The following Fedora 28 Security updates need testing:
Age URL
14
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bfdad62cd6
wireshark-2.4.5-3.fc28
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d305559481
mosquitto-1.4.15-1.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bb66329dee
sqlite-3.22.0-4.fc28
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1c9f6768cf
exempi-2.4.5-1.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1aeac808ce gd-2.2.5-3.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-633acf0ed6
jackson-databind-2.9.4-3.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-60ec960104
bchunk-1.2.2-1.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b13b720a3d php-7.2.4-1.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-aa5e668e64
thunderbird-52.7.0-1.fc28
The following Fedora 28 Critical Path updates have yet to be approved:
Age URL
14
https://bodhi.fedoraproject.org/updates/FEDORA-2018-654231f9e7
libtirpc-1.0.3-0.fc28
12
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3c10274df1 pcre2-10.31-4.fc28
12
https://bodhi.fedoraproject.org/updates/FEDORA-2018-809e84f764
nghttp2-1.31.0-2.fc28
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-83ed6f8a9a pcre-8.42-1.fc28
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6019d0a8f0
xfce4-settings-4.12.3-1.fc28
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-64a05f528d
hivex-1.3.15-3.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-42200bfff3
python-setuptools-39.0.1-1.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-0c1670b318
realmd-0.16.3-12.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-74acab54cf qemu-2.11.1-2.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-00c5193ae8
libpwquality-1.4.0-7.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-eb196768cd avahi-0.7-10.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bb66329dee
sqlite-3.22.0-4.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a6438f9430
gst-editing-services-1.14.0-1.fc28 gstreamer1-vaapi-1.14.0-1.fc28
python-gstreamer1-1.14.0-1.fc28 gstreamer1-rtsp-server-1.14.0-1.fc28
gstreamer1-plugins-ugly-free-1.14.0-1.fc28 gstreamer1-plugins-bad-free-1.14.0-1.fc28
gstreamer1-plugins-good-1.14.0-1.fc28 gstreamer1-plugins-base-1.14.0-1.fc28
gstreamer1-1.14.0-1.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-116b986d6b gdm-3.28.0-6.fc28
pulseaudio-11.1-18.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-998509b780
python-asn1crypto-0.24.0-1.fc28 python-cryptography-vectors-2.2.1-1.fc28
python-cryptography-2.2.1-1.fc28
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1c9f6768cf
exempi-2.4.5-1.fc28
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-370f1fc201
libX11-1.6.5-7.fc28
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5a4d0ee124
dnsmasq-2.79-1.fc28
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2ee87d2721
python-pid-2.1.1-7.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ea9ace8675
libiscsi-1.18.0-3.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a95a4a8d8e
osinfo-db-20180325-1.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-782412cd18
sgabios-0.20170427git-1.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-543efe8260
SLOF-0.1.git20171214-2.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c3c9b95a7b
readline-7.0-9.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-02e145266f gdbm-1.14.1-4.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-08531132c6
checkpolicy-2.7-7.fc28 libselinux-2.7-13.fc28 libsemanage-2.7-12.fc28 libsepol-2.7-6.fc28
policycoreutils-2.7-17.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a2dead92f8
appstream-data-28-6.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-247afd0f8c krb5-1.16-17.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-93c3715e80
openldap-2.4.46-1.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b709c38412 ppp-2.4.7-18.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-efe2f471f2 satyr-0.25-4.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-09a48963ea
bcache-tools-1.0.8-12.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a2b3791b2b abrt-2.10.8-2.fc28
bluez-5.49-2.fc28 cryptsetup-2.0.2-2.fc28 device-mapper-multipath-0.7.4-2.git07e7bd5.fc28
fastd-18-9.fc28 filezilla-3.32.0-0.rc1.fc28.1 freeradius-3.0.15-12.fc28
fwts-18.01.00-2.fc28 gdal-2.2.4-2.fc28 gdcm-2.8.4-5.fc28 gfal2-2.15.3-2.fc28
girara-0.2.7-7.fc28 gluster-block-0.3-5.fc28 json-c-0.13.1-1.fc28 lcgdm-dav-0.20.0-2.fc28
libmypaint-1.3.0-7.fc28 libreport-2.9.3-8.fc28 libstorj-1.0.2-5.fc28
libu2f-host-1.1.4-3.fc28 libu2f-server-1.0.1-12.fc28 libverto-jsonrpc-0.1.0-19.fc28
libvmi-0.11.0-13.20170706gite919365.fc28 mypaint-1.2.1-18.fc28 ndctl-59.2-2.fc28
newsbeuter-2.9-9.fc28 openhpi-3.7.0-5.fc28 opensips-2.3.3-3.fc28 postgis-2.4.3-3.fc28
