The following Fedora 28 Security updates need testing:
Age URL
305
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d510cfd7eb
jgraphx-3.6.0.0-6.fc28
254
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d7aeaa74da
nodejs-brace-expansion-1.1.11-1.fc28
253
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc073fdc1a
nodejs-atob-2.1.1-1.fc28
129
https://bodhi.fedoraproject.org/updates/FEDORA-2018-cc4b7af297
xerces-c27-2.7.0-28.fc28
81
https://bodhi.fedoraproject.org/updates/FEDORA-2018-997a9e3e1f xen-4.10.2-4.fc28
81
https://bodhi.fedoraproject.org/updates/FEDORA-2018-aa3752ac3c
nginx-1.14.1-1.fc28
60
https://bodhi.fedoraproject.org/updates/FEDORA-2018-cc86ef9e22 squid-4.4-1.fc28
57
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b18f9dd65b
tomcat-8.5.35-1.fc28
29
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e0eb3d797e
systemd-238-11.gita76ee90.fc28
14
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6cf96757fe
golang-1.10.8-1.fc28
14
https://bodhi.fedoraproject.org/updates/FEDORA-2019-333a7aa511 radvd-2.17-12.fc28
11
https://bodhi.fedoraproject.org/updates/FEDORA-2019-5146cd34e2
rdesktop-1.8.4-2.fc28
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-7696bb57ca
pdns-recursor-4.1.9-1.fc28
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ef5551fcff
perl-Email-Address-List-0.06-1.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-a8f918005c
mingw-libconfuse-3.2.2-1.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-afade40f3d
spice-0.14.0-5.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e1cf31e58f
thunderbird-60.5.0-4.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3f9a71578d
java-1.8.0-openjdk-1.8.0.201.b09-2.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-82acb29c1b
ghostscript-9.26-1.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-710afd062a
gsi-openssh-7.8p1-3.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-a16e1127d3
python-markdown2-2.3.7-1.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8cbe2a05cd
mosquitto-1.5.6-1.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-75ee9101ea
netmask-2.4.4-1.fc28
The following Fedora 28 Critical Path updates have yet to be approved:
Age URL
81
https://bodhi.fedoraproject.org/updates/FEDORA-2018-997a9e3e1f xen-4.10.2-4.fc28
60
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9f541b469b
nfs-utils-2.3.3-1.rc2.fc28
51
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4dddcb3e5e
highlight-3.48-1.fc28
29
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e0eb3d797e
systemd-238-11.gita76ee90.fc28
24
https://bodhi.fedoraproject.org/updates/FEDORA-2019-78153d357c
totem-pl-parser-3.26.2-1.fc28
20
https://bodhi.fedoraproject.org/updates/FEDORA-2019-870e8d8234
osinfo-db-20190120-1.fc28
17
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e9c4843d39
volume_key-0.3.12-2.fc28
16
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8a8196e1e1 vim-8.1.818-1.fc28
16
https://bodhi.fedoraproject.org/updates/FEDORA-2019-bb30467485
ostree-2019.1-2.fc28 rpm-ostree-2019.1-1.fc28
14
https://bodhi.fedoraproject.org/updates/FEDORA-2019-333a7aa511 radvd-2.17-12.fc28
11
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8d89d06043
ibus-1.5.19-10.fc28
10
https://bodhi.fedoraproject.org/updates/FEDORA-2019-2735cb18d8 lorax-28.26-1.fc28
8
https://bodhi.fedoraproject.org/updates/FEDORA-2019-cb4a3023ef
iproute-4.20.0-1.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-67c405c3d8
hwdata-0.320-1.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-856b9ada37
selinux-policy-3.14.1-53.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4ab744e2bc
firefox-65.0-4.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-afade40f3d
spice-0.14.0-5.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-f6fcc53d28
libidn2-2.1.1a-1.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-fc6067f2cc
kernel-headers-4.20.7-100.fc28 kernel-4.20.7-100.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-0f43c35bfc samba-4.8.9-0.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e5db0dc40c
nss-pem-1.0.5-1.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b9a64e04c4
polkit-0.115-2.2.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e1cf31e58f
thunderbird-60.5.0-4.fc28
The following builds have been pushed to Fedora 28 updates-testing
R-Rmpfr-0.7.2-1.fc28
babl-0.1.62-1.fc28
gnome-online-accounts-3.28.2-1.fc28
golang-github-burntsushi-locker-0-0.1.20190210gita6e239e.fc28
golang-github-mitchellh-hashstructure-1.0.0-1.fc28
jglobus-2.1.0-13.fc28
kf5-kauth-5.54.0-2.fc28
libaec-1.0.3-3.fc28
mellowplayer-3.5.2-1.20190210git54a1714.fc28
safekeep-1.4.5-1.fc28
Details about builds:
================================================================================
R-Rmpfr-0.7.2-1.fc28 (FEDORA-2019-e96180ef14)
R MPFR - Multiple Precision Floating-Point Reliable
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sat Feb 9 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.7.2-1
- Update to latest version
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.7.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1668517 - R-Rmpfr-0.7-2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1668517
--------------------------------------------------------------------------------
================================================================================
babl-0.1.62-1.fc28 (FEDORA-2019-89d4b88438)
A dynamic, any to any, pixel format conversion library
--------------------------------------------------------------------------------
Update Information:
Update to 0.1.62
--------------------------------------------------------------------------------
ChangeLog:
* Sat Feb 9 2019 Debarshi Ray <rishi(a)fedoraproject.org> - 0.1.62-1
- version 0.1.62
--------------------------------------------------------------------------------
