The following Fedora 28 Security updates need testing:
Age URL
363
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d510cfd7eb
jgraphx-3.6.0.0-6.fc28
312
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d7aeaa74da
nodejs-brace-expansion-1.1.11-1.fc28
311
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc073fdc1a
nodejs-atob-2.1.1-1.fc28
187
https://bodhi.fedoraproject.org/updates/FEDORA-2018-cc4b7af297
xerces-c27-2.7.0-28.fc28
140
https://bodhi.fedoraproject.org/updates/FEDORA-2018-aa3752ac3c
nginx-1.14.1-1.fc28
119
https://bodhi.fedoraproject.org/updates/FEDORA-2018-cc86ef9e22 squid-4.4-1.fc28
46
https://bodhi.fedoraproject.org/updates/FEDORA-2019-86412405d5
bind-9.11.5-4.P4.fc28
33
https://bodhi.fedoraproject.org/updates/FEDORA-2019-63029a7692
libu2f-host-1.1.8-1.fc28
14
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ba19e79e9a
thunderbird-60.6.1-1.fc28
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8b8c774b84
aria2-1.34.0-4.fc28
11
https://bodhi.fedoraproject.org/updates/FEDORA-2019-0927602e59
chromium-73.0.3683.86-2.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-a3f67e2364
checkstyle-8.0-4.1.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-253da50ddd php-7.2.17-1.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-a4ed7400f4
httpd-2.4.39-1.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8e7c71f45b
nodejs-simple-markdown-0.4.4-1.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-2fff3c6889
osbs-client-0.52-2.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-782e6e61ce
atomic-reactor-1.6.36.1-3.fc28
The following Fedora 28 Critical Path updates have yet to be approved:
Age URL
119
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9f541b469b
nfs-utils-2.3.3-1.rc2.fc28
83
https://bodhi.fedoraproject.org/updates/FEDORA-2019-78153d357c
totem-pl-parser-3.26.2-1.fc28
75
https://bodhi.fedoraproject.org/updates/FEDORA-2019-bb30467485
ostree-2019.1-2.fc28 rpm-ostree-2019.1-1.fc28
67
https://bodhi.fedoraproject.org/updates/FEDORA-2019-cb4a3023ef
iproute-4.20.0-1.fc28
49
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6c4e362bd0 dhcp-4.3.6-22.fc28
dnsperf-2.2.1-1.fc28 bind-dyndb-ldap-11.1-13.fc28 bind-9.11.5-2.P1.fc28
29
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c4107ac9d3 koji-1.17.0-5.fc28
28
https://bodhi.fedoraproject.org/updates/FEDORA-2019-cb98bf5ace
fedfind-4.2.2-1.fc28 python-productmd-1.20-1.fc28
26
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d95d1a1e0e
libseccomp-2.4.0-0.fc28
20
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e60ecc03b4
python-productmd-1.21-1.fc28
20
https://bodhi.fedoraproject.org/updates/FEDORA-2019-457ab67a6c
psmisc-23.1-3.1.fc28
14
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ba19e79e9a
thunderbird-60.6.1-1.fc28
14
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4574633aa0 pcre2-10.32-9.fc28
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-a0ae4e93b9 sssd-1.16.4-2.fc28
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6f16d481c2
glusterfs-4.1.8-1.fc28
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-a79729ce2f
highlight-3.50-1.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-dd57433cec
openjpeg2-2.3.1-1.fc28 mingw-openjpeg2-2.3.1-1.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-84a56d3908
hwdata-0.322-1.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-a4a40aeb8f quota-4.04-8.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-a15e82b4d9
pungi-4.1.35-1.fc28
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ba19af6a58
libldb-1.4.0-5.fc28.1.3.8 samba-4.8.10-0.fc28
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8e8681281c fuse-2.9.9-2.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-acd6fbb8ff
vim-8.1.1137-1.fc28
The following builds have been pushed to Fedora 28 updates-testing
CImg-2.5.6-2.fc28
bdii-5.2.25-2.fc28
ddupdate-0.6.2-1.fc28
gmic-2.5.6-1.fc28
kernel-5.0.7-100.fc28
kernel-headers-5.0.7-100.fc28
kernel-tools-5.0.7-100.fc28
kronosnet-1.8-1.fc28
mandoc-1.14.4-2.fc28
perl-Sereal-Decoder-4.006-1.fc28
perl-Sereal-Encoder-4.006-1.fc28
php-pear-1.10.9-2.fc28
pspg-1.6.5-1.fc28
python-neomodel-3.3.1-1.fc28
python-pymssql-2.1.4-1.fc28
samba-4.8.11-0.fc28
znc-1.7.3-1.fc28
Details about builds:
================================================================================
CImg-2.5.6-2.fc28 (FEDORA-2019-f81eb6720c)
C++ Template Image Processing Toolkit
--------------------------------------------------------------------------------
Update Information:
new version ---- new version
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 8 2019 josef radinger <cheese(a)nosuchhost.net> - 1:2.5.6-2
- bump version
* Fri Mar 29 2019 josef radinger <cheese(a)nosuchhost.net> - 1:2.5.5-1
- bump version
* Sun Mar 17 2019 josef radinger <cheese(a)nosuchhost.net> - 1:2.5.4-1
- bump version
* Sun Mar 17 2019 josef radinger <cheese(a)nosuchhost.net> - 1:2.5.3-1
- bump version
* Sat Mar 16 2019 josef radinger <cheese(a)nosuchhost.net> - 1:2.5.2-2
- fix release in spec-file
* Sat Mar 16 2019 josef radinger <cheese(a)nosuchhost.net> - 1:2.5.2-1
- bump version
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:2.4.5-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
