The following Fedora 28 Security updates need testing:
Age URL
175
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d510cfd7eb
jgraphx-3.6.0.0-6.fc28
125
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d7aeaa74da
nodejs-brace-expansion-1.1.11-1.fc28
123
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc073fdc1a
nodejs-atob-2.1.1-1.fc28
116
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9dd3f7c013
unrtf-0.21.9-8.fc28
84
https://bodhi.fedoraproject.org/updates/FEDORA-2018-28e9841baf
docker-latest-1.13.1-37.git9cb56fd.fc28
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-cc9adc4808
python-marshmallow-2.11.1-8.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-70fac49405
liblouis-2.6.2-16.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f4558a5180
php-horde-Horde-Core-2.31.6-1.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-05d08fddf8
exempi-2.4.5-4.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-520062dcb8
php-horde-horde-5.2.20-1.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1c9f3f4d9e
php-horde-kronolith-4.2.25-1.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-dd98177cad
python-markdown2-2.3.6-1.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e022ecbc52
mediawiki-1.29.3-1.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8dfeb06ce9
php-horde-nag-4.2.19-1.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5d6e80ab82
dislocker-0.7.1-10.fc28 dolphin-emu-5.0-25.fc28 nekovm-2.2.0-8.fc28 mbedtls-2.13.0-1.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bbbd8cc3a6
python33-3.3.7-6.fc28
The following Fedora 28 Critical Path updates have yet to be approved:
Age URL
14
https://bodhi.fedoraproject.org/updates/FEDORA-2018-33c28dc24f
dash-0.5.10.2-1.fc28
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-fab540a5d2
libguestfs-1.38.6-1.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-05d08fddf8
exempi-2.4.5-4.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ceecb4b128 xen-4.10.2-1.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ecf764c0dc
openssh-7.8p1-3.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f54d1d2bae
libssh-0.8.3-3.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9aa6eb212c
hwdata-0.316-1.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-fc1c68d21a vim-8.1.450-1.fc28
The following builds have been pushed to Fedora 28 updates-testing
R-quantities-0.1.1-2.fc28
atomic-reactor-1.6.34-1.fc28
audacity-2.3.0-1.fc28
dovecot-2.3.3-1.fc28
elementary-capnet-assist-2.2.1-1.fc28
golang-github-chmduquesne-rollinghash-4.0.0-1.fc28
golang-gopkg-asn1-ber-1-1.2-1.fc28
golang-gopkg-ldap-2-2.5.1-1.fc28
nut-2.7.4-19.fc28
perl-Test-Script-1.25-1.fc28
php-symfony3-3.4.17-1.fc28
python-PyGithub-1.39-4.fc28
python-couchbase-2.5.0-1.fc28
sec-2.8.1-0.fc28
shaderc-2018.0-1.fc28
syncthing-0.14.51-1.fc28
wingpanel-indicator-bluetooth-2.1.1-1.fc28
wingpanel-indicator-network-2.2.1-1.fc28
wingpanel-indicator-notifications-2.1.1-1.fc28
xerces-c27-2.7.0-28.fc28
Details about builds:
================================================================================
R-quantities-0.1.1-2.fc28 (FEDORA-2018-02abb90021)
Quantity Calculus for R Vectors
--------------------------------------------------------------------------------
Update Information:
Initial package for Fedora
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1634701 - Review Request: R-quantities - Quantity Calculus for R Vectors
https://bugzilla.redhat.com/show_bug.cgi?id=1634701
--------------------------------------------------------------------------------
================================================================================
atomic-reactor-1.6.34-1.fc28 (FEDORA-2018-0826a37c2d)
Improved builder for Docker images
--------------------------------------------------------------------------------
Update Information:
Update to 1.6.34, and add patches to get module information from Koji rather
than the PDC.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 3 2018 Owen Taylor <otaylor(a)redhat.com> - 1.6.34-1
- Update to 1.6.34
- Add patches to get module information from Koji rather than the PDC,
and handle returns from newer versions of ODCS.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1304907 - atomic-reactor-1.6.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1304907
[ 2 ] Bug #1613590 - atomic-reactor-1.6.33.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1613590
--------------------------------------------------------------------------------
================================================================================
audacity-2.3.0-1.fc28 (FEDORA-2018-e66ef16e01)
Multitrack audio editor
--------------------------------------------------------------------------------
Update Information:
Release of Audacity 2.3.0. Package is now always compiled with mp3 support, and
includes various packaging improvements. Changes and improvements since
previous version: * Audacity 2.3.0 replaces all previous versions. * Includes
fixes to Timer Record, and to 'Envelope Points'. * New feature - "Punch and
Roll
Recording". * Toolbars controlling volume and speed can now be resized for
greater precision. * Play-at-Speed now can be adjusted whilst playing. * Macros
(formerly 'Chains') substantially extended. * Pinned-play-head can now be
repositioned by dragging.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 1 2018 David Timms <iinet.net.au@dtimms> - 2.3.0-1
- Update to Audacity 2.3.0 release.
