================
php-samyoul-u2f-php-server-1.1.4-1.fc28 (FEDORA-2018-5bfc6c958f)
Server side handling class for FIDO U2F registration and authentication
--------------------------------------------------------------------------------
Update Information:
**Version 1.1.4** * fix issue when there is more than one U2F key registered
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
podman-0.10.1.3-3.gitdb08685.fc28 (FEDORA-2018-4d5868da89)
Manage Pods, Containers and Container Images
--------------------------------------------------------------------------------
Update Information:
correct bug id in previous changelog entry
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 28 2018 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 0.10.1.3-3.gitdb08685
- correct bug id in previous changelog entry
* Sun Oct 28 2018 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 0.10.1.3-2.gitdb08685
- Resolves: #1643744 - build podman with ostree support
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1643744 - podman is not build with ostree support
https://bugzilla.redhat.com/show_bug.cgi?id=1643744
--------------------------------------------------------------------------------
================================================================================
pungi-4.1.30-1.fc28 (FEDORA-2018-731fb3f951)
Distribution compose tool
--------------------------------------------------------------------------------
Update Information:
* Fix dependencies in `pungi-legacy` subpackage. * Include fixes for ISOs
containing multiple variants. * Fix issues with hybrid depsolver.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 31 2018 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.30-1
- gather: Expand wildcards in Pungi (lsedlar)
- repoclosure: Extract logs from hybrid solver (lsedlar)
- gather: Track multilib that doesn't exist (lsedlar)
- Get the NSVC from Koji module CG build metadata (jkaluza)
- extra_iso: Include media.repo and .discinfo (lsedlar)
- hybrid: Don't add debuginfo as langpacks (lsedlar)
- fus: Write solvables to file (lsedlar)
- hybrid: Honor filter_packages (lsedlar)
- Include all test fixtures in source tarball (lsedlar)
- extra-iso: Use correct efiboot.img file (lsedlar)
- extra-iso: Fix treeinfo (lsedlar)
- createiso: Move code for tweaking treeinfo into a function (lsedlar)
- extra-iso: Generate jigdo by default (lsedlar)
* Mon Oct 15 2018 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.29-3
- Save memory less agressively
* Wed Oct 10 2018 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.29-2
- Add dependency on xorriso to pungi-legacy
- Bump dependency on python-productmd
* Wed Oct 10 2018 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.29-1
- hybrid: Only include modules that are not in lookaside (lsedlar)
- Try to be more conservative about memory usage (lsedlar)
- hybrid: Remove modules not listed by fus (lsedlar)
- gather: Make devel modules configurable (lsedlar)
- pkgset: Stop prefilling RPM artifacts (lsedlar)
- gather: Create devel module for each normal module (lsedlar)
- pkgset: Save package set for each module (lsedlar)
- fus: List lookaside repos first (lsedlar)
- gather: Work with repos without location_base (lsedlar)
- Remove extra dependencies (lsedlar)
- Set repodata mtime to SOURCE_DATE_EPOCH (marmarek)
- Make sure .treeinfo file is sorted (marmarek)
- Use constant MBR ID for isohybrid (marmarek)
- Use xorriso instead of genisoimage (marmarek)
- Use $SOURCE_DATE_EPOCH (if set) in discinfo file (marmarek)
- unified_isos: Add extra variants to metadata (lsedlar)
- extra_iso: Add list of variants to metadata (lsedlar)
- linker: Simplify creating pool (lsedlar)
- gather: Hide pid of fus process (lsedlar)
- fus: Strip protocol from repo path (lsedlar)
- Add 'pkgset_koji_builds' option to include extra builds in a compose
(jkaluza)
- ostree: Reduce duplication in tests (lsedlar)
- ostree: Use --touch-if-changed (lsedlar)
- ostree: Fix handler crash without commit ID (lsedlar)
- gather: Filter arches similarly to pkgset (lsedlar)
- Stop shipping and remove RELEASE-NOTES (pbrobinson)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1641638 - python2-pungi has no dependencies
https://bugzilla.redhat.com/show_bug.cgi?id=1641638
--------------------------------------------------------------------------------
================================================================================
python-requests-2.20.0-1.fc28 (FEDORA-2018-9324e844d9)
HTTP library, written in Python, for human beings
--------------------------------------------------------------------------------
Update Information:
- Update to v2.20.0 - Includes fix for CVE-2018-18074
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 29 2018 Jeremy Cline <jeremy(a)jcline.org> - 2.20.0-1
- Update to v2.20.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1643830 - CVE-2018-18074 python-requests: Redirect from HTTPS to HTTP does
not remove Authorization header [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1643830
[ 2 ] Bug #1591531 - python-requests-2.19.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1591531
--------------------------------------------------------------------------------
================================================================================
python-sqlalchemy-1.2.12-1.fc28 (FEDORA-2018-a27cc0e5c2)
Modular and flexible ORM library for python
--------------------------------------------------------------------------------
Update Information:
This update contains a new upstream bugfix release. The upstream [changelog](ht
tps://docs.sqlalchemy.org/en/latest/changelog/changelog_12.html#change-1....)