riemann-c-client-1.9.0-10.fc28 strongswan-5.6.2-2.fc28 sway-0.15.1-3.fc28
syslog-ng-3.14.1-4.fc28 systemtap-3.2-8.fc28 tlog-4-3.fc28 zmap-2.1.1-7.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-318a38494a
util-linux-2.32-2.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-24505f7c35
gcc-8.0.1-0.20.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-051bee7533
mesa-18.0.0-0.5.rc5.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bbffdeb641
kernel-4.16.0-0.rc7.git0.1.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2c1484e4cd audit-2.8.3-2.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-109321c535
tcp_wrappers-7.6-91.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-aa5e668e64
thunderbird-52.7.0-1.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-87d72fc01e
vte291-0.51.3-1.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1f0ce82941
libreport-2.9.4-1.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8d801e7eb7
libsolv-0.6.34-1.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7f1047b24e
pygobject3-3.28.2-1.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8082209c08 systemd-238-7.fc28
The following builds have been pushed to Fedora 28 updates-testing
NetworkManager-pptp-1.2.6-1.fc28
R-3.4.4-1.fc28
R-Rmpfr-0.7.0-1.fc28
R-corpus-0.10.0-1.fc28
R-getPass-0.2.2-1.fc28
aime-8.20180223-1.fc28
ansible-2.5.0-2.fc28
babl-0.1.44-1.fc28
cmake-3.11.0-1.fc28
drupal7-7.58-1.fc28
drupal8-8.4.6-1.fc28
enca-1.19-1.fc28
fail2ban-0.10.2-1.fc28
firefox-pkcs11-loader-3.13.0-7.fc28
gegl03-0.3.30-1.fc28
git-2.17.0-0.2.rc2.fc28
greybird-3.22.8-1.fc28
kf5-kactivities-stats-5.44.0-2.fc28
kid3-3.6.0-1.fc28
mame-0.196-1.fc28
memcached-1.5.7-1.fc28
nodejs-8.11.0-1.fc28
nodejs-got-6.7.1-8.fc28
nut-2.7.4-14.fc28
openhpi-subagent-2.3.4-34.fc28
openmeeg-2.4-0.1.20180323gitee565c4.fc28
paintown-3.6.1-0.1.20180113git8a71ac8.fc28
pcp-4.0.1-1.fc28
perl-Config-Model-Tester-3.004-1.fc28
perl-DBD-SQLite-1.58-1.fc28
perl-HTTP-Message-6.16-1.fc28
perl-Perl-Tidy-Sweetened-1.14-1.fc28
publicsuffix-list-20180328-1.fc28
pypy-5.10.0-1.fc28
python-QtPy-1.4.0-1.fc28
qbs-1.11.0-1.fc28
qt-creator-4.6.0-1.fc28
qutebrowser-1.2.1-1.fc28
rkward-0.6.5-14.fc28
rpy-2.9.2-1.fc28
rusers-0.17-90.fc28
spyder-3.2.8-1.fc28
starcal-3.0.7-1.fc28
tzdata-2018d-1.fc28
webextension-token-signing-1.0.6-5.fc28
xfce4-screenshooter-1.9.1-1.fc28
xfce4-terminal-0.8.7.3-2.fc28
xterm-331-1.fc28
Details about builds:
================================================================================
NetworkManager-pptp-1.2.6-1.fc28 (FEDORA-2018-3ddd53ddbc)
NetworkManager VPN plugin for PPTP
--------------------------------------------------------------------------------
Update Information:
Update to 1.2.6 release * Fix passing "user" and set "remotename"
(bgo#794695)
* Updated Brazilian Portuguese, Croatian, Czech, Danish, Dutch, Friulian,
German, Hungarian, Indonesian, Italian, Latvian, Lithuanian, Polish, Russian,
Serbian, Spanish, Swedish translations * Use gresources for UI file * Update
build to use non-recursive make * Various cleanups Also fix build for missing
libnm-glib/libnm-util/libnm-gtk on Fedora 28
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1546583 - Plugin doesn't pass "user" and "remotename"
options to pppd
https://bugzilla.redhat.com/show_bug.cgi?id=1546583
--------------------------------------------------------------------------------
================================================================================
R-3.4.4-1.fc28 (FEDORA-2018-28f9b3f03a)
A language for data analysis and graphics
--------------------------------------------------------------------------------
Update Information:
Update R to 3.4.4. Update rpy to 2.9.2 on F28+. Rebuild rkward to match.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1556327 - rpy: FTBFS in F28
https://bugzilla.redhat.com/show_bug.cgi?id=1556327
[ 2 ] Bug #1483231 - rpy-2.9.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1483231
[ 3 ] Bug #1557076 - R-3.4.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1557076
--------------------------------------------------------------------------------
================================================================================
R-Rmpfr-0.7.0-1.fc28 (FEDORA-2018-400ee70e6d)
R MPFR - Multiple Precision Floating-Point Reliable
--------------------------------------------------------------------------------
Update Information:
Initial package of Rmpfr for R
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1561356 - Review Request: R-Rmpfr - R MPFR - Multiple Precision
Floating-Point Reliable
https://bugzilla.redhat.com/show_bug.cgi?id=1561356
--------------------------------------------------------------------------------
================================================================================
R-corpus-0.10.0-1.fc28 (FEDORA-2018-f06e12efb5)
Text Corpus Analysis
