The following Fedora 28 Security updates need testing:
Age URL
260
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d510cfd7eb
jgraphx-3.6.0.0-6.fc28
209
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d7aeaa74da
nodejs-brace-expansion-1.1.11-1.fc28
208
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc073fdc1a
nodejs-atob-2.1.1-1.fc28
201
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9dd3f7c013
unrtf-0.21.9-8.fc28
169
https://bodhi.fedoraproject.org/updates/FEDORA-2018-28e9841baf
docker-latest-1.13.1-37.git9cb56fd.fc28
84
https://bodhi.fedoraproject.org/updates/FEDORA-2018-cc4b7af297
xerces-c27-2.7.0-28.fc28
42
https://bodhi.fedoraproject.org/updates/FEDORA-2018-aadd3c2790
mupdf-1.14.0-6.fc28
37
https://bodhi.fedoraproject.org/updates/FEDORA-2018-997a9e3e1f xen-4.10.2-4.fc28
37
https://bodhi.fedoraproject.org/updates/FEDORA-2018-aa3752ac3c
nginx-1.14.1-1.fc28
27
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b60fdc1998
net-snmp-5.8-3.fc28
27
https://bodhi.fedoraproject.org/updates/FEDORA-2018-70fe6a4d75
nagios-4.4.2-3.fc28
23
https://bodhi.fedoraproject.org/updates/FEDORA-2018-dbcb80405c
nbdkit-1.4.4-1.fc28
16
https://bodhi.fedoraproject.org/updates/FEDORA-2018-cc86ef9e22 squid-4.4-1.fc28
15
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f7d9989c42
nettle-3.4.1-1.fc28
13
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2abadd4469
haproxy-1.8.15-1.fc28
13
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b18f9dd65b
tomcat-8.5.35-1.fc28
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e2e8a07a01
webkit2gtk3-2.22.5-1.fc28
9
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5f91fbf4fd
sqlite-3.22.0-5.fc28
9
https://bodhi.fedoraproject.org/updates/FEDORA-2018-67e98d4b7a
python-lxml-4.2.5-1.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ea05fcd378
vcftools-0.1.16-1.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-93a16d053f
leptonica-1.77.0-1.fc28 mingw-leptonica-1.77.0-1.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e69d2aaa60
wordpress-5.0.2-1.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-200c84e08a
openjpeg2-2.3.0-10.fc28 mingw-openjpeg2-2.3.0-6.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-12b934e224
mingw-poppler-0.62.0-2.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-50e3877b63
php-pear-1.10.7-2.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2e1d1e4420
krb5-1.16.1-22.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-27f957ae8e
terminology-1.3.2-1.fc28
The following Fedora 28 Critical Path updates have yet to be approved:
Age URL
37
https://bodhi.fedoraproject.org/updates/FEDORA-2018-997a9e3e1f xen-4.10.2-4.fc28
31
https://bodhi.fedoraproject.org/updates/FEDORA-2018-fdc6d449e5
pungi-4.1.31-1.fc28
31
https://bodhi.fedoraproject.org/updates/FEDORA-2018-63e2c74a11
python-productmd-1.18-1.fc28
30
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3222e7c914 radvd-2.17-11.fc28
27
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c86898e4a7 gdb-8.1.1-4.fc28
27
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b60fdc1998
net-snmp-5.8-3.fc28
25
https://bodhi.fedoraproject.org/updates/FEDORA-2018-12c54ca4bf gjs-1.52.5-1.fc28
16
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9f541b469b
nfs-utils-2.3.3-1.rc2.fc28
15
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9963fc558e efivar-37-1.fc28
15
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f7d9989c42
nettle-3.4.1-1.fc28
12
https://bodhi.fedoraproject.org/updates/FEDORA-2018-816dbc3486
osinfo-db-20181214-1.fc28
9
https://bodhi.fedoraproject.org/updates/FEDORA-2018-67e98d4b7a
python-lxml-4.2.5-1.fc28
9
https://bodhi.fedoraproject.org/updates/FEDORA-2018-db7152a500
flatpak-1.0.6-4.fc28
9
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5f91fbf4fd