bdii-5.2.25-2.fc28 (FEDORA-2019-427b590cd2)
The Berkeley Database Information Index (BDII)
--------------------------------------------------------------------------------
Update Information:
bdii 5.2.25
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 9 2019 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 5.2.25-2
- Define __python2 if undefined
* Tue Apr 9 2019 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 5.2.25-1
- Version 5.2.25
- Upstream project moved to github
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.2.23-12
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Tue Nov 13 2018 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 5.2.23-11
- Don't use /usr/bin/python shebang
- Remove EPEL 5 conditionals
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.2.23-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
ddupdate-0.6.2-1.fc28 (FEDORA-2019-499afb9ab9)
Tool updating DNS data for dynamic IP addresses
--------------------------------------------------------------------------------
Update Information:
New upstream release includes support for
cloudflare.com and dy.fi. Also fixes a
bug where address was updated despite it was not changed.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 9 2019 Alec Leamas <leamas.alec(a)gmail.com> - 0.6.2-1
- new version
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.1-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 0.6.1-2
- Rebuilt for Python 3.7
--------------------------------------------------------------------------------
================================================================================
gmic-2.5.6-1.fc28 (FEDORA-2019-f81eb6720c)
GREYC's Magic for Image Computing
--------------------------------------------------------------------------------
Update Information:
new version ---- new version
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 8 2019 josef radinger <cheese(a)nosuchhost.net> - 2.5.6-1
- bump version
* Sat Mar 30 2019 josef radinger <cheese(a)nosuchhost.net> - 2.5.5-1
- bump version
* Sun Mar 24 2019 josef radinger <cheese(a)nosuchhost.net> - 2.5.4-1
- bump version
* Mon Mar 18 2019 Orion Poplawski <orion(a)nwra.com> - 2.5.3-2
- Rebuild for hdf5 1.10.5
* Sun Mar 17 2019 josef radinger <cheese(a)nosuchhost.net> - 2.5.3-1
- bump version
- use gmic_cluts.gmz instead of gmic_film_cluts.gmz
* Sat Mar 16 2019 josef radinger <cheese(a)nosuchhost.net> - 2.5.2-1
- bump version
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.4.5-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
kernel-5.0.7-100.fc28 (FEDORA-2019-ce2933b003)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 5.0.7 update contains a number of important fixes across the tree
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 8 2019 Laura Abbott <labbott(a)redhat.com> - 5.0.7-100
- Linux v5.0.7
* Mon Apr 8 2019 Justin M. Forbes <jforbes(a)fedoraproject.org>
- Fix CVE-2019 (rhbz 1695044 1697187)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1695044 - CVE-2019-3887 Kernel: KVM: nVMX: guest accesses L0 MSR causes
potential DoS
https://bugzilla.redhat.com/show_bug.cgi?id=1695044
--------------------------------------------------------------------------------
================================================================================
kernel-headers-5.0.7-100.fc28 (FEDORA-2019-ce2933b003)
Header files for the Linux kernel for use by glibc
--------------------------------------------------------------------------------
Update Information:
The 5.0.7 update contains a number of important fixes across the tree
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 8 2019 Laura Abbott <labbott(a)redhat.com> - 5.0.7-100
- Linux v5.0.7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1695044 - CVE-2019-3887 Kernel: KVM: nVMX: guest accesses L0 MSR causes
potential DoS
https://bugzilla.redhat.com/show_bug.cgi?id=1695044
--------------------------------------------------------------------------------
================================================================================
kernel-tools-5.0.7-100.fc28 (FEDORA-2019-ce2933b003)
Assortment of tools for the Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 5.0.7 update contains a number of important fixes across the tree
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 8 2019 Laura Abbott <labbott(a)redhat.com> - 5.0.7-100
- Linux v5.0.7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1695044 - CVE-2019-3887 Kernel: KVM: nVMX: guest accesses L0 MSR causes
potential DoS
https://bugzilla.redhat.com/show_bug.cgi?id=1695044
--------------------------------------------------------------------------------
================================================================================
kronosnet-1.8-1.fc28 (FEDORA-2019-08341ecb32)
Multipoint-to-Multipoint VPN daemon
--------------------------------------------------------------------------------
Update Information:
Updated to upstream release v1.8. ---- Updated to upstream release v1.7. ----
Updated to upstream release v1.5.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 3 2019 Madison Kelly <mkelly(a)alteeve.ca> - 1.8-1
- Updated to upstream release v1.8.
