The following Fedora 28 Security updates need testing:
Age URL
118
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d510cfd7eb
jgraphx-3.6.0.0-6.fc28
90
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c75a37ae9b
blktrace-1.2.0-6.fc28
77
https://bodhi.fedoraproject.org/updates/FEDORA-2018-202c536f70
gifsicle-1.91-1.fc28
68
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d7aeaa74da
nodejs-brace-expansion-1.1.11-1.fc28
66
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc073fdc1a
nodejs-atob-2.1.1-1.fc28
59
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9dd3f7c013
unrtf-0.21.9-8.fc28
27
https://bodhi.fedoraproject.org/updates/FEDORA-2018-28e9841baf
docker-latest-1.13.1-37.git9cb56fd.fc28
19
https://bodhi.fedoraproject.org/updates/FEDORA-2018-0c586e5178
quazip-0.7.6-1.fc28
13
https://bodhi.fedoraproject.org/updates/FEDORA-2018-33fef25ed1
ghc-hakyll-4.10.0.0-3.fc28 pandoc-citeproc-0.12.2.5-4.fc28 ghc-hs-bibutils-6.6.0.0-1.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7a9777480c
python-uranium-lulzbot-3.2.23-1.fc28 CuraEngine-lulzbot-3.2.23-1.fc28
cura-lulzbot-3.2.23-1.fc28 lulzbot-marlin-firmware-1.1.8.62-1.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f37cbaafdf
mingw-LibRaw-0.18.13-2.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-74fb8b257b qemu-2.11.2-2.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b48e0b8761
libpng15-1.5.30-6.fc28
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9b54497b6e
php-symfony-2.8.44-1.fc28
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9c38d1dc1d
php-symfony3-3.4.14-1.fc28
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3238d4da59
mingw-glibmm24-2.56.0-1.fc28 mingw-glib2-2.56.1-1.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b7d774a7c1
knot-resolver-2.4.1-1.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-732f45d43e
php-symfony4-4.0.14-1.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4a606489ae
php-zendframework-zend-diactoros-1.8.4-1.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-71e9650fa9
php-zendframework-zend-http-2.8.1-1.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7da5983771
php-zendframework-zend-feed-2.10.3-1.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-0c85690ba7
python2-django1.11-1.11.15-2.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a5a7f83e1b cgit-1.1-11.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bb965553f9
mozilla-privacy-badger-2018.8.1-1.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-99ff4c8f80
python35-3.5.6-1.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-28f30efaf6
cri-o-1.11.1-1.git1759204.fc28
The following Fedora 28 Critical Path updates have yet to be approved:
Age URL
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-74fb8b257b qemu-2.11.2-2.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-55836ac1ad cups-2.2.6-18.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d200332c07
usbredir-0.8.0-1.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-83cf562cce
libusbx-1.0.22-1.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2eac5b6cb4
perl-HTTP-Tiny-0.076-1.fc28
The following builds have been pushed to Fedora 28 updates-testing
appstream-0.12.2-1.fc28
calf-0.90.1-1.fc28
cockpit-175-1.fc28
dbus-1.12.10-1.fc28
erlang-20.3.8.4-1.fc28
flacon-4.1.0-1.fc28
fwknop-2.6.10-1.fc28
gnutls-3.6.3-3.fc28
infiniband-diags-2.1.0-1.fc28
js-jsroot-5.5.0-1.fc28
libmodulemd-1.6.2-1.fc28
librsvg2-2.42.6-1.fc28
libwmf-0.2.8.4-56.fc28
libwps-0.4.10-1.fc28
libxcrypt-4.1.1-4.fc28
mate-panel-1.20.3-1.fc28
mmapper-2.5.1-1.fc28
perl-Text-Quoted-2.10-1.fc28
poppler-0.62.0-4.fc28
python-i3ipc-1.5.1-1.fc28
python-moksha-hub-1.5.12-1.fc28
python-netdisco-2.0.0-1.fc28
python-pluginlib-0.6.1-1.fc28
python-uvloop-0.11.2-1.fc28
python34-3.4.9-2.fc28
root-6.14.02-1.fc28
rsyslog-8.37.0-1.fc28
selinux-policy-3.14.1-39.fc28
singularity-2.6.0-1.1.fc28
spectre-meltdown-checker-0.38-1.fc28
usermode-1.112-3.fc28
xtl-0.4.13-1.fc28
Details about builds:
================================================================================
appstream-0.12.2-1.fc28 (FEDORA-2018-a103abea6e)
Utilities to generate, maintain and access the AppStream database
--------------------------------------------------------------------------------
Update Information:
