The following Fedora 28 Security updates need testing:
Age URL
209
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d510cfd7eb
jgraphx-3.6.0.0-6.fc28
158
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d7aeaa74da
nodejs-brace-expansion-1.1.11-1.fc28
157
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc073fdc1a
nodejs-atob-2.1.1-1.fc28
150
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9dd3f7c013
unrtf-0.21.9-8.fc28
118
https://bodhi.fedoraproject.org/updates/FEDORA-2018-28e9841baf
docker-latest-1.13.1-37.git9cb56fd.fc28
34
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bbbd8cc3a6
python33-3.3.7-6.fc28
33
https://bodhi.fedoraproject.org/updates/FEDORA-2018-cc4b7af297
xerces-c27-2.7.0-28.fc28
14
https://bodhi.fedoraproject.org/updates/FEDORA-2018-20c24949c0
libarchive-3.3.3-1.fc28
12
https://bodhi.fedoraproject.org/updates/FEDORA-2018-49d6e4bc3f
python37-3.7.1-1.fc28
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-73dd8de892 xen-4.10.2-2.fc28
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7d748596e9
drupal8-8.6.2-1.fc28
9
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3ac43a1e15 feh-2.28-1.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-18023f40fa
drupal7-7.60-2.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2d2739ebed
php-Smarty2-2.6.31-2.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-0bc91454ce
php-pear-CAS-1.3.6-1.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f6c972fc06
libgit2-0.26.8-1.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-509fc4a5c8
webkit2gtk3-2.22.3-1.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5857f28069
java-1.8.0-openjdk-aarch32-1.8.0.191.181022-1.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-317ecbb54f
mkvtoolnix-28.2.0-1.fc28
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2ee55d77c9 links-2.17-1.fc28
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7a5bcb4dbe
mysql-connector-java-8.0.13-1.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1a6f41fc8f
zchunk-0.9.14-1.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d4349a7ba3
icecast-2.4.4-1.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a675aa39fc
subscription-manager-1.24.2-1.fc28
The following Fedora 28 Critical Path updates have yet to be approved:
Age URL
14
https://bodhi.fedoraproject.org/updates/FEDORA-2018-20c24949c0
libarchive-3.3.3-1.fc28
12
https://bodhi.fedoraproject.org/updates/FEDORA-2018-853074f951
jbigkit-2.1-15.fc28
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-21c31e9e2c
evolution-3.28.5-2.fc28
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-73dd8de892 xen-4.10.2-2.fc28
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-210c4be57e
highlight-3.47-1.fc28
9
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a58108a0bc
nfs-utils-2.3.3-1.rc1.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-731fb3f951
pungi-4.1.30-1.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8936092f99
cryptsetup-2.0.5-1.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9fe5584400
perl-5.26.2-414.fc28
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4333d37a43 pcre2-10.32-4.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c2cfb3e462 SDL2-2.0.9-1.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ab95d662ad
osinfo-db-20181101-1.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d75e31fa86 pcre-8.42-5.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-51925baf0b
zypper-1.14.15-1.fc28 libzypp-17.8.1-1.fc28 perl-BSSolv-0.14-4.fc28 libdnf-0.11.1-5.fc28.1
rpm-ostree-2018.9-3.fc28.1 libsolv-0.7.1-1.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a6d438abd7 ceph-12.2.9-1.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-72bc7e26dd file-5.33-8.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3c39e0f88b vim-8.1.511-1.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8004d37878
selinux-policy-3.14.1-48.fc28
The following builds have been pushed to Fedora 28 updates-testing
SDL2_image-2.0.4-1.fc28
SDL2_mixer-2.0.4-1.fc28
ax25-apps-1.0.5-8.fc28
cabextract-1.9-1.fc28
criu-3.11-1.fc28
firefox-63.0.1-4.fc28
gcc-8.2.1-5.fc28
gnome-shell-extension-media-player-indicator-0-0.22.20181105git813c05a.fc28
golang-1.10.5-1.fc28
grass-7.4.2-2.fc28
ibus-1.5.19-8.fc28
kernel-4.18.17-200.fc28