--------------------------------------------------------------------------------
Update Information:
Initial package of corpus for R
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1561334 - Review Request: R-corpus - Text Corpus Analysis
https://bugzilla.redhat.com/show_bug.cgi?id=1561334
--------------------------------------------------------------------------------
================================================================================
R-getPass-0.2.2-1.fc28 (FEDORA-2018-87891c2d4c)
Masked User Input
--------------------------------------------------------------------------------
Update Information:
Initial package of getPass for R
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1561306 - Review Request: R-getPass - Masked User Input
https://bugzilla.redhat.com/show_bug.cgi?id=1561306
--------------------------------------------------------------------------------
================================================================================
aime-8.20180223-1.fc28 (FEDORA-2018-a7e88f58f2)
An application embeddable programming language interpreter
--------------------------------------------------------------------------------
Update Information:
- Updated to new 8.20180223 upstream version, fixes rhbz #1548775
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1548775 - aime-8.20180223 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1548775
--------------------------------------------------------------------------------
================================================================================
ansible-2.5.0-2.fc28 (FEDORA-2018-b0a6ea3967)
SSH-based configuration management, deployment, and task execution system
--------------------------------------------------------------------------------
Update Information:
Update to 2.5.0. See
https://github.com/ansible/ansible/blob/stable-2.5/changelogs/CHANGELOG-v...
for full list of changes. Also a lot of re-working of spec file and full html
docs generated on Fedora releases.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1559852 - ansible-2.5.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1559852
--------------------------------------------------------------------------------
================================================================================
babl-0.1.44-1.fc28 (FEDORA-2018-6ee53206d8)
A dynamic, any to any, pixel format conversion library
--------------------------------------------------------------------------------
Update Information:
Upstream bugfix and enhancement releases. For details, see the respective
upstream changelogs:
[
gegl](https://git.gnome.org/browse/gegl/plain/docs/NEWS.txt?h=GEGL_0_3_30),
[
babl](https://git.gnome.org/browse/babl/plain/NEWS?h=BABL_0_1_44)
--------------------------------------------------------------------------------
================================================================================
cmake-3.11.0-1.fc28 (FEDORA-2018-e899ee34bf)
Cross-platform make system
--------------------------------------------------------------------------------
Update Information:
- New upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1551147 - cmake -E cmake_autogen crashing (probably due to build with GCC 8)
https://bugzilla.redhat.com/show_bug.cgi?id=1551147
[ 2 ] Bug #1536233 - cmake-3.11.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1536233
--------------------------------------------------------------------------------
================================================================================
drupal7-7.58-1.fc28 (FEDORA-2018-75bca4c5a0)
An open-source content-management platform
--------------------------------------------------------------------------------
Update Information:
-
https://www.drupal.org/SA-CORE-2018-002 -
https://www.drupal.org/SA-
CORE-2018-001
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1548190 - drupal7: drupal: JavaScript cross-site scripting in checkPlain
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1548190
[ 2 ] Bug #1547793 - drupal7-7.57 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1547793
[ 3 ] Bug #1548324 - CVE-2017-6926 CVE-2017-6927 CVE-2017-6928 CVE-2017-6929
CVE-2017-6930 CVE-2017-6931 CVE-2017-6932 drupal7: drupal: Multiple vulnerabilities fixed
in 7.57 and 8.4.5 (SA-CORE-2018-001) [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1548324
[ 4 ] Bug #1548201 - drupal7: drupal: External link injection on 404 pages when linking
to the current page [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1548201
[ 5 ] Bug #1548197 - drupal7: drupal: jQuery vulnerability with untrusted domains
requests via Ajax [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1548197
[ 6 ] Bug #1548195 - drupal7: drupal: Private file access bypass in Drupal private file
system [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1548195
