The following Fedora 28 Security updates need testing:
Age URL
226
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d510cfd7eb
jgraphx-3.6.0.0-6.fc28
175
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d7aeaa74da
nodejs-brace-expansion-1.1.11-1.fc28
174
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc073fdc1a
nodejs-atob-2.1.1-1.fc28
167
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9dd3f7c013
unrtf-0.21.9-8.fc28
135
https://bodhi.fedoraproject.org/updates/FEDORA-2018-28e9841baf
docker-latest-1.13.1-37.git9cb56fd.fc28
50
https://bodhi.fedoraproject.org/updates/FEDORA-2018-cc4b7af297
xerces-c27-2.7.0-28.fc28
27
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7d748596e9
drupal8-8.6.2-1.fc28
23
https://bodhi.fedoraproject.org/updates/FEDORA-2018-18023f40fa
drupal7-7.60-2.fc28
23
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2d2739ebed
php-Smarty2-2.6.31-2.fc28
22
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2ee55d77c9 links-2.17-1.fc28
14
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a5d1fa335e
gettext-0.19.8.1-18.fc28
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2c8db7357b
chromium-70.0.3538.77-4.fc28
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8f0d2429d3 bird-1.6.4-2.fc28
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-89413a04e0
wireshark-2.6.4-1.fc28
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-02e965a729
rubygem-rack-2.0.4-4.fc28
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-86e2487df2
pdns-recursor-4.1.7-1.fc28
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d716df9942
rubygem-loofah-2.0.3-6.fc28
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-af9bd28cf1
glusterfs-4.1.6-1.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b4820696e1
community-mysql-5.7.24-1.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-aadd3c2790
mupdf-1.14.0-6.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f73869d61e
php-PHPMailer-5.2.27-1.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-0f5e6e9957
php-phpmailer6-6.0.6-1.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4d68cf2b1c
flatpak-1.0.6-1.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-997a9e3e1f xen-4.10.2-4.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-aa3752ac3c
nginx-1.14.1-1.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-96b48b34ae
mingw-uriparser-0.9.0-1.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a3ef0a026f
uriparser-0.9.0-1.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f4910a3260
moodle-3.4.6-1.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b9581d9624
python-notebook-5.5.0-6.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b74b9ac8d1 tmux-2.8-2.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ef486b9e50
dnsdist-1.3.3-1.fc28
The following Fedora 28 Critical Path updates have yet to be approved:
Age URL
17
https://bodhi.fedoraproject.org/updates/FEDORA-2018-998a7b6fc3 ibus-1.5.19-8.fc28
14
https://bodhi.fedoraproject.org/updates/FEDORA-2018-de1faf9ca6
libtirpc-1.0.3-6.rc2.fc28
14
https://bodhi.fedoraproject.org/updates/FEDORA-2018-783dfc5196
shadow-utils-4.6-4.fc28
14
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a5d1fa335e
gettext-0.19.8.1-18.fc28
13
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f893865248
edk2-20180815gitcb5f4f45ce-2.fc28
13
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a558274032
json-glib-1.4.4-1.fc28
13
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4ee0750c41 gjs-1.52.4-1.fc28
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-af9bd28cf1
glusterfs-4.1.6-1.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4d68cf2b1c
flatpak-1.0.6-1.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c2c01c0a06 pam-1.3.1-8.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-997a9e3e1f xen-4.10.2-4.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-183750cf72
mesa-demos-8.4.0-1.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2f5e72a448 grilo-0.3.7-1.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d169dbb09d
osinfo-db-20181116-1.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7cf713da0d
kernel-headers-4.19.3-200.fc28 kernel-tools-4.19.3-200.fc28 kernel-4.19.3-200.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ec86b4414f
xorg-x11-drv-ati-18.1.0-1.fc28
The following builds have been pushed to Fedora 28 updates-testing
buildah-1.5-2.gite94b4f9.fc28
corosync-qdevice-2.93.0-1.fc28
dist-git-1.9-1.fc28
firefox-63.0.3-2.fc28
hpx-1.2.0-4.fc28
icedtea-web-1.7.1-10.fc28
libcouchbase-2.10.2-1.fc28
mycli-1.19.0-1.fc28
mysqltuner-1.7.13-1.git.59e5f40.fc28
nnn-2.1-1.fc28
python-cached_property-1.5.1-1.fc28
python-djangoql-0.12.3-1.fc28
python3-3.6.7-2.fc28
quodlibet-4.2.0-1.fc28
thunderbird-60.3.1-1.fc28
Details about builds:
================================================================================
buildah-1.5-2.gite94b4f9.fc28 (FEDORA-2018-907d1ef691)
A command line tool used for creating OCI Images
--------------------------------------------------------------------------------
Update Information:
New Version
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 22 2018 Dan Walsh <dwalsh(a)redhat.com> - 1.5-1.gite94b4f98
- bump to v1.5 Release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1636383 - Images build by buildah and run by podman under regular user
can't use CMD or ENTRYPOINT
https://bugzilla.redhat.com/show_bug.cgi?id=1636383
--------------------------------------------------------------------------------
================================================================================
corosync-qdevice-2.93.0-1.fc28 (FEDORA-2018-fcbf2fe0f8)
The Corosync Cluster Engine Qdevice
--------------------------------------------------------------------------------
Update Information:
This update improves stability and addresses several bugs
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 23 2018 Jan Friesse <jfriesse(a)redhat.com> - 2.93.0-1
- New upstream release
--------------------------------------------------------------------------------
================================================================================
dist-git-1.9-1.fc28 (FEDORA-2018-fe6f4f1a63)
Package source version control system
--------------------------------------------------------------------------------
Update Information:
- do not create sources file when creating a repo - set umask 0002 in all
available dist-git scripts - Use REMOTE_USER as fallback for GSS_NAME - add
support for setting mtime for an uploaded file