New stable upstream release.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 7 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 0.12.2-1
- appstream-0.12.2 (#1589595)
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.12.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Sun Jun 10 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 0.12.1-1
- appstream-0.12.1 (#1589595)
- use %ldconfig_scriptlets
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1589595 - appstream-0.12.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1589595
--------------------------------------------------------------------------------
================================================================================
calf-0.90.1-1.fc28 (FEDORA-2018-bf31221022)
Audio plugins pack
--------------------------------------------------------------------------------
Update Information:
0.90.1
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 7 2018 Gwyn Ciesla <limburgher(a)gmail.com> - 0.90.1-1
- 0.90.1.
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.90.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
cockpit-175-1.fc28 (FEDORA-2018-8186acc942)
A user interface for Linux servers
--------------------------------------------------------------------------------
Update Information:
- Network bound disk encryption
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 8 2018 Marius Vollmer <mvollmer(a)redhat.com> - 175-1
- Network bound disk encryption
--------------------------------------------------------------------------------
================================================================================
dbus-1.12.10-1.fc28 (FEDORA-2018-b534b138d7)
D-BUS message bus
--------------------------------------------------------------------------------
Update Information:
Update to 1.12.10 * Prevent reading up to 3 bytes beyond the end of a truncated
message. This could in principle be an information leak or denial of service
on the system bus, but is not believed to be exploitable to crash the system
bus or leak interesting information in practice. (fd.o #107332, Simon
McVittie) * Fix build with gcc 8 -Werror=cast-function-type (fd.o #107349,
Simon McVittie) * Fix warning from gcc 8 about suspicious use of strncpy() when
populating struct sockaddr_un (fd.o #107350, Simon McVittie) * Fix a minor
memory leak when a DBusServer listens on a new address (fd.o #107194, Simon
McVittie) * Fix an invalid NULL argument to rmdir() if a nonce-tcp DBusServer
runs out of memory (fd.o #107194, Simon McVittie) * Don't use misleading errno-
derived error names if getaddrinfo() or getnameinfo() fails with a code other
than EAI_SYSTEM (fd.o #106395, Simon McVittie) * Skip tests that require
working TCP if we are in a container environment where 127.0.0.1 cannot be
resolved (fd.o #106812, Simon McVittie)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 3 2018 David King <amigadave(a)amigadave.com> - 1:1.12.10-1
- Update to 1.12.10
--------------------------------------------------------------------------------
================================================================================
erlang-20.3.8.4-1.fc28 (FEDORA-2018-96461b1646)
General-purpose programming language and runtime environment
--------------------------------------------------------------------------------
Update Information:
* Erlang ver. 20.3.8.4
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 3 2018 Peter Lemenkov <lemenkov(a)gmail.com> - 20.3.8.4-1
- Ver. 20.3.8.4
* Tue Jul 31 2018 Florian Weimer <fweimer(a)redhat.com> - 20.3.8.3-2
- Rebuild with fixed binutils
--------------------------------------------------------------------------------
================================================================================
flacon-4.1.0-1.fc28 (FEDORA-2018-62a9189542)
Audio File Encoder
--------------------------------------------------------------------------------
Update Information:
update to new version
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 25 2018 Ilya Gradina <ilya.gradina(a)gmail.com> - 4.1.0-1
- Update to 4.1.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1569986 - flacon-4.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1569986
--------------------------------------------------------------------------------
================================================================================