sqlite-3.22.0-5.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bfd076926b
redhat-rpm-config-110-1.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-200c84e08a
openjpeg2-2.3.0-10.fc28 mingw-openjpeg2-2.3.0-6.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7d88c302b7
linux-firmware-20181219-89.git0f22c852.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-74b0e315c8
libpcap-1.9.0-2.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d81ade974c
glib2-2.56.4-1.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-43c225890a libfm-1.3.1-1.fc28
pcmanfm-1.3.1-1.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4dddcb3e5e
highlight-3.48-1.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2e1d1e4420
krb5-1.16.1-22.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-fe07b3a436
breeze-icon-theme-5.53.0-1.fc28 extra-cmake-modules-5.53.0-1.fc28 kf5-5.53.0-1.fc28
kf5-attica-5.53.0-1.fc28 kf5-baloo-5.53.0-1.fc28 kf5-bluez-qt-5.53.0-1.fc28
kf5-frameworkintegration-5.53.0-2.fc28 kf5-kactivities-5.53.0-1.fc28
kf5-kactivities-stats-5.53.0-1.fc28 kf5-kapidox-5.53.0-1.fc28 kf5-karchive-5.53.0-1.fc28
kf5-kauth-5.53.0-1.fc28 kf5-kbookmarks-5.53.0-1.fc28 kf5-kcmutils-5.53.0-1.fc28
kf5-kcodecs-5.53.0-1.fc28 kf5-kcompletion-5.53.0-1.fc28 kf5-kconfig-5.53.0-1.fc28
kf5-kconfigwidgets-5.53.0-1.fc28 kf5-kcoreaddons-5.53.0-1.fc28 kf5-kcrash-5.53.0-1.fc28
kf5-kdbusaddons-5.53.0-1.fc28 kf5-kdeclarative-5.53.0-2.fc28 kf5-kded-5.53.0-1.fc28
kf5-kdelibs4support-5.53.0-1.fc28 kf5-kdesignerplugin-5.53.0-1.fc28
kf5-kdesu-5.53.0-1.fc28 kf5-kdewebkit-5.53.0-1.fc28 kf5-kdnssd-5.53.0-1.fc28
kf5-kdoctools-5.53.0-1.fc28 kf5-kemoticons-5.53.0-1.fc28 kf5-kfilemetadata-5.53.0-1.fc28
kf5-kglobalaccel-5.53.0-1.fc28 kf5-kguiad
dons-5.53.0-1.fc28 kf5-kholidays-5.53.0-1.fc28 kf5-khtml-5.53.0-1.fc28
kf5-ki18n-5.53.0-1.fc28 kf5-kiconthemes-5.53.0-1.fc28 kf5-kidletime-5.53.0-1.fc28
kf5-kimageformats-5.53.0-1.fc28 kf5-kinit-5.53.0-1.fc28 kf5-kio-5.53.0-1.fc28
kf5-kirigami2-5.53.0-1.fc28 kf5-kitemmodels-5.53.0-1.fc28 kf5-kitemviews-5.53.0-1.fc28
kf5-kjobwidgets-5.53.0-1.fc28 kf5-kjs-5.53.0-1.fc28 kf5-kjsembed-5.53.0-1.fc28
kf5-kmediaplayer-5.53.0-1.fc28 kf5-knewstuff-5.53.0-1.fc28
kf5-knotifications-5.53.0-1.fc28 kf5-knotifyconfig-5.53.0-1.fc28
kf5-kpackage-5.53.0-1.fc28 kf5-kparts-5.53.0-1.fc28 kf5-kpeople-5.53.0-1.fc28
kf5-kplotting-5.53.0-1.fc28 kf5-kpty-5.53.0-1.fc28 kf5-kross-5.53.0-1.fc28
kf5-krunner-5.53.0-1.fc28 kf5-kservice-5.53.0-1.fc28 kf5-ktexteditor-5.53.0-1.fc28
kf5-ktextwidgets-5.53.0-1.fc28 kf5-kunitconversion-5.53.0-1.fc28 kf5-kwallet-5.53.0-1.fc28
kf5-kwayland-5.53.0-2.fc28 kf5-kwidgetsaddons-5.53.0-1.fc28
kf5-kwindowsystem-5.53.0-1.fc28 kf5-kxmlgui-5.53.0-2.fc28 kf5-kxmlrpcclient-5.53.0-1.fc28
kf5-modemmanager-qt-5.53.0-1.fc28 kf5-networkmanager-qt-5.53.0-1.fc28
kf5-plasma-5.53.0-1.fc28 kf5-prison-5.53.0-1.fc28 kf5-purpose-5.53.0-1.fc28
kf5-solid-5.53.0-1.fc28 kf5-sonnet-5.53.0-1.fc28 kf5-syndication-5.53.0-1.fc28
kf5-syntax-highlighting-5.53.0-1.fc28 kf5-threadweaver-5.53.0-1.fc28
oxygen-icon-theme-5.53.0-1.fc28 qqc2-desktop-style-5.53.0-1.fc28
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e6538e58ce
ceph-12.2.10-1.fc28
The following builds have been pushed to Fedora 28 updates-testing
beep-1.3-24.fc28
blueman-2.1-0.11.alpha3.fc28
libcmis-0.5.2-1.fc28
lollypop-0.9.908-1.fc28
mmapper-2.7.3-1.fc28
python-stem-1.7.1-1.fc28
terminus-fonts-4.46-2.fc28
vala-0.40.12-1.fc28
youtube-dl-2018.12.17-1.fc28
Details about builds:
================================================================================
beep-1.3-24.fc28 (FEDORA-2018-276a5f97b6)
Beep the PC speaker any number of ways
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2018-1000532 and a few smaller fixes