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 23 2018 clime <clime(a)redhat.com> 1.9-1
- do not create sources file when creating a repo
- set umask 0002 in all available dist-git scripts
- Use REMOTE_USER as fallback for GSS_NAME
- add support for setting mtime for an uploaded file
* Tue Aug 14 2018 clime <clime(a)redhat.com> 1.8-1
- add disable group check option
- add lookaside_dir option
- deprecate cache_dir
- fix python-grokmirror dep
--------------------------------------------------------------------------------
================================================================================
firefox-63.0.3-2.fc28 (FEDORA-2018-9912804951)
Mozilla Firefox Web browser
--------------------------------------------------------------------------------
Update Information:
This update fixes firefox-wayland crashes when display configuration changes
(monitor added/removed).
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 21 2018 Martin Stransky <stransky(a)redhat.com> - 63.0.3-2
- Fixed mozbz#1507475 - crash when display changes (rhbz#1646151).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1647776 - Firefox-wayland crashes on display switch
https://bugzilla.redhat.com/show_bug.cgi?id=1647776
--------------------------------------------------------------------------------
================================================================================
hpx-1.2.0-4.fc28 (FEDORA-2018-9da04dcdf5)
General Purpose C++ Runtime System
--------------------------------------------------------------------------------
Update Information:
Use python3 ---- Initial import
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1649874 - Review Request: hpx - a general purpose C++ runtime system for
parallel and distributed applications of any scale
https://bugzilla.redhat.com/show_bug.cgi?id=1649874
--------------------------------------------------------------------------------
================================================================================
icedtea-web-1.7.1-10.fc28 (FEDORA-2018-b063d1cacc)
Additional Java components for OpenJDK - Java browser plug-in and Web Start
implementation
--------------------------------------------------------------------------------
Update Information:
Small update adding changes form future 1.7.2, generally enabling applciations
like omegat or oracle webforms
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
libcouchbase-2.10.2-1.fc28 (FEDORA-2018-e110b5f3ab)
Client and protocol library for the Couchbase project
--------------------------------------------------------------------------------
Update Information:
### Update to upstream 2.10.2 * Fixed incorrect header-guard for analytics.h,
which might affect API visibility (when included before `libcouchbase/n1ql.h`)
### Update to upstream 2.10.1 *
[
CCBC-997](https://issues.couchbase.com/browse/CCBC-997): Extract analytics
queries into separate file, and expose new API as set of `lcb_analytics_*`
functions. * [
CCBC-992](https://issues.couchbase.com/browse/CCBC-992): KV
ingest mode for analytics. Ingestion mode a way to funnel analytics results back
into the KV layer through mutation. *
[
CCBC-991](https://issues.couchbase.com/browse/CCBC-991): Analytics Deferred
Queries. Deferred queries allow to decouple the execution of an analytics query
from actually fetching the results. This is very important for queries that take
a long time to complete. *
[
CCBC-1004](https://issues.couchbase.com/browse/CCBC-1004): Fix request counting
for CAS-observe. Incorrect mapping server indexes during scheduling observe
requests might lead to crashes on multi-node clusters. *
[
CCBC-1005](https://issues.couchbase.com/browse/CCBC-1005): `select(2)`-based IO
plugin: always use expiration when using `lcb_tick_nowait` function to avoid
waiting for IO events.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 23 2018 Sergey Avseyev <sergey.avseyev(a)gmail.com> - 2.10.2-1
- Update to 2.10.2
* Fri Nov 23 2018 Sergey Avseyev <sergey.avseyev(a)gmail.com> - 2.10.1-1
- Update to 2.10.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1652833 - libcouchbase-2.10.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1652833
--------------------------------------------------------------------------------
================================================================================
mycli-1.19.0-1.fc28 (FEDORA-2018-a9bc193501)
Interactive CLI for MySQL Database with auto-completion and syntax highlighting
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release mycli 1.19.0.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 19 2018 Terje Rosten <terje.rosten(a)ntnu.no> - 1.19.0-1
- 1.19.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1651078 - A new version of mycli has been released (1.19.0)
https://bugzilla.redhat.com/show_bug.cgi?id=1651078
--------------------------------------------------------------------------------
================================================================================
mysqltuner-1.7.13-1.git.59e5f40.fc28 (FEDORA-2018-835cfdbddf)
MySQL configuration assistant
--------------------------------------------------------------------------------
Update Information:
fix build
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 23 2018 josef radinger <cheese(a)nosuchhost.net> - 1.7.13-1.git.59e5f40
- fix build
- fix version
--------------------------------------------------------------------------------
================================================================================
nnn-2.1-1.fc28 (FEDORA-2018-0f3911ae0d)
The missing terminal file browser for X
--------------------------------------------------------------------------------
Update Information:
Release 2.1 ---- Release 2.0
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 23 2018 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 2.1-1
- Release 2.1
* Fri Oct 19 2018 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 2.0-1
- Release 2.0
--------------------------------------------------------------------------------
================================================================================
python-cached_property-1.5.1-1.fc28 (FEDORA-2018-b3dc184083)
A cached-property for decorating methods in Python classes
--------------------------------------------------------------------------------
Update Information:
This update provides the latest upstream release, which includes `asyncio`
support for recent Python releases. See the [upstream
changelog](https://github.com/pydanny/cached-property/blob/master/HISTORY...