- change mp3 capability to be always present rather than a compile option.
- further improvements from S��rgio Basto <sergio(a)serjux.com>
- Add conditionals to enable or disable ffmpeg
- Also add conditionals to be possible build with local ffmpeg (not in use)
- Use autoconf before ./configure
- Re-add libmp3lame-default.patch and libdir.patch
- Add to configure --disable-dynamic-loading
- General review of spec
- Re-add desktop.in.patch
- Add to configure --with-lv2 --with-midi --with-portmidi with some commentaries
- Temporary fix to portaudio became permanent (--with-portaudio=local)
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.1.3-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1607135 - [abrt] audacity: __libc_sigaction(): audacity killed by SIGABRT
https://bugzilla.redhat.com/show_bug.cgi?id=1607135
[ 2 ] Bug #1589485 - [abrt] audacity: OnExit(): audacity killed by SIGABRT
https://bugzilla.redhat.com/show_bug.cgi?id=1589485
[ 3 ] Bug #1576605 - [abrt] audacity: OnExit(): audacity killed by SIGABRT
https://bugzilla.redhat.com/show_bug.cgi?id=1576605
[ 4 ] Bug #1574661 - Audacity upgrade to ver 2.2
https://bugzilla.redhat.com/show_bug.cgi?id=1574661
[ 5 ] Bug #1572867 - [abrt] audacity: XGetWindowProperty(): audacity killed by SIGTRAP
https://bugzilla.redhat.com/show_bug.cgi?id=1572867
[ 6 ] Bug #1568032 - [abrt] audacity: raise(): audacity killed by SIGTRAP
https://bugzilla.redhat.com/show_bug.cgi?id=1568032
[ 7 ] Bug #1566380 - volume change with pulse audio plugin, changes hardware volume
instead of audacity playback
https://bugzilla.redhat.com/show_bug.cgi?id=1566380
[ 8 ] Bug #1562829 - audacity needs to bo rebuild with latest libid3tag
https://bugzilla.redhat.com/show_bug.cgi?id=1562829
[ 9 ] Bug #1541330 - [abrt] audacity: OnExit(): audacity killed by SIGABRT
https://bugzilla.redhat.com/show_bug.cgi?id=1541330
[ 10 ] Bug #1516047 - [abrt] audacity: OnExit(): audacity killed by SIGABRT
https://bugzilla.redhat.com/show_bug.cgi?id=1516047
[ 11 ] Bug #1450227 - audacity: enable MP2/MP3 output support
https://bugzilla.redhat.com/show_bug.cgi?id=1450227
--------------------------------------------------------------------------------
================================================================================
dovecot-2.3.3-1.fc28 (FEDORA-2018-c7d2fa91b4)
Secure imap and pop3 server
--------------------------------------------------------------------------------
Update Information:
- dovecot updated to 2.3.3, pigeonhole pdated to 0.5.3 - doveconf hides more
secrets now in the default output - NUL bytes in mail headers can cause
truncated replies when fetched. - virtual plugin: Some searches used 100% CPU
for many seconds - dsync assert-crashed with acl plugin in some situations. -
imapc: Fixed various assert-crashes when reconnecting to server.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 2 2018 Michal Hlavinka <mhlavink(a)redhat.com> - 1:2.3.3-1
- dovecot updated to 2.3.3, pigeonhole pdated to 0.5.3
- doveconf hides more secrets now in the default output
- NUL bytes in mail headers can cause truncated replies when fetched.