kernel-headers-4.18.17-200.fc28
kernel-tools-4.18.17-200.fc28
kvantum-0.10.8-2.fc28
libmspack-0.9.1-0.1.alpha.fc28
mingw-SDL2_image-2.0.4-1.fc28
mingw-SDL2_mixer-2.0.4-1.fc28
mycli-1.18.0-1.fc28
perl-RT-Client-REST-0.53-1.fc28
pgadmin3-1.22.2-8.fc28
phan-1.1.2-1.fc28
python-rasterio-1.0.9-1.fc28
syncthing-0.14.52-1.fc28
twa-1.6.2-1.fc28
Details about builds:
================================================================================
SDL2_image-2.0.4-1.fc28 (FEDORA-2018-ae9027a506)
Image loading library for SDL
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2018-3977
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 6 2018 Pete Walter <pwalter(a)fedoraproject.org> - 2.0.4-1
- Update to 2.0.4
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.3-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1646575 - CVE-2018-3977 SDL2_image: code execution in the XCF image rendering
functionality
https://bugzilla.redhat.com/show_bug.cgi?id=1646575
--------------------------------------------------------------------------------
================================================================================
SDL2_mixer-2.0.4-1.fc28 (FEDORA-2018-b664f83683)
Simple DirectMedia Layer - Sample Mixer Library
--------------------------------------------------------------------------------
Update Information:
Update to 2.0.4
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 6 2018 Pete Walter <pwalter(a)fedoraproject.org> - 2.0.4-1
- Update to 2.0.4
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.2-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
ax25-apps-1.0.5-8.fc28 (FEDORA-2018-10114a0c4f)
AX.25 ham radio applications
--------------------------------------------------------------------------------
Update Information:
Fix segfault when using Unix98 pty.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 6 2018 Richard Shaw <hobbes1069(a)gmail.com> - 1.0.5-8
- Add patch for segfault when using Unix98 pty, (#1644317).
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.5-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1644317 - Segfault when using Unix98 pty
https://bugzilla.redhat.com/show_bug.cgi?id=1644317
--------------------------------------------------------------------------------
================================================================================
cabextract-1.9-1.fc28 (FEDORA-2018-cb337fb199)
Utility for extracting cabinet (.cab) archives
--------------------------------------------------------------------------------
Update Information:
Latest stable releases of libmspack and cabextract, includes security fixes for
CVE-2018-14680, CVE-2018-14681, CVE-2018-14682, CVE-2018-18584, CVE-2018-18585
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 6 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 1.9-1
- 1.9
* Tue Oct 30 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 1.8-1
- 1.8
* Wed Jul 25 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 1.7-1
- 1.7 (#1186186)
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1644215 - CVE-2018-18585 libmspack: NULL pointer dereference in
chmd_read_headers in mspack/chmd.c
https://bugzilla.redhat.com/show_bug.cgi?id=1644215
[ 2 ] Bug #1644214 - CVE-2018-18584 libmspack: Out-of-bounds write in mspack/cab.h
https://bugzilla.redhat.com/show_bug.cgi?id=1644214
[ 3 ] Bug #1610941 - CVE-2018-14682 libmspack: off-by-one error in the TOLOWER() macro
for CHM decompression
https://bugzilla.redhat.com/show_bug.cgi?id=1610941
[ 4 ] Bug #1610934 - CVE-2018-14680 libmspack: off-by-one error in the CHM chunk number
validity checks
https://bugzilla.redhat.com/show_bug.cgi?id=1610934
[ 5 ] Bug #1610896 - CVE-2018-14681 libmspack: out-of-bounds write in kwajd_read_headers
in mspack/kwajd.c
https://bugzilla.redhat.com/show_bug.cgi?id=1610896
--------------------------------------------------------------------------------
================================================================================
criu-3.11-1.fc28 (FEDORA-2018-b14eb4b33d)
Tool for Checkpoint/Restore in User-space
--------------------------------------------------------------------------------
Update Information:
Updated to 3.11
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 6 2018 Adrian Reber <adrian(a)lisas.de> - 3.11-1
- Updated to 3.11