[ 7 ] Bug #1561801 - drupal7-7.58 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1561801
--------------------------------------------------------------------------------
================================================================================
drupal8-8.4.6-1.fc28 (FEDORA-2018-906ba26b4d)
An open source content management platform
--------------------------------------------------------------------------------
Update Information:
* [
8.4.6](https://www.drupal.org/project/drupal/releases/8.4.6) * [SA-
CORE-2018-002 (
CVE-2018-7600)](https://www.drupal.org/SA-CORE-2018-002) *
[
8.4.5](https://www.drupal.org/project/drupal/releases/8.4.5) * [SA-
CORE-2018-001 (CVE-2017-6926 / CVE-2017-6927 / CVE-2017-6930 /
CVE-2017-6931)](https://www.drupal.org/SA-CORE-2018-001) *
[
8.4.4](https://www.drupal.org/project/drupal/releases/8.4.4) *
[
8.4.3](https://www.drupal.org/project/drupal/releases/8.4.3) *
[
8.4.2](https://www.drupal.org/project/drupal/releases/8.4.2) *
[
8.4.1](https://www.drupal.org/project/drupal/releases/8.4.1) *
[
8.4.0](https://www.drupal.org/project/drupal/releases/8.4.0) *
[
8.4.0-rc2](https://www.drupal.org/project/drupal/releases/8.4.0-rc2) *
[
8.4.0-rc1](https://www.drupal.org/project/drupal/releases/8.4.0-rc1) *
[
8.4.0-beta1](https://www.drupal.org/project/drupal/releases/8.4.0-beta1) *
[
8.4.0-alpha1](https://www.drupal.org/project/drupal/releases/8.4.0-alpha1)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1561855 - CVE-2018-7600 drupal8: drupal: Unsanitized requests allow remote
attackers to execute arbitrary code [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1561855
[ 2 ] Bug #1548325 - CVE-2017-6926 CVE-2017-6927 CVE-2017-6928 CVE-2017-6929
CVE-2017-6930 CVE-2017-6931 CVE-2017-6932 drupal8: drupal: Multiple vulnerabilities fixed
in 7.57 and 8.4.5 (SA-CORE-2018-001) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1548325
[ 3 ] Bug #1548192 - drupal8: drupal: JavaScript cross-site scripting in checkPlain
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1548192
[ 4 ] Bug #1548188 - drupal8: drupal: Comment reply form allows access to restricted
content [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1548188
--------------------------------------------------------------------------------
================================================================================
enca-1.19-1.fc28 (FEDORA-2018-1668d86ea9)
Character set analyzer and detector
--------------------------------------------------------------------------------
Update Information:
Update to 1.19
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1561718 - update 1.19
https://bugzilla.redhat.com/show_bug.cgi?id=1561718
--------------------------------------------------------------------------------
================================================================================
fail2ban-0.10.2-1.fc28 (FEDORA-2018-5eaf74dad4)
Daemon to ban hosts that cause multiple authentication errors
--------------------------------------------------------------------------------
Update Information:
Update to 0.10.2 ---------------------- ### Fixes * Fixed logging to systemd-
journal: new logtarget value SYSOUT can be used instead of STDOUT, to avoid
write of the time-stamp, if logging to systemd-journal from foreground mode
(gh-1876) * Fixed recognition of the new date-format on mysqld-auth filter
(gh-1639) * jail.conf: port `imap3` replaced with `imap` everywhere, since imap3
is not a standard port and old rarely (if ever) used and can missing on some
systems (e. g. debian stretch), see gh-1942. * config/paths-common.conf: added
missing initial values (and small normalization in config/paths-*.conf) in
order to avoid errors while interpolating (e. g. starting with systemd-backend),
see gh-1955. * `action.d/firewallcmd-ipset.conf`: fixed create of set for ipv6
(missing `family inet6`, gh-1990) * `filter.d/sshd.conf`: - extended failregex
for modes "extra"/"aggressive": now finds all possible (also future)
forms
of "no matching (cipher|mac|MAC|compression method|key exchange method|host key
type) found", see "ssherr.c" for all possible SSH_ERR_..._ALG_MATCH
errors
(gh-1943, gh-1944); - fixed failregex in order to avoid banning of legitimate
users with multiple public keys (gh-2014, gh-1263); ### New Features *
datedetector: extended default date-patterns (allows extra space between the
date and time stamps); introduces 2 new format directives (with corresponding
%Ex prefix for more precise parsing): - %k - one- or two-digit number giving
the hour of the day (0-23) on a 24-hour clock, (corresponds %H, but allows
space if not zero-padded). - %l - one- or two-digit number giving the hour of
the day (12-11) on a 12-hour clock, (corresponds %I, but allows space if not
zero-padded). * `filter.d/exim.conf`: added mode `aggressive` to ban flood resp.