fwknop-2.6.10-1.fc28 (FEDORA-2018-b44e54cfbc)
A Single Packet Authorization (SPA) implementation
--------------------------------------------------------------------------------
Update Information:
New upstream release (#1613332)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 7 2018 Jakub Jelen <jjelen(a)redhat.com> - 2.6.10-1
- New upstream release (#1613332)
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.6.9-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1613332 - fwknop-2.6.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1613332
--------------------------------------------------------------------------------
================================================================================
gnutls-3.6.3-3.fc28 (FEDORA-2018-4fcea4c482)
A TLS protocol implementation
--------------------------------------------------------------------------------
Update Information:
Fixed ECDSA public key import (#1612803)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 7 2018 Nikos Mavrogiannopoulos <nmav(a)redhat.com> - 3.6.3-3
- Fixed ECDSA public key import (#1612803)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1612803 - Cannot read EC public key with certtool in 3.6.3 (Fedora 28)
https://bugzilla.redhat.com/show_bug.cgi?id=1612803
--------------------------------------------------------------------------------
================================================================================
infiniband-diags-2.1.0-1.fc28 (FEDORA-2018-7afed0b1e3)
OpenFabrics Alliance InfiniBand Diagnostic Tools
--------------------------------------------------------------------------------
Update Information:
Update infiniband-diags to latest upstream release v2.1.0.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 7 2018 Honggang Li <honli(a)redhat.com> - 2.1.0-1
- Rebase to latest upstream release v2.1.0
- Resolves: bz1613594
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
js-jsroot-5.5.0-1.fc28 (FEDORA-2018-111892e3c1)
JavaScript ROOT - Interactive numerical data analysis graphics
--------------------------------------------------------------------------------
Update Information:
*
https://root.cern.ch/doc/v614/release-notes.html#release-6.1402 *
https://github.com/root-project/jsroot/releases/tag/5.5.0
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 20 2018 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 5.5.0-1
- Update to version 5.5.0
- Change dependency to js-jquery since js-jquery2 is orphaned
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.4.2-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1586022 - ROOTConfig-targets.cmake need to be adopted to the actually
installed root packages.
https://bugzilla.redhat.com/show_bug.cgi?id=1586022
--------------------------------------------------------------------------------
================================================================================
libmodulemd-1.6.2-1.fc28 (FEDORA-2018-7e611defb3)
Module metadata manipulation library
--------------------------------------------------------------------------------
Update Information:
Make buildorder a signed integer to match the modulemd specification
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 7 2018 Stephen Gallagher <sgallagh(a)redhat.com> - 1.6.2-1
- Update to 1.6.2
- Make buildorder a signed integer to match modulemd specification
* Mon Jul 23 2018 Stephen Gallagher <sgallagh(a)redhat.com> - 1.6.1-2
- Obsolete unsupported pythonX-modulemd packages
--------------------------------------------------------------------------------
================================================================================
librsvg2-2.42.6-1.fc28 (FEDORA-2018-cc2dc51e29)
An SVG library based on cairo
--------------------------------------------------------------------------------
Update Information:
librsvg 2.42.6 release: - 282 - Fix drop-shadows generated from Inkscape; we
were overwriting a surface inadvertently. - 241 - Fix confusion between
feSpotLight and feDistantLight (Ivan Molodetskikh). - 292 - Don't panic if we
try to clip with an empty region. - Fix out-of-tree builds and tests (Jehan). -
Compilation can now use a RUST_TARGET variable to override the host triplet
when cross-compiling. See COMPILING.md for details (Fabrice Fontaine).