- Removed upstreamed patches
* Tue Oct 30 2018 Adrian Reber <adrian(a)lisas.de> - 3.10-5
- Added Recommends: tar
It is necessary when checkpointing containers with a tmpfs
--------------------------------------------------------------------------------
================================================================================
firefox-63.0.1-4.fc28 (FEDORA-2018-0593841ea0)
Mozilla Firefox Web browser
--------------------------------------------------------------------------------
Update Information:
- Fixed clipboard on Wayland (rhbz#1585393) ---- - Updated to latest upstream
(63.0.1)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 5 2018 Martin Stransky <stransky(a)redhat.com> - 63.0.1-4
- Added clipboard fix (mozbz#1504689)
* Fri Nov 2 2018 Dan Horak <dhorak(a)redhat.com> - 63.0.1-3
- Added fixes for ppc64le
* Thu Nov 1 2018 Martin Stransky <stransky(a)redhat.com> - 63.0.1-2
- Fixed typo on man page (rhbz#1643766)
* Thu Nov 1 2018 Martin Stransky <stransky(a)redhat.com> - 63.0.1-1
- Updated to latest upstream (63.0.1 build 4)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1585393 - Firefox Wayland copy and paste is not working
https://bugzilla.redhat.com/show_bug.cgi?id=1585393
--------------------------------------------------------------------------------
================================================================================
gcc-8.2.1-5.fc28 (FEDORA-2018-cd24e05681)
Various compilers (C, C++, Objective-C, ...)
--------------------------------------------------------------------------------
Update Information:
Upstream bugs (
http://gcc.gnu.org/PRNNNNN) fixed: 52795, 63155, 70966, 77854,
78595, 81033, 81733, 81878, 85488, 85669, 86198, 86288, 86687, 86751, 87061,
87087, 87362, 87428, 87465, 87473, 87511, 87597, 87610, 87623, 87641, 87645,
87647, 87649, 87665, 87700, 87704, 87725, 87745, 87749, 87809, 87822, 87837,
87859
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 5 2018 Jakub Jelinek <jakub(a)redhat.com> 8.2.1-5
- update from the 8 branch
- PRs ada/81878, bootstrap/81033, c++/86288, debug/86687, debug/87362,
debug/87428, fortran/87597, fortran/87725, libstdc++/70966,
libstdc++/77854, libstdc++/78595, libstdc++/86751, libstdc++/87061,
libstdc++/87641, libstdc++/87704, libstdc++/87749, libstdc++/87809,
libstdc++/87822, middle-end/63155, middle-end/85488, middle-end/87087,
middle-end/87610, middle-end/87623, middle-end/87645,
middle-end/87647, middle-end/87649, other/86198, sanitizer/87837,
target/52795, target/81733, target/85669, target/87511,
tree-optimization/63155, tree-optimization/87465,
tree-optimization/87473, tree-optimization/87665,
tree-optimization/87700, tree-optimization/87745
- fix store merging regression (PR tree-optimization/87859, #1645400)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1645400 - gcc miscompiles bitset code in mesa
https://bugzilla.redhat.com/show_bug.cgi?id=1645400
--------------------------------------------------------------------------------
================================================================================
gnome-shell-extension-media-player-indicator-0-0.22.20181105git813c05a.fc28
(FEDORA-2018-7ff7d7c6a9)
Control MPRIS2 capable media players: Rhythmbox, Banshee, Clementine and more
--------------------------------------------------------------------------------
Update Information:
Update to 0-0.22.20181105git813c05a
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 6 2018 Martin Gansser <martinkg(a)fedoraproject.org> -
0-0.22.20181105git813c05a
- Update to new git snapshot 0-0.22.20181105git813c05a
--------------------------------------------------------------------------------
================================================================================
golang-1.10.5-1.fc28 (FEDORA-2018-2ef7a74ada)
The Go Programming Language
--------------------------------------------------------------------------------
Update Information:
Rebase to 1.10.5
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 6 2018 Jakub ��ajka <jcajka(a)redhat.com> - 1.10.5-1
- Rebase to 1.10.5
--------------------------------------------------------------------------------
================================================================================
grass-7.4.2-2.fc28 (FEDORA-2018-4fadcebe67)
GRASS GIS - Geographic Resources Analysis Support System