DDOS-similar failures (gh-1983); * New Actions: - `action.d/nginx-block-
map.conf` - in order to ban not IP-related tickets via nginx (session
blacklisting in nginx-location with map-file); ### Enhancements *
jail.conf: extended with new parameter `mode` for the filters supporting it
(gh-1988); * Introduced new parameters for logging within fail2ban-server
(gh-1980). Usage `logtarget = target[facility=..., datetime=on|off,
format="..."]`: - `facility` - specify syslog facility (default `daemon`, see
https://docs.python.org/2/library/logging.handlers.html#sysloghandler for
the list of facilities); - `datetime` - add date-time to the message (default
on, ignored if `format` specified); - `format` - specify own format how it
will be logged, for example for short-log into STDOUT: `fail2ban-server -f
--logtarget 'stdout[format="%(relativeCreated)5d | %(message)s"]'
start`; *
Automatically recover or recreate corrupt persistent database (e. g. if failed
to open with 'database disk image is malformed'). Fail2ban will create a
backup, try to repair the database, if repair fails - recreate new database
(gh-1465, gh-2004).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1533760 - fail2ban fails to create ipset rules
https://bugzilla.redhat.com/show_bug.cgi?id=1533760
--------------------------------------------------------------------------------
================================================================================
firefox-pkcs11-loader-3.13.0-7.fc28 (FEDORA-2018-6a87a52873)
Helper script for Firefox that sets up the browser for authentication with Estonian
ID-card
--------------------------------------------------------------------------------
Update Information:
removed Requires: esteidcerts
--------------------------------------------------------------------------------
================================================================================
gegl03-0.3.30-1.fc28 (FEDORA-2018-6ee53206d8)
Graph based image processing framework
--------------------------------------------------------------------------------
Update Information:
Upstream bugfix and enhancement releases. For details, see the respective
upstream changelogs:
[
gegl](https://git.gnome.org/browse/gegl/plain/docs/NEWS.txt?h=GEGL_0_3_30),
[
babl](https://git.gnome.org/browse/babl/plain/NEWS?h=BABL_0_1_44)
--------------------------------------------------------------------------------
================================================================================
git-2.17.0-0.2.rc2.fc28 (FEDORA-2018-be5660a0d9)
Fast Version Control System
--------------------------------------------------------------------------------
Update Information:
Bugfix and feature release. Upstream release notes:
https://www.kernel.org/pub/software/scm/git/docs/RelNotes/2.17.0.txt
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1561086 - BUG: The 'Mail::Address' module is not here, but
NO_PERL_CPAN_FALLBACKS was set
https://bugzilla.redhat.com/show_bug.cgi?id=1561086
[ 2 ] Bug #1550251 - diff-highlight needs building as part of the git package build
https://bugzilla.redhat.com/show_bug.cgi?id=1550251
--------------------------------------------------------------------------------
================================================================================
greybird-3.22.8-1.fc28 (FEDORA-2018-b92eee0156)
A clean minimalistic theme for Xfce, GTK+ 2 and 3
--------------------------------------------------------------------------------
Update Information:
bugfix update to version 3.22.8
--------------------------------------------------------------------------------
================================================================================
kf5-kactivities-stats-5.44.0-2.fc28 (FEDORA-2018-eb8dce782a)
A KDE Frameworks 5 Tier 3 library for accessing the usage data collected by the
activities system
--------------------------------------------------------------------------------
Update Information:
Avoid plasmashell crashes when kactivities daemon fails to start properly.