--------------------------------------------------------------------------------
================================================================================
mandoc-1.14.4-2.fc28 (FEDORA-2019-477410c3f9)
A suite of tools for compiling mdoc and man
--------------------------------------------------------------------------------
Update Information:
Add mandoc to Fedora 28
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1673214 - Review Request: mandoc - A suite of tools for compiling mdoc and
man
https://bugzilla.redhat.com/show_bug.cgi?id=1673214
--------------------------------------------------------------------------------
================================================================================
perl-Sereal-Decoder-4.006-1.fc28 (FEDORA-2019-2363e01b3b)
Perl deserialization for Sereal format
--------------------------------------------------------------------------------
Update Information:
This release fixes return value of Sereal::Decoder->decode_from_file() call when
only an argument with a file name is passed.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 9 2019 Petr Pisar <ppisar(a)redhat.com> - 4.006-1
- 4.006 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1697634 - perl-Sereal-Decoder-4.006 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1697634
--------------------------------------------------------------------------------
================================================================================
perl-Sereal-Encoder-4.006-1.fc28 (FEDORA-2019-cf812a3fd3)
Perl serialization into Serial format
--------------------------------------------------------------------------------
Update Information:
This release exports SRL_ZSTD symbol.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 9 2019 Petr Pisar <ppisar(a)redhat.com> - 4.006-1
- 4.006 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1697635 - perl-Sereal-Encoder-4.006 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1697635
--------------------------------------------------------------------------------
================================================================================
php-pear-1.10.9-2.fc28 (FEDORA-2019-ff99d347dc)
PHP Extension and Application Repository framework
--------------------------------------------------------------------------------
Update Information:
**PEAR 1.10.9** * PR #83: Drop track_errors from options * PR #84: Fix PHP 8
compatibility issues ---- **Archive_Tar 1.4.7** * Improved performance by
increasing read buffer size ---- **Archive_Tar 1.4.6** * Improve path
traversal detection for forward and backward slashes ---- **Console_Getopt
1.4.2** * Remove use of each(), which is removed in PHP 8
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 8 2019 Remi Collet <remi(a)remirepo.net> - 1:1.10.9-2
- update PEAR to 1.10.9
- update Archive_Tar to 1.4.7
- update Console_Getopt to 1.4.2
--------------------------------------------------------------------------------
================================================================================
pspg-1.6.5-1.fc28 (FEDORA-2019-2d77e22f51)
A unix pager optimized for psql
--------------------------------------------------------------------------------
Update Information:
new upstream release, per release notes:
https://github.com/okbob/pspg/releases/tag/1.6.5
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 9 2019 Pavel Raiskup <praiskup(a)redhat.com> - 1.6.5-1
- new upstream release, per release notes:
https://github.com/okbob/pspg/releases/tag/1.6.5
* Thu Mar 21 2019 Pavel Raiskup <praiskup(a)redhat.com> - 1.6.4-1
- new upstream release, per release notes:
https://github.com/okbob/pspg/releases/tag/1.6.4
* Thu Feb 28 2019 Pavel Raiskup <praiskup(a)redhat.com> - 1.6.3-4
- rebuild for libreadline.so.8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1697260 - pspg-1.6.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1697260
--------------------------------------------------------------------------------
================================================================================
python-neomodel-3.3.1-1.fc28 (FEDORA-2019-7acc583096)
A Python OGM for Neo4j
--------------------------------------------------------------------------------
Update Information:
Update to 3.3.1
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 9 2019 mprahl <mprahl(a)redhat.com> - 3.3.1-1
- new version
* Sat Feb 2 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.3.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1697431 - python-neomodel-3.3.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1697431
--------------------------------------------------------------------------------
================================================================================
python-pymssql-2.1.4-1.fc28 (FEDORA-2019-88f6809140)
DB-API interface to Microsoft SQL Server
--------------------------------------------------------------------------------
Update Information:
General ------- - Allow linkage against FreeTDS (by dropping usage of
deprecated ``DBVERSION_80`` symbol.) (GH-432) - Stop using 7.1 as default
value for the TDS protocol version used in connections. This is a backward
incompatible change and affects connections using both `pymssql` and `_mssql`.