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 28 2018 Hans Ulrich Niedermann <hun(a)n-dimensional.de> - 1.3-24
- Actually apply the patches
- Update COPYING with new FSF address
- Fix Patch9 to work as non-git patch (do the rest with shell)
- Proper naming of Patch14
- Exit beep when error accessing API
* Fri Dec 28 2018 Hans Ulrich Niedermann <hun(a)n-dimensional.de> - 1.3-23
- Fix CVE-2018-1000532 and mitigate against related issues (#1595592)
- Fix a number of potential integer overflows
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3-22
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Tue Apr 3 2018 Hans Ulrich Niedermann <hun(a)n-dimensional.de> - 1.3-21
- Add CVE-2018-0492 fix.
- Behaviour of multiple -f parameters matches documentation now.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1595591 - CVE-2018-1000532 beep: External control of file name or path via
--device option
https://bugzilla.redhat.com/show_bug.cgi?id=1595591
--------------------------------------------------------------------------------
================================================================================
blueman-2.1-0.11.alpha3.fc28 (FEDORA-2018-442e242808)
GTK+ Bluetooth Manager
--------------------------------------------------------------------------------
Update Information:
Upgrade to new upstream pre-release (2.1.alpha3)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 27 2018 Artur Iwicki <fedora(a)svgames.pl> - 1:2.1-0.11.alpha3
- Upgrade to new upstream pre-release
- Remove the Group: tag (no longer used in Fedora)
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
1:2.1-0.10.alpha2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1657627 - Blueman needs updating
https://bugzilla.redhat.com/show_bug.cgi?id=1657627
[ 2 ] Bug #1631055 - blueman uses env python, not system python
https://bugzilla.redhat.com/show_bug.cgi?id=1631055
--------------------------------------------------------------------------------
================================================================================
libcmis-0.5.2-1.fc28 (FEDORA-2018-af658d4d80)
A C/C++ client library for CM interfaces
--------------------------------------------------------------------------------
Update Information:
https://github.com/tdf/libcmis/releases/tag/v0.5.2
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 27 2018 David Tardon <dtardon(a)redhat.com> - 0.5.2-1
- new upstream release
--------------------------------------------------------------------------------
================================================================================
lollypop-0.9.908-1.fc28 (FEDORA-2018-27750947f8)
Music player for GNOME
--------------------------------------------------------------------------------
Update Information:
Update to 0.9.908-1 ---- Update to 0.9.907-1 ---- Update to 0.9.906-1 ----
Update to 0.9.905-1 ---- Update to 0.9.904-1 ---- Update to 0.9.903-1 ----
Update to 0.9.902-1 ---- Update to 0.9.900-1 ---- - Drop a Python 2
dependency from Python 3 package
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 27 2018 Martin Gansser <martinkg(a)fedoraproject.org> - 0.9.908-1
- Update to 0.9.908
* Wed Dec 26 2018 Martin Gansser <martinkg(a)fedoraproject.org> - 0.9.907-1
- Update to 0.9.907
* Thu Dec 20 2018 Martin Gansser <martinkg(a)fedoraproject.org> - 0.9.906-1
- Update to 0.9.906
* Wed Dec 19 2018 Martin Gansser <martinkg(a)fedoraproject.org> - 0.9.905-1
- Update to 0.9.905
* Tue Dec 18 2018 Martin Gansser <martinkg(a)fedoraproject.org> - 0.9.904-1
- Update to 0.9.904
* Sat Dec 15 2018 Martin Gansser <martinkg(a)fedoraproject.org> - 0.9.903-1
- Update to 0.9.903
* Sat Dec 15 2018 Martin Gansser <martinkg(a)fedoraproject.org> - 0.9.902-1
- Update to 0.9.902