--------------------------------------------------------------------------------
================================================================================
kid3-3.6.0-1.fc28 (FEDORA-2018-9bda432829)
Efficient KDE ID3 tag editor
--------------------------------------------------------------------------------
Update Information:
New upstream release mainly with bugfixes and small new features
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1557984 - kid3-3.6.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1557984
--------------------------------------------------------------------------------
================================================================================
mame-0.196-1.fc28 (FEDORA-2018-2591e2129e)
Multiple Arcade Machine Emulator
--------------------------------------------------------------------------------
Update Information:
An update to the latest mame release: *
http://mamedev.org/?p=455
--------------------------------------------------------------------------------
================================================================================
memcached-1.5.7-1.fc28 (FEDORA-2018-0ffdf1a234)
High Performance, Distributed Memory Object Cache
--------------------------------------------------------------------------------
Update Information:
Update to the latest upstream release, which fixes a number of bugs.
--------------------------------------------------------------------------------
================================================================================
nodejs-8.11.0-1.fc28 (FEDORA-2018-8049b2c488)
JavaScript runtime
--------------------------------------------------------------------------------
Update Information:
https://nodejs.org/en/blog/release/v8.11.0/
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1562027 - CVE-2018-7158 CVE-2018-7159 CVE-2018-7160 nodejs: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1562027
--------------------------------------------------------------------------------
================================================================================
nodejs-got-6.7.1-8.fc28 (FEDORA-2018-87a78c90a0)
Simplified HTTP/HTTPS requests
--------------------------------------------------------------------------------
Update Information:
Use npm(decompress-response) instead of npm(unzip-response)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1556594 - nodejs-got: FTBFS in F28
https://bugzilla.redhat.com/show_bug.cgi?id=1556594
--------------------------------------------------------------------------------
================================================================================
nut-2.7.4-14.fc28 (FEDORA-2018-3d57f95deb)
Network UPS Tools
--------------------------------------------------------------------------------
Update Information:
- Rebuild for F28 without tcp_wrappers support
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1561903 - [F28 change] nut should not require tcp_wrappers
https://bugzilla.redhat.com/show_bug.cgi?id=1561903
--------------------------------------------------------------------------------
================================================================================
openhpi-subagent-2.3.4-34.fc28 (FEDORA-2018-62792d21de)
NetSNMP subagent for OpenHPI
--------------------------------------------------------------------------------
Update Information:
- Rebuild for F28 to remove tcpwrapper support
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1495181 - Deprecate TCP wrappers
https://bugzilla.redhat.com/show_bug.cgi?id=1495181
--------------------------------------------------------------------------------
================================================================================
openmeeg-2.4-0.1.20180323gitee565c4.fc28 (FEDORA-2018-0c1f2393c4)
Low-frequency bio-electromagnetism solving forward problems in the field of EEG and MEG
--------------------------------------------------------------------------------
Update Information:
- New package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1560495 - Review Request: openmeeg - Low-frequency bio-electromagnetism
solving forward problems in the field of EEG and MEG
https://bugzilla.redhat.com/show_bug.cgi?id=1560495
--------------------------------------------------------------------------------
================================================================================
paintown-3.6.1-0.1.20180113git8a71ac8.fc28 (FEDORA-2018-8ffde52097)
2D fighting game
--------------------------------------------------------------------------------
Update Information:
- New package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1560273 - Review Request: paintown - 2D fighting game
https://bugzilla.redhat.com/show_bug.cgi?id=1560273
--------------------------------------------------------------------------------
================================================================================
pcp-4.0.1-1.fc28 (FEDORA-2018-67ae01df6c)
System-level performance monitoring and performance management
--------------------------------------------------------------------------------
Update Information:
Enhancement and bugfix update. Major changes include a revamp of the archive log
management, more frequent compression by default and updates to related
utilities. Addition of a cron driven daily report to the pcp-zeroconf package
(like sa2(1)), and dependencies to also install the pcp-doc package (for man
pages) and pcp-system-tools package which includes pmrep(1) and other monitoring
utilities. Many pmrep(1) bug fixes and new configuration entries. Updates to the
prometheus PMDA for control metrics, scalability improvements, support for URL
config request headers and response filtering. The postgreSQL PMDA now supports
up to version 9.6, will reconnect automatically if the DB connection is lost,
and other improvements. Updates to many other PMDAs, including the new BCC PMDA.
SELinux updates for a variety of AVC denials, and new SELinux rules for
pmdagluster and numad_t. Many new bug fixes and enhancements to libpcp and
libpcp_pmda including service discovery API extensions. Performance improvments
to pmwebd and support for etag headers. Improvements to pmmgr service discovery.