- virtual plugin: Some searches used 100% CPU for many seconds
- dsync assert-crashed with acl plugin in some situations.
- imapc: Fixed various assert-crashes when reconnecting to server.
* Tue Oct 2 2018 Michal Hlavinka <mhlavink(a)redhat.com> - 1:2.3.2.1-4
- fix dovecot-init service syntax error (#1635017)
* Mon Aug 13 2018 Michal Hlavinka <mhlavink(a)redhat.com> - 1:2.3.2.1-3
- do not try to generate ssl-params as its obsolete (#1614640)
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
1:2.3.2.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Tue Jul 10 2018 Michal Hlavinka <mhlavink(a)redhat.com> - 1:2.3.2.1-1
- SSL/TLS servers may have crashed during client disconnection
* Mon Jul 9 2018 Michal Hlavinka <mhlavink(a)redhat.com> - 1:2.3.2-1
- dovecot updated to 2.3.2, pigeonhole to 0.5.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1635017 - dovecot-init.service has a mismatched quote and refuses to start
https://bugzilla.redhat.com/show_bug.cgi?id=1635017
--------------------------------------------------------------------------------
================================================================================
elementary-capnet-assist-2.2.1-1.fc28 (FEDORA-2018-70828e7ed1)
Captive Portal Assistant for elementary
--------------------------------------------------------------------------------
Update Information:
Update to version 2.2.1. Release notes:
https://github.com/elementary/capnet-
assist/releases/tag/2.2.1
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
golang-github-chmduquesne-rollinghash-4.0.0-1.fc28 (FEDORA-2018-94b5b1ad70)
Some rolling checksum implementations in go
--------------------------------------------------------------------------------
Update Information:
Update syncthing to version 0.14.51. Release notes:
https://github.com/syncthing/syncthing/releases/tag/v0.14.51 Update rollinghash
to version 4.0.0 and adapt syncthing to the slightly changed behaviour. Release
notes:
https://github.com/chmduquesne/rollinghash#whats-new-in-v4 Initial
packaging of gopkg.in/asn1-ber.v1 and gopkg.in/ldap.v2, which are new
dependencies of syncthing 0.14.51.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 13 2018 Fabio Valentini <decathorpe(a)gmail.com> - 4.0.0-1
- Update to version 4.0.0.
- Remove test program, it pulls in extra dependencies.
- Update to spec 3.0.
--------------------------------------------------------------------------------
================================================================================
golang-gopkg-asn1-ber-1-1.2-1.fc28 (FEDORA-2018-94b5b1ad70)
ASN1 BER Encoding / Decoding Library for Go
--------------------------------------------------------------------------------
Update Information:
Update syncthing to version 0.14.51. Release notes:
https://github.com/syncthing/syncthing/releases/tag/v0.14.51 Update rollinghash
to version 4.0.0 and adapt syncthing to the slightly changed behaviour. Release
notes:
https://github.com/chmduquesne/rollinghash#whats-new-in-v4 Initial
packaging of gopkg.in/asn1-ber.v1 and gopkg.in/ldap.v2, which are new
dependencies of syncthing 0.14.51.
--------------------------------------------------------------------------------
================================================================================
golang-gopkg-ldap-2-2.5.1-1.fc28 (FEDORA-2018-94b5b1ad70)
Basic LDAP v3 functionality for Go
--------------------------------------------------------------------------------
Update Information:
Update syncthing to version 0.14.51. Release notes:
https://github.com/syncthing/syncthing/releases/tag/v0.14.51 Update rollinghash
to version 4.0.0 and adapt syncthing to the slightly changed behaviour. Release
notes:
https://github.com/chmduquesne/rollinghash#whats-new-in-v4 Initial
packaging of gopkg.in/asn1-ber.v1 and gopkg.in/ldap.v2, which are new
dependencies of syncthing 0.14.51.