--------------------------------------------------------------------------------
Update Information:
fix to include libgrass_*.so files in grass-libs.rpm
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 6 2018 Markus Neteler <neteler(a)mundialis.de> - 7.4.2-2
- fix to include libgrass_*.so files in grass-libs.rpm
* Sun Oct 28 2018 Markus Neteler <neteler(a)mundialis.de> - 7.4.2-1
- new upstream version 7.4.2
* Sun Sep 9 2018 Pavel Raiskup <praiskup(a)redhat.com> - 7.4.1-8
- Clean up of PostgreSQL support (PR#4)
* Tue Jul 31 2018 Florian Weimer <fweimer(a)redhat.com> - 7.4.1-7
- Rebuild with fixed binutils
--------------------------------------------------------------------------------
================================================================================
ibus-1.5.19-8.fc28 (FEDORA-2018-998a7b6fc3)
Intelligent Input Bus for Linux OS
--------------------------------------------------------------------------------
Update Information:
IBus 1.5.19 in Fedora 29 is now back-ported to Fedora 28 and emoji typing is now
enabled with preedit on each application instead of launching emoji dialog. Also
now ibus-gtk3 won't require ibus packages but ibus-libs 1.5.19 conflicts with
ibus 1.5.18 ``` % rpm -q --requires ibus-gtk3 | grep ibus ibus-libs(aarch-64) =
1.5.19-6.fc28 libibus-1.0.so.5()(64bit) % rpm -q --conflicts ibus-libs
ibus(x86-64) < 1.5.19 % rpm -q --requires ibus | grep dbus dbus-x11 ```
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 6 2018 Takao Fujiwara <tfujiwar(a)redhat.com> - 1.5.19-8
- Reverted noarch for devel-docs by mistake
* Wed Oct 31 2018 Takao Fujiwara <tfujiwar(a)redhat.com> - 1.5.19-7
- RHEL code reviews
* Fri Oct 26 2018 Takao Fujiwara <tfujiwar(a)redhat.com> - 1.5.19-6
- dbus-x11 is not required in Fedora 30
- Add Conflicts for Fedora 28
* Tue Oct 23 2018 Takao Fujiwara <tfujiwar(a)redhat.com> - 1.5.19-5
- Use __python3 instead of python3
- Delete Requires ibus in ibus-gtk* for Flatpak
* Fri Sep 14 2018 Takao Fujiwara <tfujiwar(a)redhat.com> - 1.5.19-4
- Fix Bug SEGV Choose an emoji by mouse from the emoji category list
* Thu Aug 30 2018 Takao Fujiwara <tfujiwar(a)redhat.com> - 1.5.19-3
- Fix Bug 1618682 - SEGV with ASCII on emojier in Wayland
- Support Shift-Space on emojier preedit
- Do not move Emojier popup with the active candidate in Xorg
* Wed Aug 22 2018 Takao Fujiwara <tfujiwar(a)redhat.com> - 1.5.19-2
- Do not clear Unicode data when emoji annotation lang is changed
* Wed Aug 8 2018 Takao Fujiwara <tfujiwar(a)redhat.com> - 1.5.19-1
- Bumped to 1.5.19
* Mon Aug 6 2018 Takao Fujiwara <tfujiwar(a)redhat.com> - 1.5.18-14
- Fixed Man page scan results for ibus
- Added IBUS_DISCARD_PASSWORD env variable for password dialog in firefox
- Added history annotation for previous emojis
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1643864 - ibus-gtk3 should not require ibus
https://bugzilla.redhat.com/show_bug.cgi?id=1643864
[ 2 ] Bug #1619096 - IBus emoji does not work with Firefox
https://bugzilla.redhat.com/show_bug.cgi?id=1619096
--------------------------------------------------------------------------------
================================================================================
kernel-4.18.17-200.fc28 (FEDORA-2018-6ab34ff60c)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 4.18.17 update contains a number of important fixes across the tree
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 5 2018 Laura Abbott <labbott(a)redhat.com> - 4.18.17-200
- Linux v4.18.17
* Tue Oct 23 2018 Laura Abbott <labbott(a)redhat.com>
- Add i915 eDP fixes
--------------------------------------------------------------------------------
================================================================================
kernel-headers-4.18.17-200.fc28 (FEDORA-2018-6ab34ff60c)
Header files for the Linux kernel for use by glibc
--------------------------------------------------------------------------------
Update Information:
The 4.18.17 update contains a number of important fixes across the tree
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 5 2018 Laura Abbott <labbott(a)redhat.com> - 4.18.17-200
- Linux v4.18.17
--------------------------------------------------------------------------------
================================================================================