Build fixes for Windows/mingw and many other build, infrastructure and
documentation updates.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1558708 - selinux blocks pmdagluster
https://bugzilla.redhat.com/show_bug.cgi?id=1558708
[ 2 ] Bug #1529915 - pmcd binding only to localhost:44321 by default
https://bugzilla.redhat.com/show_bug.cgi?id=1529915
--------------------------------------------------------------------------------
================================================================================
perl-Config-Model-Tester-3.004-1.fc28 (FEDORA-2018-5499e9d17a)
Test framework for Config::Model
--------------------------------------------------------------------------------
Update Information:
This release fixes creating directories for tests. It also adds
Config::Model::Tester::Setup module to help with writing tests.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1561800 - perl-Config-Model-Tester-3.004 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1561800
--------------------------------------------------------------------------------
================================================================================
perl-DBD-SQLite-1.58-1.fc28 (FEDORA-2018-0ab6e790c2)
SQLite DBI Driver
--------------------------------------------------------------------------------
Update Information:
This release correctly refuse using inactive handle.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1561803 - perl-DBD-SQLite-1.58 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1561803
--------------------------------------------------------------------------------
================================================================================
perl-HTTP-Message-6.16-1.fc28 (FEDORA-2018-7252728b49)
HTTP style message
--------------------------------------------------------------------------------
Update Information:
This release adds HTTP status codes defined in current IANA list
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1561806 - perl-HTTP-Message-6.16 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1561806
--------------------------------------------------------------------------------
================================================================================
perl-Perl-Tidy-Sweetened-1.14-1.fc28 (FEDORA-2018-056341c5e0)
Tweaks to Perl::Tidy to support some syntactic sugar
--------------------------------------------------------------------------------
Update Information:
This release adds support for closing side comments and for Kavorka's basic
keywords.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1561814 - perl-Perl-Tidy-Sweetened-1.14 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1561814
--------------------------------------------------------------------------------
================================================================================
publicsuffix-list-20180328-1.fc28 (FEDORA-2018-a24ede24b4)
Cross-vendor public domain suffix database
--------------------------------------------------------------------------------
Update Information:
Recent revision - 20180328
https://github.com/publicsuffix/list/compare/d311456...f85ba38
--------------------------------------------------------------------------------
================================================================================
pypy-5.10.0-1.fc28 (FEDORA-2018-2f6b6af080)
Python implementation with a Just-In-Time compiler
--------------------------------------------------------------------------------
Update Information:
Update to 5.10.0, support libxcrypt
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1556145 - pypy: FTBFS in F28
https://bugzilla.redhat.com/show_bug.cgi?id=1556145
[ 2 ] Bug #1528840 - pypy-5.10.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1528840
--------------------------------------------------------------------------------
================================================================================
python-QtPy-1.4.0-1.fc28 (FEDORA-2018-21ea0683cb)
Provides an abstraction layer on top of the various Qt bindings
--------------------------------------------------------------------------------
Update Information:
update to 1.4.0
--------------------------------------------------------------------------------
================================================================================
qbs-1.11.0-1.fc28 (FEDORA-2018-4fede53878)
Cross platform build tool
--------------------------------------------------------------------------------
Update Information:
Update to qt-creator-4.6.0 and qbs-1.11.0, see
http://blog.qt.io/blog/2018/03/28
/qt-creator-4-6-0-released/ and
http://blog.qt.io/blog/2018/03/28/qbs-1-11-released/ for details. ---- This
update removes the dmgbuild script, which is macOS-only. ---- This update
removes an unnecessary dependency on python by removing some macOS-only python
modules.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1559529 - qbs adds unneeded dependency on python2 to qt-creator
https://bugzilla.redhat.com/show_bug.cgi?id=1559529
--------------------------------------------------------------------------------
================================================================================
qt-creator-4.6.0-1.fc28 (FEDORA-2018-4fede53878)
Cross-platform IDE for Qt
--------------------------------------------------------------------------------
Update Information:
Update to qt-creator-4.6.0 and qbs-1.11.0, see
http://blog.qt.io/blog/2018/03/28
/qt-creator-4-6-0-released/ and
http://blog.qt.io/blog/2018/03/28/qbs-1-11-released/ for details. ---- This
update removes the dmgbuild script, which is macOS-only. ---- This update
removes an unnecessary dependency on python by removing some macOS-only python
modules.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1559529 - qbs adds unneeded dependency on python2 to qt-creator
https://bugzilla.redhat.com/show_bug.cgi?id=1559529