librsvg 2.42.5 release: - 266 - Don't render filter primitives that have
invalid attributes. This was causing a crash in feColorMatrix. - 276 -
rsvg_handle_render_cairo() will now refuse to render if the cairo_t passed to
it is in an error state. Fixes a panic in the cairo-dock program. - 206 - The
test suite now writes test artifacts to tests/output instead of /tmp (Saurav
Sachidanand). librsvg 2.42.4 release: - Fix: elements with systemLanguage
attributes without variants now work better (Paolo Borelli). - gitlab#227 -
Fix: we now catch negative values in stroke-dasharray properties instead of
leaving the cairo_t in an error state. - gitlab#228 - Fix: empty transform
attribute now correctly yields an identity transform (Dmitry Kontsevoy). - Fix
possible crash on invalid gradient references. - Make robust against patterns
and gradients with no children. - Lots of code cleanups and refactorings (Jordan
Petridis, Dmitry Kontsevoy, Ivan Molodetskikh). - Code moved to Rust: low-
level path and PangoLayout drawing, "switch" element (Paolo Borelli). - New
Rust dependencies: float_cmp, pangocairo crates. - We now require Rust 1.21 or
later.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 8 2018 Kalev Lember <klember(a)redhat.com> - 2.42.6-1
- Update to 2.42.6
- Use bundled rust deps
--------------------------------------------------------------------------------
================================================================================
libwmf-0.2.8.4-56.fc28 (FEDORA-2018-8d75f4ad14)
Windows MetaFile Library
--------------------------------------------------------------------------------
Update Information:
- adapt libwmf to ghostscript and urw-font changes
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 8 2018 Caol��n McNamara <caolanm(a)redhat.com> - 0.2.8.4-56
- Resolves: rhbz#1595490 make libwmf work again with recent urw-fonts
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
0.2.8.4-55
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
0.2.8.4-54
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1595490 - libwmf does not work: ERROR: font.c (1335): wmf_ipa_font_map:
failed to load *any* font!
https://bugzilla.redhat.com/show_bug.cgi?id=1595490
--------------------------------------------------------------------------------
================================================================================
libwps-0.4.10-1.fc28 (FEDORA-2018-716e3c1ce4)
A library for import of Microsoft Works documents
--------------------------------------------------------------------------------
Update Information:
new upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 7 2018 David Tardon <dtardon(a)redhat.com> - 0.4.10-1
- new upstream release
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4.9-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
libxcrypt-4.1.1-4.fc28 (FEDORA-2018-b393b60802)
Extended crypt library for DES, MD5, Blowfish and others
--------------------------------------------------------------------------------
Update Information:
- Make `crypt{,_r}` return `NULL` on failure. - Move `*.3` manpages to devel
subpackage. - Add needed `Conflicts: man-pages < 4.15-3`.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 8 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.1.1-4
- Move *.3 manpages to devel subpackage (#1613762)
- Add needed Conflicts: man-pages < 4.15-3
* Wed Aug 8 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.1.1-3
- Make crypt{,_r} return NULL on failure (#1611784)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1611784 - libxcrypt: crypt no longer returns NULL on failure, but
"*0"
https://bugzilla.redhat.com/show_bug.cgi?id=1611784
[ 2 ] Bug #1613762 - libxcrypt: Manual pages in section 3 should be in the
libxcrypt-devel package
https://bugzilla.redhat.com/show_bug.cgi?id=1613762
--------------------------------------------------------------------------------
================================================================================
mate-panel-1.20.3-1.fc28 (FEDORA-2018-b8f25d74ad)
MATE Desktop panel and applets
--------------------------------------------------------------------------------
Update Information:
- update to 1.20.3 release - build wnck and clock applet with-in-process, fix
rhbz (#1590569) - fix ld scriptlets in spec file
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 8 2018 Wolfgang Ulbrich <fedora(a)raveit.de> - 1.20.3-1
- update to 1.20.3 release
- build wnck and clock applet with-in-process, fix rhbz (#1590569)
- fix ld scriptlets in spec file
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1590569 - [abrt] mate-panel: gtk_drag_finish(): mate-panel killed by SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1590569
[ 2 ] Bug #1575091 - Mate panel eats ram and CPU when wine apps display tray icons.