contains a list of all changes in version 1.2.12.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 30 2018 Nils Philippsen <nils(a)tiptoe.de> - 1.2.12-1
- version 1.2.12
--------------------------------------------------------------------------------
================================================================================
qt-virt-manager-0.70.91-1.fc28 (FEDORA-2018-a864ea4a98)
Qt Virtual Machine Manager
--------------------------------------------------------------------------------
Update Information:
some enhancements;
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 24 2018 Fl@sh <kaperang07(a)gmail.com> - 0.70.91-1
- version updated;
--------------------------------------------------------------------------------
================================================================================
rpm-4.14.2.1-2.fc28 (FEDORA-2018-f571542e45)
The RPM package management system
--------------------------------------------------------------------------------
Update Information:
Push name/epoch/version/release macro for dependency generators ---- An
unfortunate regression in rpm 4.14.2 causes --setperms to behave incorrectly on
symbolic links: file and directory permissions become world writable and
executable on symlink targets. A similar flaw exists in --setugids, but it is
less exploitable. If you have used --setperms (or --setugids,
or --restore) with rpm 4.14.2, you should ensure system integrity with rpm
--verify before proceeding to correct any mixed up permissions and ownerships to
avoid possibly giving suid capabilities to a modified binary. Further details
of the --setperms bug available upstream:
http://rpm.org/wiki/Releases/4.14.2.1
**Note that this update can not automatically fix possible damage done by using
���setperms, ���setugids or ���restore with rpm 4.14.2, it merely fixes the
functionlity itself. Any damage needs to be investigated and fixed manually,
such as using ���verify and ���restore or reinstalling packages.**
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 29 2018 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 4.14.2.1-2
- Push name/epoch/version/release macro before invoking depgens
* Mon Oct 22 2018 Panu Matilainen <pmatilai(a)redhat.com> - 4.14.2.1-1
- Update to rpm 4.14.2.1 (
http://rpm.org/wiki/Releases/4.14.2.1)
--------------------------------------------------------------------------------
================================================================================
rpm-ostree-2018.9-1.fc28 (FEDORA-2018-f15ba17ffa)
Hybrid image/package system
--------------------------------------------------------------------------------
Update Information:
New upstream releases. For details see:
https://github.com/ostreedev/ostree/releases/tag/v2018.9
https://github.com/projectatomic/rpm-ostree/releases/tag/v2018.9
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 28 2018 Jonathan Lebon <jonathan(a)jlebon.com> - 2018.9-1
- New upstream version
--------------------------------------------------------------------------------
================================================================================
systemd-238-10.git438ac26.fc28 (FEDORA-2018-24bd6c9d4a)
System and Service Manager
--------------------------------------------------------------------------------
Update Information:
- Fix a local vulnerability from a race condition in chown-recursive
(CVE-2018-15687, #1643367) - Fix a local vulnerability from invalid handling of
long lines in state deserialization (CVE-2018-15686, #1643372) - Fix a remote
vulnerability in DHCPv6 in systemd-networkd (CVE-2018-15688, #1643362) -
Downgrade logging of various messages and add loging in other places - Many many
fixes in error handling and minor memory leaks and such - Fix typos and
omissions in documentation - Various smaller improvements to unit ordering and
dependencies - Handling of invalid (intentionally corrupt) dbus messages is
improved, fixing potential local DOS avenues - The target of symlinks links in
.wants/ and .requires/ is now ignored. This fixes an issue where the unit file
would sometimes be loaded from such a symlink, leading to non-deterministic unit
contents. - Filtering of kernel threads is improved. This fixes an issues with
newer kernels where hybrid kernel/user threads are used by bpfilter. - Catalog
entries for the journal are improved (#1639482) No need to reboot or log out.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 29 2018 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> -
238-10.git438ac26
- Fix a local vulnerability from a race condition in chown-recursive (CVE-2018-15687,
#1643367)
- Fix a local vulnerability from invalid handling of long lines in state deserialization
(CVE-2018-15686, #1643372)
- Fix a remote vulnerability in DHCPv6 in systemd-networkd (CVE-2018-15688, #1643362)
- Downgrade logging of various messages and add loging in other places
- Many many fixes in error handling and minor memory leaks and such
- Fix typos and omissions in documentation
- Various smaller improvements to unit ordering and dependencies
- Handling of invalid (intentionally corrupt) dbus messages is improved, fixing potential
local DOS avenues
- The target of symlinks links in .wants/ and .requires/ is now ignored. This fixes an
issue where
the unit file would sometimes be loaded from such a symlink, leading to
non-deterministic unit contents.
- Filtering of kernel threads is improved. This fixes an issues with newer kernels where
hybrid kernel/user
threads are used by bpfilter.