--------------------------------------------------------------------------------
================================================================================
qutebrowser-1.2.1-1.fc28 (FEDORA-2018-706b8aec9e)
A keyboard-driven, vim-like browser based on PyQt5 and QtWebEngine
--------------------------------------------------------------------------------
Update Information:
Contains a few bugfixes, including crashes when reloading a page which wasn���t
fully loaded (in v1.2.0) or when unbinding keys which were bound in older
versions.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1557321 - qutebrowser-v1.2.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1557321
--------------------------------------------------------------------------------
================================================================================
rkward-0.6.5-14.fc28 (FEDORA-2018-28f9b3f03a)
Graphical frontend for R language
--------------------------------------------------------------------------------
Update Information:
Update R to 3.4.4. Update rpy to 2.9.2 on F28+. Rebuild rkward to match.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1556327 - rpy: FTBFS in F28
https://bugzilla.redhat.com/show_bug.cgi?id=1556327
[ 2 ] Bug #1483231 - rpy-2.9.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1483231
[ 3 ] Bug #1557076 - R-3.4.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1557076
--------------------------------------------------------------------------------
================================================================================
rpy-2.9.2-1.fc28 (FEDORA-2018-28f9b3f03a)
Python interface to the R language
--------------------------------------------------------------------------------
Update Information:
Update R to 3.4.4. Update rpy to 2.9.2 on F28+. Rebuild rkward to match.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1556327 - rpy: FTBFS in F28
https://bugzilla.redhat.com/show_bug.cgi?id=1556327
[ 2 ] Bug #1483231 - rpy-2.9.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1483231
[ 3 ] Bug #1557076 - R-3.4.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1557076
--------------------------------------------------------------------------------
================================================================================
rusers-0.17-90.fc28 (FEDORA-2018-ba2b760521)
Displays the users logged into machines on the local network
--------------------------------------------------------------------------------
Update Information:
Add dependencies on libtirpc, rpcsvc-proto-devel and rpcgen (#1556423)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1556423 - rusers: FTBFS in F28
https://bugzilla.redhat.com/show_bug.cgi?id=1556423
--------------------------------------------------------------------------------
================================================================================
spyder-3.2.8-1.fc28 (FEDORA-2018-09559102a2)
Scientific Python Development Environment
--------------------------------------------------------------------------------
Update Information:
update to 3.2.8
--------------------------------------------------------------------------------
================================================================================
starcal-3.0.7-1.fc28 (FEDORA-2018-c3e7f309fa)
A full-featured international calendar written in Python
--------------------------------------------------------------------------------
Update Information:
New version with updated calendar special days for year 1397 (jalali)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1558008 - starcal-3.0.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1558008
--------------------------------------------------------------------------------
================================================================================
tzdata-2018d-1.fc28 (FEDORA-2018-58e0daf9a2)
Timezone data
--------------------------------------------------------------------------------
Update Information:
Resolves: #1560131 - Rebase to tzdata-2018d: - DST for Asia/Gaza and
Asia/Hebron has changed from March 31 to March 24. - Antarctica/Casey station
changed to UTC+8 on March 11.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1560131 - tzdata-2018d is available
https://bugzilla.redhat.com/show_bug.cgi?id=1560131
--------------------------------------------------------------------------------
================================================================================
webextension-token-signing-1.0.6-5.fc28 (FEDORA-2018-65080c06b3)
Firefox extension for signing with your eID on the web
--------------------------------------------------------------------------------
Update Information:
removed Requires: esteidcerts
--------------------------------------------------------------------------------
================================================================================
xfce4-screenshooter-1.9.1-1.fc28 (FEDORA-2018-e0ba5372e1)
Screenshot utility for the Xfce desktop
--------------------------------------------------------------------------------
Update Information:
update to 1.9.1
--------------------------------------------------------------------------------
================================================================================
xfce4-terminal-0.8.7.3-2.fc28 (FEDORA-2018-7b00c50ea8)
Terminal Emulator for the Xfce Desktop environment
--------------------------------------------------------------------------------
Update Information:
bugfix update; version 0.8.7.3
--------------------------------------------------------------------------------
================================================================================
xterm-331-1.fc28 (FEDORA-2018-af625a7b8f)
Terminal emulator for the X Window System
--------------------------------------------------------------------------------
Update Information:
Update to the latest upstream release.
--------------------------------------------------------------------------------