https://bugzilla.redhat.com/show_bug.cgi?id=1575091
--------------------------------------------------------------------------------
================================================================================
mmapper-2.5.1-1.fc28 (FEDORA-2018-0191a6cfd7)
Graphical MUME mapper
--------------------------------------------------------------------------------
Update Information:
mmapper 2.5.1 release. - Added new Stable flag for rooms - Integrated client
supports automatic character set negotiation (RFC 2066) - Fixed bug that caused
unnecessary NO_MATCH exits to be applied to maps - Squished bug that prevented
auto-mapping sundeath for rooms to the west of the player - Exits now preserve
their color from MUME - Code was modernized to C++14
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 8 2018 Kalev Lember <klember(a)redhat.com> - 2.5.1-1
- Update to 2.5.1
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.5.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
perl-Text-Quoted-2.10-1.fc28 (FEDORA-2018-ebeb01c15a)
Extract the structure of a quoted mail message
--------------------------------------------------------------------------------
Update Information:
Upstream update
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 7 2018 Ralf Cors��pius <corsepiu(a)fedoraproject.org> - 2.10-1
- Update to 2.10.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1613225 - Upgrade perl-Text-Quoted to 2.10
https://bugzilla.redhat.com/show_bug.cgi?id=1613225
--------------------------------------------------------------------------------
================================================================================
poppler-0.62.0-4.fc28 (FEDORA-2018-d83a84af93)
PDF rendering library
--------------------------------------------------------------------------------
Update Information:
This update fixes drawing of patterns with big offsets.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 7 2018 Marek Kasik <mkasik(a)redhat.com> - 0.62.0-4
- Fix tiling patterns when pattern cell is too far
- Resolves: #1557355
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1557355 - At least one page of a document is not displayed.
https://bugzilla.redhat.com/show_bug.cgi?id=1557355
--------------------------------------------------------------------------------
================================================================================
python-i3ipc-1.5.1-1.fc28 (FEDORA-2018-f8040aedf2)
An improved Python library to control i3wm
--------------------------------------------------------------------------------
Update Information:
Update to upstream version 1.5.1
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 7 2018 Michael Simacek <msimacek(a)redhat.com> - 1.5.1-1
- Update to upstream version 1.5.1
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 1.4.0-2
- Rebuilt for Python 3.7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1563658 - python-i3ipc-v1.5.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1563658
--------------------------------------------------------------------------------
================================================================================
python-moksha-hub-1.5.12-1.fc28 (FEDORA-2018-df7dc064a4)
Hub components for Moksha
--------------------------------------------------------------------------------
Update Information:
Hub shuts down now on errors from a STOMP broker. ---- Latest upstream.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 7 2018 Ralph Bean <rbean(a)redhat.com> - 1.5.12-1
- new version
* Thu Aug 2 2018 Ralph Bean <rbean(a)redhat.com> - 1.5.11-1
- new version
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5.10-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
python-netdisco-2.0.0-1.fc28 (FEDORA-2018-8933ec69c6)
Python library to scan local network for services and devices
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release 2.0.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 8 2018 Fabian Affolter <mail(a)fabian-affolter.ch> - 2.0.0-1
- Update to latest upstream release 2.0.0
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 1.5.0-2
- Rebuilt for Python 3.7
--------------------------------------------------------------------------------
================================================================================
python-pluginlib-0.6.1-1.fc28 (FEDORA-2018-7c81b42a79)
A framework for creating and importing plugins in Python
--------------------------------------------------------------------------------
Update Information:
0.6.1 Release ---- 0.6.0 Release
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 7 2018 Avram Lubkin <aviso(a)rockhopper.net> - 0.6.1-1
- 0.6.1 Release
* Sat Aug 4 2018 Avram Lubkin <aviso(a)rockhopper.net> - 0.6.0-2
- EL6 build requirements should only apply to Python 2
--------------------------------------------------------------------------------
================================================================================
python-uvloop-0.11.2-1.fc28 (FEDORA-2018-730572f17a)
Ultra fast implementation of asyncio event loop on top of libuv
--------------------------------------------------------------------------------
Update Information:
Update to 0.11.2
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 8 2018 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 0.11.2-1
- Update to 0.11.2
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.11.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Sat Jul 7 2018 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 0.11.0-1
- Update to 0.11.0
* Thu Jun 21 2018 Jerry James <loganjerry(a)gmail.com> - 0.10.1-1
- Update to 0.10.1 for python 3.7 support (bz 1556279 and 1584458)
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 0.8.1-3
- Rebuilt for Python 3.7
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.8.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1611874 - python-uvloop-0.11.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1611874
--------------------------------------------------------------------------------
================================================================================
python34-3.4.9-2.fc28 (FEDORA-2018-c3a2174314)
Version 3.4 of the Python programming language
--------------------------------------------------------------------------------
Update Information:
Security update to 3.4.9 with fix for [CVE-2018-1060: difflib and poplib
catastrophic backtracking](http://python-security.readthedocs.io/vuln/cve-2018-1
060_difflib_and_poplib_catastrophic_backtracking.html).