--------------------------------------------------------------------------------
================================================================================
nut-2.7.4-19.fc28 (FEDORA-2018-9728498260)
Network UPS Tools
--------------------------------------------------------------------------------
Update Information:
do not use tcpwrapper, it was removed
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 24 2018 Adam Williamson <awilliam(a)redhat.com> - 2.7.4-19
- Rebuild for new net-snmp
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.7.4-18
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Tue Apr 17 2018 Xavier Bachelot <xavier(a)bachelot.org> - 2.7.4-17
- Remove unrecognized configure option --without-hal
- Explicitely disable tcpwrapper support
- Remove unneeded CRLF EOL fix
- Add BR: cppunit-devel
* Wed Mar 7 2018 Michal Hlavinka <mhlavink(a)redhat.com> - 2.7.4-16
- add gcc buildrequire
* Wed Feb 14 2018 Iryna Shcherbina <ishcherb(a)redhat.com> - 2.7.4-15
- Update Python 2 dependency declarations to new packaging standards
(See
https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1568066 - Can't run upscmd because of tcpwrapper
https://bugzilla.redhat.com/show_bug.cgi?id=1568066
--------------------------------------------------------------------------------
================================================================================
perl-Test-Script-1.25-1.fc28 (FEDORA-2018-8e216c5cfa)
Cross-platform basic tests for scripts
--------------------------------------------------------------------------------
Update Information:
Upstream update.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 3 2018 Ralf Cors��pius <corsepiu(a)fedoraproject.org> - 1.25-1
- Update to 1.25.
--------------------------------------------------------------------------------
================================================================================
php-symfony3-3.4.17-1.fc28 (FEDORA-2018-7e707148d4)
Symfony PHP framework (version 3)
--------------------------------------------------------------------------------
Update Information:
**Version 3.4.17** (2018-10-03) * bug #28604 [Finder] fixed root directory
access for ftp/sftp wrapper (DerDu) * bug #28688 [FWBundle] Throw if
PropertyInfo is enabled, but the component isn't installed (dunglas) * bug
#28648 [PHPUnitBridge] Fix ClockMock microtime() format (acasademont) * bug
#28678 [DI] fix dumping setters before their inlined instances (nicolas-grekas)
* bug #28672 [DI] fix error in dumped container (nicolas-grekas) * bug #28664
[Console] Don't return early as this bypasses the auto exit feature (duncan3dc)
---- **Version 3.4.16** (2018-09-30) * bug #28376 [TwigBundle] Fixed caching
of templates in src/Resources/<BundleName>/views on cache warmup (yceruto) *
bug #28565 [HttpFoundation][Security] forward locale and format to subrequests
(nicolas-grekas) * bug #28561 [Cache] prevent getting older entries when the
version key is evicted (nicolas-grekas) * bug #28562 [HttpFoundation] fix
hidding warnings from session handlers (nicolas-grekas) * bug #28545 [Console]
Send the right exit code to console.terminate listeners (mpdude) * bug #28553
[Debug] Fix false-positive "MicroKernelTrait::loadRoutes()" method is
considered
internal" (nicolas-grekas) * bug #28466 [Form] fail reverse transforming
invalid RFC 3339 dates (xabbuh) * bug #28540 [Intl] parse numbers terminated
with decimal separator (xabbuh) * bug #28548 [Console] Fixed boxed table style
with colspan (ro0NL) * bug #28433 [HttpFoundation] Allow reuse of Session
between requests if ID did not change (tgalopin) * bug #28508 [Form] forward
false label option to nested types (xabbuh) * bug #28471 [MonologBridge] Re-add
option option to ignore empty context and extra data (mpdude) * bug #28464
[Form] forward the invalid_message option in date types (xabbuh) * bug #28524
[PhpUnitBridge] fix disabling DeprecationErrorHandler using phpunit.xml file
(soerenbernstein) * bug #28512 [DI] fix infinite loop involving self-references
in decorated services (nicolas-grekas) * bug #28507 [DI] fix dumping lazy
services (nicolas-grekas) * bug #28495 [PhpUnitBridge] Implement startTest
rather than startTestSuite (greg0ire) * bug #28480 [DI] Detect circular
references with ChildDefinition parent (Seb33300) * bug #28497 [VarDumper] Fix
global dump function return value for PHP7 (patrickcarlohickman) * bug #28499
[Ldap] Use shut up operator on connection errors at ldap_start_tls (Andras