Now you need to specify a TDS protocol version explicitly by using any of the
supported mechanisms (in descending order of precedence): * Using the
``tds_version`` paramenter of ``pymssql.connect()`` and ``_mssql.connect()``
* A ``TDSVER`` enviromnent variable (see FreeTDS documentation) * A
``freetds.conf`` file (see FreeTDS documentation) - Drop support for versions
of FreeTDS older than 0.91. - Accept 7.3 as TDS protocol version when
establishing a connection. - Add Python 3.7 support - Drop Python 3.3 support
Features -------- - Support for new in SQL Server 2008 ``DATE``, ``TIME`` and
``DATETIME2`` data types (GH-156). The following conditions need to be
additionally met so values of these column types can be returned from the
database as their native corresponding Python data types instead of as
strings: * Underlying FreeTDS must be 0.95 or newer. * TDS protocol version
in use must be 7.3 or newer. Thanks Ed Avis for the implementation. (GH-331)
Bug fixes --------- - Finish implementation of TDS protocol version 7.3 support
by actually accepting ``"7.3"`` as TDS protocol version when establishing a
connection. (GH-455) - Fixed and expanded Python data types that can be used
to pass ``VARBINARY``, ``BINARY`` and ``IMAGE`` SQL Server Stored Procedures
input parameters. (GH-425). Thanks Bill Adams for the fix. - Fix
``tds_version`` ``_mssql`` connection property value for TDS version. 7.1 is
actually 7.1 and not 8.0.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 9 2019 Mohamed El Morabity <melmorabity(a)fedoraproject.org> - 2.1.4-1
- Update to 2.1.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1697543 - python-pymssql-2.1.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1697543
--------------------------------------------------------------------------------
================================================================================
samba-4.8.11-0.fc28 (FEDORA-2019-019c5314a0)
Server and Client software to interoperate with Windows machines
--------------------------------------------------------------------------------
Update Information:
Update to Samba 4.8.11, Security fixes for CVE-2019-3880
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 8 2019 Guenther Deschner <gdeschner(a)redhat.com> - 4.8.11-0
- Update to Samba 4.8.11
- resolves: #1691518, #1697717 - Security fixes for CVE-2019-3880
* Thu Apr 4 2019 Guenther Deschner <gdeschner(a)redhat.com> - 4.8.10-0
- Update to Samba 4.8.10
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1691518 - CVE-2019-3880 samba: save registry file outside share as
unprivileged user
https://bugzilla.redhat.com/show_bug.cgi?id=1691518
--------------------------------------------------------------------------------
================================================================================
znc-1.7.3-1.fc28 (FEDORA-2019-64ed5e4dfa)
An advanced IRC bouncer
--------------------------------------------------------------------------------
Update Information:
Fixes CVE-2019-9917
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 9 2019 Nick Bebout <nb(a)fedoraproject.org> - 1.7.3-1
- Update to 1.7.3
* Wed Mar 27 2019 Nick Bebout <nb(a)fedoraproject.org> - 1.7.3-0.1
- Update to 1.7.3-rc1 to fix CVE-2019-9917
* Sun Feb 3 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.7.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1692771 - CVE-2019-9917 znc: crash on invalid encoding [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1692771
[ 2 ] Bug #1692770 - CVE-2019-9917 znc: crash on invalid encoding [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1692770
[ 3 ] Bug #1691613 - znc-1.7.3-rc1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1691613
--------------------------------------------------------------------------------