kernel-tools-4.18.17-200.fc28 (FEDORA-2018-6ab34ff60c)
Assortment of tools for the Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 4.18.17 update contains a number of important fixes across the tree
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 5 2018 Laura Abbott <labbott(a)redhat.com> - 4.18.17-200
- Linux v4.18.17
* Thu Oct 18 2018 Justin M. Forbes <jforbes(a)fedoraproject.org> - 4.18.15-200
- Linux v4.18.15
--------------------------------------------------------------------------------
================================================================================
kvantum-0.10.8-2.fc28 (FEDORA-2018-a8c693e729)
SVG-based theme engine for Qt5, KDE and LXQt
--------------------------------------------------------------------------------
Update Information:
Remove dependency to kde-filesystem and plasma-desktop
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1645908 - Kvantum package pulls in unneeded dependencies
https://bugzilla.redhat.com/show_bug.cgi?id=1645908
--------------------------------------------------------------------------------
================================================================================
libmspack-0.9.1-0.1.alpha.fc28 (FEDORA-2018-cb337fb199)
Library for CAB and related files compression and decompression
--------------------------------------------------------------------------------
Update Information:
Latest stable releases of libmspack and cabextract, includes security fixes for
CVE-2018-14680, CVE-2018-14681, CVE-2018-14682, CVE-2018-18584, CVE-2018-18585
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 6 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 0.9.1-0.1.alpha
- 0.9.1alpha
- libmspack-0.8-0.1.alpha corrupts extracted cab files (#1647033)
- examples no longer installed (by default)
* Tue Oct 30 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 0.8-0.1.alpha
- 0.8alpha
- use %make_build %make_install %ldconfig_scriptlets %license
- devel: use %{?_isa} to tighten dep on main pkg
- drop deprecated Group: tag
- %files: tighten to include library soname
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1644215 - CVE-2018-18585 libmspack: NULL pointer dereference in
chmd_read_headers in mspack/chmd.c
https://bugzilla.redhat.com/show_bug.cgi?id=1644215
[ 2 ] Bug #1644214 - CVE-2018-18584 libmspack: Out-of-bounds write in mspack/cab.h
https://bugzilla.redhat.com/show_bug.cgi?id=1644214
[ 3 ] Bug #1610941 - CVE-2018-14682 libmspack: off-by-one error in the TOLOWER() macro
for CHM decompression
https://bugzilla.redhat.com/show_bug.cgi?id=1610941
[ 4 ] Bug #1610934 - CVE-2018-14680 libmspack: off-by-one error in the CHM chunk number
validity checks
https://bugzilla.redhat.com/show_bug.cgi?id=1610934
[ 5 ] Bug #1610896 - CVE-2018-14681 libmspack: out-of-bounds write in kwajd_read_headers
in mspack/kwajd.c
https://bugzilla.redhat.com/show_bug.cgi?id=1610896
--------------------------------------------------------------------------------
================================================================================
mingw-SDL2_image-2.0.4-1.fc28 (FEDORA-2018-e8d19367cb)
MinGW Windows port of the Image loading library for SDL2
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2018-3977
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 6 2018 Pete Walter <pwalter(a)fedoraproject.org> - 2.0.4-1
- Update to 2.0.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1646575 - CVE-2018-3977 SDL2_image: code execution in the XCF image rendering
functionality
https://bugzilla.redhat.com/show_bug.cgi?id=1646575
[ 2 ] Bug #1568142 - CVE-2018-3837 SDL2_image: information disclosure in the PCX image
rendering functionality
https://bugzilla.redhat.com/show_bug.cgi?id=1568142
[ 3 ] Bug #1500450 - CVE-2017-2887 SDL_image: Incorrect XCF property handling
https://bugzilla.redhat.com/show_bug.cgi?id=1500450
--------------------------------------------------------------------------------
================================================================================
mingw-SDL2_mixer-2.0.4-1.fc28 (FEDORA-2018-ad56915d5a)
MinGW Windows port of Simple DirectMedia Layer's Sample Mixer Library
--------------------------------------------------------------------------------
Update Information:
Update to 2.0.4