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 8 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 3.4.9-2
- Fix bundled pip/setuptools versions
* Sun Aug 5 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 3.4.9-1
- Rebased to 3.4.9
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.4.8-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Tue Apr 24 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 3.4.8-3
- Fix multiprocessing regression on newer glibcs
- Enable test_multiprocessing_fork(server) and _spawn again
Resolves: rhbz#1569933
* Fri Apr 20 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 3.4.8-2
- Do not ship the Tools directory
- Skip test_multiprocessing_fork(server) and _spawn for now
--------------------------------------------------------------------------------
================================================================================
root-6.14.02-1.fc28 (FEDORA-2018-111892e3c1)
Numerical data analysis framework
--------------------------------------------------------------------------------
Update Information:
*
https://root.cern.ch/doc/v614/release-notes.html#release-6.1402 *
https://github.com/root-project/jsroot/releases/tag/5.5.0
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 6 2018 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 6.14.02-1
- Update to 6.14.02
- Make python3 the preferred python for Fedora 29+:
- Give python3 libPyROOT higher priority than python2 libPyROOT
- The python scripts in root-cli use python3-root
- Let root-tmva-python use python3-numpy
- Fix build issue with undefined symbols in libSrvAuth
- Make ROOTConfig-targets.cmake not error on missing files to work better with
subpackages
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.14.00-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Thu Jul 12 2018 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 6.14.00-2
- Add Python 3.6 packages for EPEL 7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1586022 - ROOTConfig-targets.cmake need to be adopted to the actually
installed root packages.
https://bugzilla.redhat.com/show_bug.cgi?id=1586022
--------------------------------------------------------------------------------
================================================================================
rsyslog-8.37.0-1.fc28 (FEDORA-2018-749f2bae28)
Enhanced system logging and kernel message trapping daemon
--------------------------------------------------------------------------------
Update Information:
rebase to 8.37.0 ---------------------- - few fixes and enhancements handling
journal input - now requires librelp at least 1.2.16, adding support for setting
address to bind - various other rsyslog core bugfixes and stability fixes
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 8 2018 Jiri Vymazal <jvymazal(a)redhat.com> - 8.37.0-1
- rebase to upstream version 8.37.0
resolves: rhbz#1612079
resolves: rhbz#1598217
resolves: rhbz#1544139
- dropped needless libee dependency
* Wed Jul 25 2018 Jiri Vymazal <jvymazal(a)redhat.com> - 8.36.0-3
- fixed a typo in commented-out part of default conf + reordered it
resolves: rhbz#1579592
* Tue Jul 24 2018 Jason L Tibbitts III <tibbs(a)math.uh.edu> - 8.36.0-3
- Rebuild for unannounced net-snmp soversion bump.
- Use python3-docutils because rst2man has moved there.