Debreczeni) * bug #28372 [Form] Fix DateTimeType html5 input format
(franzwilding, mcfedr) * bug #28396 [Intl] Blacklist Eurozone and United
Nations in Region Data Generator (gregurco) * bug #28393 [Console] fixed
corrupt error output for unknown multibyte short option (downace) * bug #28411
[Debug] fix detecting overriden final/internal methods implemented using traits
(nicolas-grekas) * bug #28404 [Controller][ServiceValueResolver] Making method
access case insensitive (nicoweb) * bug #28401 [Console] Fix
SymfonyQuestionHelper::askQuestion() with choice value as default (chalasr) *
bug #28388 [DI] configure inlined services before injecting them when dumping
the container (nicolas-grekas) * bug #28377 fix fopen flags (SpacePossum) *
bug #27764 [TwigBundle] Fixed caching of templates in default path on cache
warmup (yceruto) * bug #28366 [DI] Fix dumping some complex service graphs
(nicolas-grekas) * bug #27970 [FileValidator] Format file size in validation
message according to binaryFormat option (jfredon) * bug #28029 [TwigBundle]
remove cache warmers when Twig cache is disabled (xabbuh) * bug #28344
[HttpKernel][FrameworkBundle] Fix escaping of serialized payloads passed to test
clients (nicolas-grekas) * bug #28183 [WebProfilerBundle] fix wrong url when
base path is the index (ismail1432)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 3 2018 Remi Collet <remi(a)remirepo.net> - 3.4.17-1
- update to 3.4.17
* Mon Oct 1 2018 Remi Collet <remi(a)remirepo.net> - 3.4.16-1
- update to 3.4.16
--------------------------------------------------------------------------------
================================================================================
python-PyGithub-1.39-4.fc28 (FEDORA-2018-c8cdb49e5d)
Python library to work with the Github API
--------------------------------------------------------------------------------
Update Information:
- Require python-jwt on RHEL, python2-jwt on Fedora rhbz#1634082 - Add patch0 to
ensure comments are included in create_review method rhbz#1633197
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 3 2018 Carl George <carl(a)george.computer> - 1.39-4
- Require python-jwt on RHEL, python2-jwt on Fedora rhbz#1634082
- Add patch0 to ensure comments are included in create_review method rhbz#1633197
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.39-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 1.39-2
- Rebuilt for Python 3.7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1634082 - requires python2-jwt but base has python-jwt
https://bugzilla.redhat.com/show_bug.cgi?id=1634082
[ 2 ] Bug #1633197 - Line comments are not posted in create_review()
https://bugzilla.redhat.com/show_bug.cgi?id=1633197
--------------------------------------------------------------------------------
================================================================================
python-couchbase-2.5.0-1.fc28 (FEDORA-2018-35c50be870)
Python client for Couchbase server
--------------------------------------------------------------------------------
Update Information:
# Update to 2.5.0 API Docs:
http://docs.couchbase.com/sdk-api/couchbase-python-
client-2.5.0/ ## Enhancements *
[
PYCBC-523](https://issues.couchbase.com/browse/PYCBC-523) - add parameterized
query support for analytics *
[
PYCBC-524](https://issues.couchbase.com/browse/PYCBC-524) - Update Analytics
support for beta * [
PYCBC-526](https://issues.couchbase.com/browse/PYCBC-526) -
Add N1QL query metrics option and server results ## Fixes *
[
PYCBC-528](https://issues.couchbase.com/browse/PYCBC-528) - Handle keyless
exceptions in multiresult
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 3 2018 Sergey Avseyev <sergey.avseyev(a)gmail.com> - 2.5.0-1
- Update to 2.5.0
--------------------------------------------------------------------------------
================================================================================
sec-2.8.1-0.fc28 (FEDORA-2018-9043c8c0b7)
Simple Event Correlator script to filter log file entries
--------------------------------------------------------------------------------
Update Information:
New upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 3 2018 Stefan Schulze Frielinghaus <stefansf(a)fedoraproject.org> -
2.8.1-0
- New upstream release
--------------------------------------------------------------------------------
================================================================================
shaderc-2018.0-1.fc28 (FEDORA-2018-4787ebb509)