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 6 2018 Pete Walter <pwalter(a)fedoraproject.org> - 2.0.4-1
- Update to 2.0.4
--------------------------------------------------------------------------------
================================================================================
mycli-1.18.0-1.fc28 (FEDORA-2018-b83b81ecb2)
Interactive CLI for MySQL Database with auto-completion and syntax highlighting
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release mycli 0.18.0.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Sep 30 2018 Terje Rosten <terje.rosten(a)ntnu.no> - 1.18.0-1
- 1.18.0
* Sat Jul 14 2018 Terje Rosten <terje.rosten(a)ntnu.no> - 1.17.0-4
- Tests started to fail again
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.17.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 1.17.0-2
- Rebuilt for Python 3.7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1632612 - [abrt] mycli: unquote(): parse.py:610:unquote:TypeError: argument
of type 'NoneType' is not iterable
https://bugzilla.redhat.com/show_bug.cgi?id=1632612
--------------------------------------------------------------------------------
================================================================================
perl-RT-Client-REST-0.53-1.fc28 (FEDORA-2018-fb29056b83)
Talk to RT using REST protocol
--------------------------------------------------------------------------------
Update Information:
This release exposes CC and Admin CC adresses on Queues.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 6 2018 Petr Pisar <ppisar(a)redhat.com> - 0.53-1
- 0.53 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1646997 - Upgrade perl-RT-Client-REST to 0.53
https://bugzilla.redhat.com/show_bug.cgi?id=1646997
--------------------------------------------------------------------------------
================================================================================
pgadmin3-1.22.2-8.fc28 (FEDORA-2018-7840f2da61)
Graphical client for PostgreSQL
--------------------------------------------------------------------------------
Update Information:
Fix Fedora builds again. Experimental PG10 support. A few bugs fixed - but the
reports are not easily reproducible. Since pgadmin4 is still not ready, we have
to keep this going in the mean time.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 6 2018 Scott Talbert <swt(a)techie.net> - 1.22.2-8
- Adjust BRs to fix FTBFS
* Tue Nov 6 2018 Stuart Gathman <stuart(a)gathman.org> - 1.22.2-7
- Build against compat-openssl10 Sandro Mani <manisandro(a)gmail.com>
- Fix failure to use EVP_CIPHER_CTX_new()
- Fix broken pgadmin3-nullthis.patch
- Add patch for PG10 support
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.22.2-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.22.2-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Thu Aug 3 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.22.2-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Thu Jul 27 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.22.2-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Sat Feb 11 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.22.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
* Fri Nov 11 2016 Devrim G��nd��z <devrim(a)gunduz.org> 1.22.2-1
- Update to 1.22.2 -- the final release of pgadmin3
- Update patch3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1605430 - pgadmin3: FTBFS in Fedora rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1605430
[ 2 ] Bug #1556111 - pgadmin3: FTBFS in F28
https://bugzilla.redhat.com/show_bug.cgi?id=1556111
--------------------------------------------------------------------------------
================================================================================
phan-1.1.2-1.fc28 (FEDORA-2018-10eced5a0d)
A static analyzer for PHP
--------------------------------------------------------------------------------
Update Information:
05 Nov 2018, Phan 1.1.2 ----------------------- **New features (CLI)** + Make
`phan --progress-bar` fit within narrower console widths. (#2096) (Make the
old width into the new **maximum** width) Additionally, use a gradient of
shades for the progress bar. **New features (Analysis):** + Warn when
attempting to read from a write-only real/magic property (or vice-versa) (#595).