* Mon Jul 23 2018 Jiri Vymazal <jvymazal(a)redhat.com> - 8.36.0-2
- added gcc to buildrequires following f29 system-wide change
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 8.36.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1598217 - rsyslog: Buffer overflow in SanitizeMsg() function in
runtime/parser.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1598217
[ 2 ] Bug #1544139 - rsyslogd: imjournal: open on state file
`/var/lib/rsyslog/imjournal.state' failed [v8.32.0 try
http://www.rsyslog.com/e/2013
]
https://bugzilla.redhat.com/show_bug.cgi?id=1544139
[ 3 ] Bug #1612079 - rsyslog-8.37.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1612079
[ 4 ] Bug #1579592 - SELinux is preventing in:imjournal from using the
'dac_override' capabilities.
https://bugzilla.redhat.com/show_bug.cgi?id=1579592
--------------------------------------------------------------------------------
================================================================================
selinux-policy-3.14.1-39.fc28 (FEDORA-2018-bf58a7faec)
SELinux policy configuration
--------------------------------------------------------------------------------
Update Information:
Adding support for bolt SELinux policy.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 7 2018 Lukas Vrabec <lvrabec(a)redhat.com> - 3.14.1-39
- Rebuild with support for boltd
* Tue Aug 7 2018 Lukas Vrabec <lvrabec(a)redhat.com> - 3.14.1-38
- Allow kprop_t domain to read network state
- Add support boltd policy
- Allow kpropd domain to exec itself
- Allow pdns_t to bind on tcp transproxy port
- Add support for opafm service
- Allow hsqldb_t domain to read cgroup files
- Allow rngd_t domain to read generic certs
- Allow innd_t domain to mmap own var_lib_t files
- Update screen_role_temaplate interface
- Allow chronyd_t domain to mmap own tmpfs files
- Allow chronyd_t domain to mmap own tmpfs files
- Fix typo bug in oracleasm policy module
- Allow systemd to mounont boltd lib dirs
- Allow sysadm_t domain to create rawip sockets
- Allow sysadm_t domain to listen on socket
- Update sudo_role_template() to allow caller domain also setattr generic ptys
--------------------------------------------------------------------------------
================================================================================
singularity-2.6.0-1.1.fc28 (FEDORA-2018-cdbb680f44)
Application and environment virtualization
--------------------------------------------------------------------------------
Update Information:
Update to released upstream 2.6.0. Includes the underlay option (pr #1817),
enables python3 by default (pr #1818), and enables docker:// and shub:// URLs to
work in the singularity-runtime subpackage (pr #1819). ---- Updates to
upstream 2.6.0-rc2, internal version 2.5.999. Disables underlay feature by
default. Adds upstream PR #1324 which makes docker:// and shub:// work with
just singularity-runtime package. Fixes python3 dependencies. ---- Update to
upstream 2.5.99, which is tagged as 2.6.0-rc1. Get python3 patch from PR #1762
instead of custom defined. Move /usr/bin/python3 BuildRequires to singularity-
runtime subpackage. Apply PR #1638, which adds the underlay feature.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 7 2018 Dave Dykstra <dwd(a)fnal.gov> - 2.6.0-1.1
- Update to released upstream 2.6.0
- Rename PR 1638 to 1817
- Rename PR 1762 to 1818
- Note that PR 1324 was also renamed, to 1819
* Tue Jul 24 2018 Dave Dykstra <dwd(a)fnal.gov> - 2.5.999-1.4
- Move the Requires /usr/bin/python3 to be under %package runtime instead
of under its %description.
* Tue Jul 24 2018 Dave Dykstra <dwd(a)fnal.gov> - 2.5.999-1.3
- Move the BuildRequires /usr/bin/python3 back to the primary package,
because otherwise it doesn't get installed at build time. Leave
the Requires on the runtime subpackage.
- Add singularity.abignore to avoid warnings from abipkgdiff.
* Tue Jul 24 2018 Dave Dykstra <dwd(a)fnal.gov> - 2.5.999-1.2
- Add PR #1324 which makes the docker:// and shub:// URLs work with only
the runtime subpackage. All the changes are to this file so it does
not add a patch. Moves python files to the runtime subpackage, so the
BuildRequires & Requires /usr/bin/python3 go back there as well.