A collection of tools, libraries, and tests for Vulkan shader compilation
--------------------------------------------------------------------------------
Update Information:
Release 2018.0 ---- Initial build
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1632243 - Review Request: shaderc - A collection of tools, libraries, and
tests for Vulkan shader compilation
https://bugzilla.redhat.com/show_bug.cgi?id=1632243
--------------------------------------------------------------------------------
================================================================================
syncthing-0.14.51-1.fc28 (FEDORA-2018-94b5b1ad70)
Continuous File Synchronization
--------------------------------------------------------------------------------
Update Information:
Update syncthing to version 0.14.51. Release notes:
https://github.com/syncthing/syncthing/releases/tag/v0.14.51 Update rollinghash
to version 4.0.0 and adapt syncthing to the slightly changed behaviour. Release
notes:
https://github.com/chmduquesne/rollinghash#whats-new-in-v4 Initial
packaging of gopkg.in/asn1-ber.v1 and gopkg.in/ldap.v2, which are new
dependencies of syncthing 0.14.51.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 2 2018 Fabio Valentini <decathorpe(a)gmail.com> - 0.14.51-1
- Update to version 0.14.51.
* Sun Sep 30 2018 Fabio Valentini <decathorpe(a)gmail.com> - 0.14.50-2
- Adapt to rollinghash v4.0.0 changes.
--------------------------------------------------------------------------------
================================================================================
wingpanel-indicator-bluetooth-2.1.1-1.fc28 (FEDORA-2018-f53bfc8c62)
Bluetooth Indicator for wingpanel
--------------------------------------------------------------------------------
Update Information:
Update to version 2.1.1. Release notes:
https://github.com/elementary
/wingpanel-indicator-bluetooth/releases/tag/2.1.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 3 2018 Fabio Valentini <decathorpe(a)gmail.com> - 2.1.1-1
- Update to version 2.1.1.
--------------------------------------------------------------------------------
================================================================================
wingpanel-indicator-network-2.2.1-1.fc28 (FEDORA-2018-064db1ec4f)
Network Indicator for wingpanel
--------------------------------------------------------------------------------
Update Information:
Update to version 2.2.1. Release notes:
https://github.com/elementary
/wingpanel-indicator-network/releases/tag/2.2.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 3 2018 Fabio Valentini <decathorpe(a)gmail.com> - 2.2.1-1
- Update to version 2.2.1.
--------------------------------------------------------------------------------
================================================================================
wingpanel-indicator-notifications-2.1.1-1.fc28 (FEDORA-2018-3202839e92)
Notifications Indicator for wingpanel
--------------------------------------------------------------------------------
Update Information:
Update to version 2.1.1. Release notes:
https://github.com/elementary
/wingpanel-indicator-notifications/releases/tag/2.1.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 3 2018 Fabio Valentini <decathorpe(a)gmail.com> - 2.1.1-1
- Update to version 2.1.1.
--------------------------------------------------------------------------------
================================================================================
xerces-c27-2.7.0-28.fc28 (FEDORA-2018-cc4b7af297)
Validating XML Parser
--------------------------------------------------------------------------------
Update Information:
Fixes for CVE-2016-4463 and CVE-2017-12627.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 8 2018 Xavier Bachelot <xavier(a)bachelot.org> - 2.7.0-28
- Clean up spec.
- Add patch for CVE-2016-4463 (RHBZ#1351469).
- Add patch for CVE-2017-12627 (RHBZ#1551526).
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.7.0-27
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1551526 - CVE-2017-12627 xerces-c27: xerces-c: Null pointer dereference while
processing the path to DTD allows denial of service [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1551526
[ 2 ] Bug #1351469 - CVE-2016-4463 xerces-c27: xerces-c: Stack overflow when parsing
deeply nested DTD [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1351469
--------------------------------------------------------------------------------