- Catalog entries for the journal are improved (#1639482)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1639482 - journalctl reports a totally useless ' The start-up result is
RESULT.' and "Failed with result 'exit-code'.
https://bugzilla.redhat.com/show_bug.cgi?id=1639482
[ 2 ] Bug #1643362 - CVE-2018-15688 systemd: Out-of-bounds heap write in
systemd-networkd dhcpv6 option handling [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1643362
[ 3 ] Bug #1643372 - CVE-2018-15686 systemd: Line splitting via fgets() allows for state
injection during daemon-reexec [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1643372
[ 4 ] Bug #1643367 - CVE-2018-15687 systemd: Dereference of symlinks in
chown_recursive.c:chown_one() allows for modification of file privileges [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1643367
--------------------------------------------------------------------------------
================================================================================
units-2.18-1.fc28 (FEDORA-2018-d28abe8ef5)
A utility for converting amounts from one unit to another
--------------------------------------------------------------------------------
Update Information:
- update to the latest upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 29 2018 Kamil Dudka <kdudka(a)redhat.com> - 2.18-1
- new upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1574835 - units_cur broken (again)
https://bugzilla.redhat.com/show_bug.cgi?id=1574835
--------------------------------------------------------------------------------
================================================================================
uronode-2.9-4.fc28 (FEDORA-2018-07c6800d82)
Alternative packet radio system for Linux
--------------------------------------------------------------------------------
Update Information:
This is an update fixing logging of users after clean installation.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 30 2018 Jaroslav ��karvada <jskarvad(a)redhat.com> - 2.9-4
- Create empty database of current users
* Fri Jul 20 2018 Jaroslav ��karvada <jskarvad(a)redhat.com> - 2.9-3
- Fixed FTBFS by adding gcc requirement
Resolves: rhbz#1606621
- Cleaned leftover files
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.9-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
webkit2gtk3-2.22.3-1.fc28 (FEDORA-2018-509fc4a5c8)
GTK+ Web content engine library
--------------------------------------------------------------------------------
Update Information:
This update addresses the following vulnerability: *
[
CVE-2018-4345](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4345)
This update brings the following changes: * Many improvements and fixes for
video playback with media source extensions (MSE), which improve the user
experience across the board, and in particular for playback of WebM videos. *
Fix a memory leak during media playback when using playbin3. * Fix portions of
Web views not being rendered after resizing. * Fix Resource Timing reporting for
iframe elements. * Fix the build with the remote Web Inspector disabled. * Fix
the build on ARMv7 with NEON extensions. * Fix several crashes and rendering
issues.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 29 2018 Tomas Popela <tpopela(a)redhat.com> - 2.22.3-1
- Update to 2.22.3
--------------------------------------------------------------------------------
================================================================================
wine-3.19-1.fc28 (FEDORA-2018-6ead3e32fa)
A compatibility layer for windows applications
--------------------------------------------------------------------------------
Update Information:
- Support for file I/O completion modes. - WaitOnAddress synchronization
primitives. - Better support for 32-bit .NET binaries on 64-bit. - Improved
recovery on broken RPC connection. - Various bug fixes.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 29 2018 Michael Cronenworth <mike(a)cchtml.com> 3.19-1
- version update
--------------------------------------------------------------------------------
================================================================================
wingpanel-indicator-notifications-2.1.2-1.fc28 (FEDORA-2018-0b67cd6abc)
Notifications Indicator for wingpanel
--------------------------------------------------------------------------------
Update Information:
Update to version 2.1.2. Release notes:
https://github.com/elementary
/wingpanel-indicator-notifications/releases/tag/2.1.2
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 30 2018 Fabio Valentini <decathorpe(a)gmail.com> - 2.1.2-1
- Update to version 2.1.2.
--------------------------------------------------------------------------------
================================================================================
xfig-3.2.7a-1.fc28 (FEDORA-2018-009f178c43)
An X Window System tool for drawing basic vector graphics
--------------------------------------------------------------------------------
Update Information:
- New upstream release 3.2.7a - Add Requires: transfig to make sure esp export
works (rhbz#1642033) - Switch back to URW fonts so that Bookman, New Century
Schoolbook and Palatino work again. This uses the old version of the URW fonts
which are now packaged as urw-base35-fonts-legacy (rhbz#1523624, rhbz#1551219)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 29 2018 Hans de Goede <hdegoede(a)redhat.com> - 3.2.7a-1
- New upstream release 3.2.7a
- Add Requires: transfig to make sure esp export works (rhbz#1642033)
- Switch back to URW fonts so that Bookman, New Century Schoolbook and
Palatino work again. This uses the old version of the URW fonts which are
now packaged as urw-base35-fonts-legacy (rhbz#1523624, rhbz#1551219)
- Trim the changelog
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.2.6a-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1523624 - xfig does not display X11 fonts -- fedora 27 / 32-bit / x11
https://bugzilla.redhat.com/show_bug.cgi?id=1523624
[ 2 ] Bug #1642033 - xfig missing dependency on transfig
https://bugzilla.redhat.com/show_bug.cgi?id=1642033
--------------------------------------------------------------------------------