The following Fedora 28 Security updates need testing:
Age URL
222
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d510cfd7eb
jgraphx-3.6.0.0-6.fc28
172
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d7aeaa74da
nodejs-brace-expansion-1.1.11-1.fc28
170
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc073fdc1a
nodejs-atob-2.1.1-1.fc28
163
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9dd3f7c013
unrtf-0.21.9-8.fc28
131
https://bodhi.fedoraproject.org/updates/FEDORA-2018-28e9841baf
docker-latest-1.13.1-37.git9cb56fd.fc28
46
https://bodhi.fedoraproject.org/updates/FEDORA-2018-cc4b7af297
xerces-c27-2.7.0-28.fc28
24
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7d748596e9
drupal8-8.6.2-1.fc28
20
https://bodhi.fedoraproject.org/updates/FEDORA-2018-18023f40fa
drupal7-7.60-2.fc28
20
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2d2739ebed
php-Smarty2-2.6.31-2.fc28
18
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2ee55d77c9 links-2.17-1.fc28
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a5d1fa335e
gettext-0.19.8.1-18.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2c8db7357b
chromium-70.0.3538.77-4.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8f0d2429d3 bird-1.6.4-2.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-89413a04e0
wireshark-2.6.4-1.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-02e965a729
rubygem-rack-2.0.4-4.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-86e2487df2
pdns-recursor-4.1.7-1.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-713f4ce1c7
libconfuse-3.2.2-1.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d716df9942
rubygem-loofah-2.0.3-6.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b0d6ae1959
python-urllib3-1.24.1-2.fc28
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-67a6bf4ac1
libtiff-4.0.10-1.fc28
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-af9bd28cf1
glusterfs-4.1.6-1.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b4820696e1
community-mysql-5.7.24-1.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1621b2204a
kernel-tools-4.19.2-200.fc28 kernel-headers-4.19.2-200.fc28 kernel-4.19.2-200.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-aadd3c2790
mupdf-1.14.0-6.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f73869d61e
php-PHPMailer-5.2.27-1.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-0f5e6e9957
php-phpmailer6-6.0.6-1.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4d68cf2b1c
flatpak-1.0.6-1.fc28
The following Fedora 28 Critical Path updates have yet to be approved:
Age URL
13
https://bodhi.fedoraproject.org/updates/FEDORA-2018-998a7b6fc3 ibus-1.5.19-8.fc28
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-de1faf9ca6
libtirpc-1.0.3-6.rc2.fc28
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-783dfc5196
shadow-utils-4.6-4.fc28
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a5d1fa335e
gettext-0.19.8.1-18.fc28
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a558274032
json-glib-1.4.4-1.fc28
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4ee0750c41 gjs-1.52.4-1.fc28
9
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f893865248
edk2-20180815gitcb5f4f45ce-2.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b0d6ae1959
python-urllib3-1.24.1-2.fc28
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-af9bd28cf1
glusterfs-4.1.6-1.fc28
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-67a6bf4ac1
libtiff-4.0.10-1.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1621b2204a
kernel-tools-4.19.2-200.fc28 kernel-headers-4.19.2-200.fc28 kernel-4.19.2-200.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4d68cf2b1c
flatpak-1.0.6-1.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c2c01c0a06 pam-1.3.1-8.fc28
The following builds have been pushed to Fedora 28 updates-testing
fedpkg-1.35-2.fc28
graphlcd-base-1.0.2-2.fc28
grilo-0.3.7-1.fc28
nextcloud-client-2.5.0-2.fc28
osinfo-db-20181116-1.fc28
pam_2fa-1.0-1.fc28
perl-FFI-CheckLib-0.23-1.fc28
perl-Net-Pcap-0.18-8.fc28
php-pecl-apcu-5.1.13-1.fc28
php-pecl-ds-1.2.7-1.fc28
php-pecl-redis4-4.2.0-1.fc28
python-fedmsg-meta-fedora-infrastructure-0.27.0-1.fc28
python-pygiftiio-1.0.4-2.fc28
speed-dreams-2.2.2-1.fc28
xed-2.0.0-1.fc28
xpad-5.2.0-1.fc28
xreader-2.0.0-1.fc28
Details about builds:
================================================================================
fedpkg-1.35-2.fc28 (FEDORA-2018-2071e70ed7)
Fedora utility for working with dist-git
--------------------------------------------------------------------------------