New issue types: `PhanAccessReadOnlyProperty`,
`PhanAccessReadOnlyMagicProperty`, `PhanAccessWriteOnlyProperty`,
`PhanAccessWriteOnlyMagicProperty`. New annotations: `@phan-read-only` and
`@phan-write-only` (on its own line) in the doc comment of a real property. +
Warn about use statements that are redundant. (#2048). New issue types:
`PhanUseConstantNoEffect`, `PhanUseFunctionNoEffect`,
`PhanUseNormalNamespacedNoEffect`, `PhanUseNormalNoEffect`. By default, this
will only warn about use statements made from the global namespace, of elements
also in the global namespace. To also warn about redundant **namespaced** uses
of classes/namespaces (e.g. `namespace Foo; use Foo\MyClass;`), enable
`warn_about_redundant_use_namespaced_class` + Warn when using a trait as a real
param/return type of a method-like (#2007). New issue types:
`PhanTypeInvalidTraitParam`, `PhanTypeInvalidTraitReturn` + Improve the
polyfill/fallback parser's heredoc and nowdoc lexing (#1537) + Properly warn
about an undefined variable being passed to `array_shift` (it expects an array
but undefined is converted to null) (related to fix for #2100) + Stop adding
generic int/string to the type of a class property when the doc comment mentions
only literal int/string values (#2102) (e.g. `@var 1|2`) + Improve line number
of warning about extra comma in arrays (i.e. empty array elements). (#2066) +
Properly parse [flexible heredoc/nowdoc
syntaxes](https://wiki.php.net/rfc/flexible_heredoc_nowdoc_syntaxes) that were
added in PHP 7.3 (#1537) + Warn about more invalid operands of the binary
operators `^`,`/`,`&` (#1825). Also, fix cases where `PhanTypeArrayOperator`
would not be emitted. New issue types: `PhanTypeInvalidBitwiseBinaryOperator`,
`PhanTypeMismatchBitwiseBinaryOperands` + Indicate when warnings about too many
arguments are caused only by argument unpacking. (#1324). New issue types:
`PhanParamTooManyUnpack`, `PhanParamTooManyUnpackInternal` + Properly warn about
undefined namespaced constants/functions from within a namespace (#2112). Phan
was failing to warn in some cases. + Always infer `int` for `<<` and `>>` +
Support using dynamic values as the name for a `define()` statement (#2116)
**Maintenance:** + Make issue messages more consistent in their syntax used to
describe closures/functions (#1695) + Consistently refer to instance properties
as `Class->propname` and static properties as `Class::$staticpropname` in issue
messages. **Bug fixes:** + Properly type check `static::someMethodName()`.
Previously, Phan would fail to infer types for the results of those method
calls. + Improve handling of `array_shift`. Don't warn when it's used on a
global or superglobal (#2100) + Infer that `self` and `static` in a trait refer
to the methods of that trait. (#2006)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 6 2018 Remi Collet <remi(a)remirepo.net> - 1.1.2-1
- update to 1.1.2
--------------------------------------------------------------------------------
================================================================================
python-rasterio-1.0.9-1.fc28 (FEDORA-2018-5b485aabc4)
Fast and direct raster I/O for use with Numpy and SciPy
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 5 2018 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 1.0.9-1
- Update to latest version
* Tue Jul 31 2018 Florian Weimer <fweimer(a)redhat.com> - 1.0.2-2
- Rebuild with fixed binutils
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1635944 - python-rasterio-1.0.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1635944
--------------------------------------------------------------------------------
================================================================================
syncthing-0.14.52-1.fc28 (FEDORA-2018-de5b66aec2)
Continuous File Synchronization
--------------------------------------------------------------------------------
Update Information:
Update to version 0.14.52. Release notes:
https://github.com/syncthing/syncthing/releases/tag/v0.14.52
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 6 2018 Fabio Valentini <decathorpe(a)gmail.com> - 0.14.52-1
- Update to version 0.14.52.
--------------------------------------------------------------------------------
================================================================================
twa-1.6.2-1.fc28 (FEDORA-2018-5ac2a46e8f)
Tiny web auditor with strong opinions
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream version
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 6 2018 Artur Iwicki <fedora(a)svgames.pl> - 1.6.2-1
- Update to latest upstream version
--------------------------------------------------------------------------------