================================================================================
gnome-online-accounts-3.28.2-1.fc28 (FEDORA-2019-df5f3b0bb2)
Single sign-on framework for GNOME
--------------------------------------------------------------------------------
Update Information:
google: Only request the email field when getting the user's identity:
https://gitlab.gnome.org/GNOME/gnome-online-accounts/merge_requests/19
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 10 2019 Debarshi Ray <rishi(a)fedoraproject.org> - 3.28.2-1
- Update to 3.28.2
--------------------------------------------------------------------------------
================================================================================
golang-github-burntsushi-locker-0-0.1.20190210gita6e239e.fc28 (FEDORA-2019-e489cb266b)
Simple package for conveniently using named read/write locks
--------------------------------------------------------------------------------
Update Information:
Initial package of
github.com/burntsushi/locker for Go
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1666221 - Review Request: golang-github-burntsushi-locker - Simple package
for conveniently using named read/write locks
https://bugzilla.redhat.com/show_bug.cgi?id=1666221
--------------------------------------------------------------------------------
================================================================================
golang-github-mitchellh-hashstructure-1.0.0-1.fc28 (FEDORA-2019-9c45b00d6c)
Get hash values for arbitrary values in Go
--------------------------------------------------------------------------------
Update Information:
Initial package of
github.com/mitchellh/hashstructure for Go
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1666285 - Review Request: golang-github-mitchellh-hashstructure - Get hash
values for arbitrary values in Go
https://bugzilla.redhat.com/show_bug.cgi?id=1666285
--------------------------------------------------------------------------------
================================================================================
jglobus-2.1.0-13.fc28 (FEDORA-2019-70e5b3a70e)
Globus Java client libraries
--------------------------------------------------------------------------------
Update Information:
Disallow TLS 1.1.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 10 2019 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 2.1.0-13
- Only allow TLSv1 and TLSv1.2 (not TLSv1.1)
- Remove unused FORCE_SSLV3_AND_CONSTRAIN_CIPHERSUITES_FOR_GRAM
- Adapt to changes in bouncycastle 1.61
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.1.0-12
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
kf5-kauth-5.54.0-2.fc28 (FEDORA-2019-8e683d3810)
KDE Frameworks 5 Tier 2 integration module to perform actions as privileged user
--------------------------------------------------------------------------------
Update Information:
Backport security fix for CVE-2019-7443
--------------------------------------------------------------------------------
ChangeLog:
* Sat Feb 9 2019 Rex Dieter <rdieter(a)fedoraproject.org> - 5.54.0-2
- (branch) Remove support for passing gui QVariants to KAuth helpers
--------------------------------------------------------------------------------
================================================================================
libaec-1.0.3-3.fc28 (FEDORA-2019-62ae308c43)
Adaptive Entropy Coding library
--------------------------------------------------------------------------------
Update Information:
Version bump to 1.0.3
--------------------------------------------------------------------------------
ChangeLog:
* Sat Feb 9 2019 Christoph Junghans <junghans(a)votca.org> - 1.0.3-3
- Include missing header
* Tue Feb 5 2019 Christoph Junghans <junghans(a)votca.org> - 1.0.3-2
- Enable all tests
* Mon Feb 4 2019 Christoph Junghans <junghans(a)votca.org> - 1.0.3-1
- Version bump to 1.0.3 (bug #1672326)
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.2-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.2-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1672326 - libaec-1.0.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1672326
--------------------------------------------------------------------------------
================================================================================
mellowplayer-3.5.2-1.20190210git54a1714.fc28 (FEDORA-2019-933cd9013d)
Cloud music integration for your desktop
--------------------------------------------------------------------------------
Update Information:
Update to mellowplayer-3.5.2-1.20190210git54a1714 ---- - Update to
3.5.1-1.20190206git402e336 - Add patch for F30 %%{name}-suppress-compiler-
warnings.patch
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 10 2019 Martin Gansser <martinkg(a)fedoraproject.org> -
3.5.2-1.20190206git54a1714
- Update to 3.5.2-1.20190206git54a1714
* Thu Feb 7 2019 Martin Gansser <martinkg(a)fedoraproject.org> -
3.5.1-1.20190206git402e336
- Update to 3.5.1-1.20190206git402e336
- Add patch for F30 %{name}-suppress-compiler-warnings.patch
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> -
3.5.0-2.20181227git40ef9dd
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
safekeep-1.4.5-1.fc28 (FEDORA-2019-b709cb7cba)
The SafeKeep backup system
--------------------------------------------------------------------------------
Update Information:
Latest upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 10 2019 Frank Crawford <frank(a)crawford.emu.id.au> 1.4.5-1
- Latest upstream release
* Fri Feb 8 2019 Frank Crawford <frank(a)crawford.emu.id.au> - 1.4.4-8
- Correct FTBS error due to default in F30 as python3, replace with python2
* Sat Feb 2 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.4-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.4-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------