for more details. There should be no backwards-incompatible changes.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 23 2018 Adam Williamson <awilliam(a)redhat.com> - 1.5.1-1
- New release 1.5.1
- Disable Python 2 build on F30+, EL8+
* Fri Nov 23 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 1.4.3-1
- Update to 1.4.3 (used by pipenv)
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.0-13
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 1.3.0-12
- Rebuilt for Python 3.7
* Sun Feb 11 2018 Iryna Shcherbina <ishcherb(a)redhat.com> - 1.3.0-11
- Update Python 2 dependency declarations to new packaging standards
(See
https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)
--------------------------------------------------------------------------------
================================================================================
python-djangoql-0.12.3-1.fc28 (FEDORA-2018-f459aa6445)
DjangoQL: Advanced search language for Django
--------------------------------------------------------------------------------
Update Information:
New release 0.12.3
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 23 2018 Viliam Krizan <vkrizan(a)redhat.com> 0.12.3-1
- New release 0.12.3
* Sun Nov 18 2018 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 0.12.0-2
- Drop explicit locale setting
See
https://fedoraproject.org/wiki/Changes/Remove_glibc-langpacks-all_from_bu...
--------------------------------------------------------------------------------
================================================================================
python3-3.6.7-2.fc28 (FEDORA-2018-5ed8fb9efa)
Interpreter of the Python programming language
--------------------------------------------------------------------------------
Update Information:
Update to 3.6.7 Security fix for CVE-2018-14647
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 23 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 3.6.7-2
- Make sure the entire test.support module is in python3-libs (#1651245)
* Mon Oct 22 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 3.6.7-1
- Update to 3.6.7
* Fri Aug 10 2018 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 3.6.6-3
- Fix wrong requirement on gdbm
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.6.6-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1631822 - CVE-2018-14647 python: Missing salt initialization in
_elementtree.c module
https://bugzilla.redhat.com/show_bug.cgi?id=1631822
--------------------------------------------------------------------------------
================================================================================
quodlibet-4.2.0-1.fc28 (FEDORA-2018-e8f830f6fb)
A music management program
--------------------------------------------------------------------------------
Update Information:
- update to 4.2.0 -
https://quodlibet.readthedocs.io/en/latest/changelog.html#staffed-by-the-...
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 23 2018 Johannes Lips <hannes(a)fedoraproject.org> - 4.2.0-1
- update to recent upstream release 4.2.0
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.1.0-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Tue Jun 26 2018 Johannes Lips <hannes(a)fedoraproject.org> - 4.1.0-3
- Rebuilt for Python 3.7 site-tag
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 4.1.0-2
- Rebuilt for Python 3.7
--------------------------------------------------------------------------------
================================================================================
thunderbird-60.3.1-1.fc28 (FEDORA-2018-02374556d9)
Mozilla Thunderbird mail/newsgroup client
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream version.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 22 2018 Jan Horak <jhorak(a)redhat.com> - 60.3.1-1
- Update to 60.3.1
* Thu Nov 22 2018 Martin Stransky <stransky(a)redhat.com> - 60.3.0-6
- Enabled DBus remote.
* Wed Nov 21 2018 Martin Stransky <stransky(a)redhat.com> - 60.3.0-5
- Backported Wayland related code from Firefox 63
- Added fix for mozbz#1507475 - crash when display changes
* Tue Nov 20 2018 Martin Stransky <stransky(a)redhat.com> - 60.3.0-4
- Build with Wayland support
- Enabled DBus remote for Wayland
* Tue Nov 13 2018 Caol��n McNamara <caolanm(a)redhat.com> - 60.3.0-3
- rebuild for hunspell-1.7.0
* Tue Nov 6 2018 Martin Stransky <stransky(a)redhat.com> - 60.3.0-2
- Disabled DBus remote
--------------------------------------------------------------------------------