- Improve the underlay option comment in singularity.conf as found in
the current version of PR #1638.
* Tue Jul 24 2018 Dave Dykstra <dwd(a)fnal.gov> - 2.5.999-1.1
- Update to upstream 2.5.999, which is tagged as 2.6.0-rc2.
- Disable the underlay feature by default
- Move the BuildRequires: /usr/bin/python3 back to the singularity package
because there is no python in singularity-runtime.
- Add an additional Requires: /usr/bin/python3 for install time.
* Mon Jul 16 2018 Dave Dykstra <dwd(a)fnal.gov> - 2.5.99-1.1
- Update to upstream 2.5.99, which is tagged as 2.6.0-rc1.
- Switch to using internally defined require_python3, which is true unless
%{osg} is defined, to decide whether or not to require python3.
- Get python3 patch from PR #1762 instead of custom defined.
- Move /usr/bin/python3 BuildRequires to singularity-runtime subpackage.
- Apply PR #1638, which adds the underlay feature.
- Only require python3 if macro defined
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1600319 - singularity-2.6.0-rc2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1600319
[ 2 ] Bug #1762 - screen and Gnome-Terminal
https://bugzilla.redhat.com/show_bug.cgi?id=1762
[ 3 ] Bug #1638 - text editors on starbuck rescue disks don't work
https://bugzilla.redhat.com/show_bug.cgi?id=1638
--------------------------------------------------------------------------------
================================================================================
spectre-meltdown-checker-0.38-1.fc28 (FEDORA-2018-8d6257325b)
Spectre & Meltdown vulnerability/mitigation checker for Linux
--------------------------------------------------------------------------------
Update Information:
* Feature: support detection for Variant 3a (CVE-2018-3640) and Variant 4
(CVE-2018-3639) * Feature: add Spectre v1 mitigation detection for ARM 32 bits *
Feature: add Cavium CPU support and correct vulnerability information * Feature:
add guess for kernel image location on Raspberry Pi 3 * Feature: ability to run
the script inside a Docker container * Change: omit explanations by default to
avoid cluttering the output, use `--explain` to get detailed mitigation help *
Enhancement: explain mode: suggest to set VM CPU to an IBRS-capable one for
hypervisors * Enhancement: avoid use of `iflag=skip_bytes` for compat with old
`dd` versions * Fix: no longer unload msr or cpuid modules on exit if they were
loaded before we started * Fix: when we can't determine if IBRS is enabled or
not, report it as NO instead of UNKNOWN when we know that the CPU can't support
it * Fix: variant2: detection now works under SLES kernels * Fix: ARM: update
vulnerability info to latest vendor statement * Fix: ARM: ARMv8 models under
Cortex A57 correctly marked as non-vulnerable (also fixes Raspberry Pi 3) * Fix:
prometheus output wouldn't format `\n` correctly under some systems
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 7 2018 Reto Gantenbein <reto.gantenbein(a)linuxmonk.ch> - 0.38-1
- Update to 0.38
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.37-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
usermode-1.112-3.fc28 (FEDORA-2018-aa6e0cb869)
Tools for certain user account management tasks
--------------------------------------------------------------------------------
Update Information:
Rebuild with pregenerated autotools files. Also corrected bad FSF address and
fixed issue with missing `#include <sys/sysmacros.h>`.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 7 2018 Jiri Kucera <jkucera(a)redhat.com> - 1.112-3
- Dropped need to run autotools
- <sys/sysmacros.h> must be now included manually
Resolves #1606624
- Fixed bad FSF address
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.112-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
xtl-0.4.13-1.fc28 (FEDORA-2018-22ede71799)
QuantStack tools library
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 7 2018 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.4.13-1
- Update to latest version
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4.7-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1613616 - xtl-0.4.13 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1613616
--------------------------------------------------------------------------------