* Fri Dec 14 2018 Martin Gansser <martinkg(a)fedoraproject.org> - 0.9.900-1
- Update to 0.9.900
* Sun Dec 9 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 0.9.612-2
- Drop a Python 2 dependency from Python 3 package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1651119 - [abrt] lollypop: __new__(): Gdk.py:346:__new__:TypeError:
constructor returned NULL
https://bugzilla.redhat.com/show_bug.cgi?id=1651119
--------------------------------------------------------------------------------
================================================================================
mmapper-2.7.3-1.fc28 (FEDORA-2018-17f2558780)
Graphical MUME mapper
--------------------------------------------------------------------------------
Update Information:
mmapper 2.7.3 release. For details, see
https://github.com/MUME/MMapper/releases/tag/v2.7.3
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 27 2018 Kalev Lember <klember(a)redhat.com> - 2.7.3-1
- Update to 2.7.3
--------------------------------------------------------------------------------
================================================================================
python-stem-1.7.1-1.fc28 (FEDORA-2018-5e12d09b3a)
Python controller library for Tor
--------------------------------------------------------------------------------
Update Information:
Version 1.7.1
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 27 2018 Juan Orti Alcaine <jorti(a)fedoraproject.org> - 1.7.1-1
- Version 1.7.1
--------------------------------------------------------------------------------
================================================================================
terminus-fonts-4.46-2.fc28 (FEDORA-2018-d2577f4b8d)
Clean fixed width font
--------------------------------------------------------------------------------
Update Information:
Update to terminus-font-4.46 Add grub2 subpackage with *.pf2 fonts
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 18 2018 Hans Ulrich Niedermann <hun(a)n-dimensional.de> - 4.46-2
- Add grub2 subpackage with *.pf2 fonts
* Tue Dec 18 2018 Hans Ulrich Niedermann <hun(a)n-dimensional.de> - 4.46-1
- Update to terminus-font-4.46
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.40-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1465198 - terminus-fonts-4.46 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1465198
--------------------------------------------------------------------------------
================================================================================
vala-0.40.12-1.fc28 (FEDORA-2018-d6d4034472)
A modern programming language for GNOME
--------------------------------------------------------------------------------
Update Information:
vala 0.40.12 release. For details, see
https://mail.gnome.org/archives/ftp-
release-list/2018-December/msg00073.html
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 27 2018 Kalev Lember <klember(a)redhat.com> - 0.40.12-1
- Update to 0.40.12
--------------------------------------------------------------------------------
================================================================================
youtube-dl-2018.12.17-1.fc28 (FEDORA-2018-6ed19d7945)
A small command-line program to download online videos
--------------------------------------------------------------------------------
Update Information:
Update to the latest upstream release (also fix bug 1662322)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 27 2018 Mat��j Cepl <mcepl(a)cepl.eu> - 2018.12.17-1
- Update to the latest upstream release.
- Make python-setuptools Required.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1662322 - youtube-dl must depend on python3-setuptools
https://bugzilla.redhat.com/show_bug.cgi?id=1662322
--------------------------------------------------------------------------------