Update Information:
Add mssing require python3-setuptools
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 17 2018 Chenxiong Qi <cqi(a)redhat.com> - 1.35-2
- Add mssing require python3-setuptools
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1629596 - fedpkg ModuleNotFoundError: No module named
'pkg_resources'
https://bugzilla.redhat.com/show_bug.cgi?id=1629596
--------------------------------------------------------------------------------
================================================================================
graphlcd-base-1.0.2-2.fc28 (FEDORA-2018-a6024b1344)
GraphLCD drivers and tools
--------------------------------------------------------------------------------
Update Information:
- Add BR gcc-c++ - Add BR pkgconfig(freetype2) - License is GPLv2+ not GPL+ -
Convert HISTORY file to utf-8
--------------------------------------------------------------------------------
================================================================================
grilo-0.3.7-1.fc28 (FEDORA-2018-2f5e72a448)
Content discovery framework
--------------------------------------------------------------------------------
Update Information:
Update to 0.3.7
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 19 2018 Victor Toso <victortoso(a)redhat.com> - 0.3.7-1
- Update to 0.3.7
--------------------------------------------------------------------------------
================================================================================
nextcloud-client-2.5.0-2.fc28 (FEDORA-2018-7255a8cc56)
The Nextcloud Client
--------------------------------------------------------------------------------
Update Information:
2.5.0 release. Please report any need to reconfigure login access mode
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 19 2018 Germano Massullo <germano(a)germanomassullo.org> - 2.5.0-2
- added ExcludeArch: ppc64, ppc64le, s390. Read
https://bugzilla.redhat.com/show_bug.cgi?id=1651261
* Thu Nov 15 2018 Germano Massullo <germano(a)germanomassullo.org> - 2.5.0-1
- 2.5.0 release
* Wed Aug 15 2018 Germano Massullo <germano.massullo(a)gmail.com> - 2.5.0-0.1
- 2.5.0 beta 1
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.4.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Tue Feb 13 2018 Germano Massullo <germano.massullo(a)gmail.com> - 2.4.0-1
- 2.4.0 release
- Updated syslibs patch, thanks to Robert-Andr�� Mauchin
- Added comment to syslibs patch, thanks to Robert-Andr�� Mauchin
- updated nextcloud client theming to 2.3.3
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.3.3-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1649714 - nextcloud-client-2.5.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1649714
[ 2 ] Bug #1647091 - Nautilus integration not working/shows nothing
https://bugzilla.redhat.com/show_bug.cgi?id=1647091
[ 3 ] Bug #1563520 - dependency for nextcloud-client will switch to python3
https://bugzilla.redhat.com/show_bug.cgi?id=1563520
[ 4 ] Bug #1487701 - Window isn't shown when the app is launched
https://bugzilla.redhat.com/show_bug.cgi?id=1487701
[ 5 ] Bug #1638347 - Please port nextcloud-client-nemo support to python3
https://bugzilla.redhat.com/show_bug.cgi?id=1638347
--------------------------------------------------------------------------------
================================================================================
osinfo-db-20181116-1.fc28 (FEDORA-2018-d169dbb09d)
osinfo database files
--------------------------------------------------------------------------------
Update Information:
Update to new release
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 19 2018 Fabiano Fid��ncio <fidencio(a)redhat.org> - 20181116-1
- Update to new release
--------------------------------------------------------------------------------
================================================================================
pam_2fa-1.0-1.fc28 (FEDORA-2018-127affe1d7)
Second factor authentication for PAM
--------------------------------------------------------------------------------
Update Information:
The PAM 2FA module provides a second factor authentication, which can be
combined with the standard PAM-based password authentication to ask for: *
What you know: user account password ( standard PAM modules ) * What you have
(pick one of): (PAM 2FA) + A Google Authenticator Application on your phone
+ A Phone Number capable of receiving SMS + A Yubikey pam_ssh_user_auth
checks the value of SSH_USER_AUTH and will return success if is non-empty and
failure if it is. It can be used to skip other PAM authentication methods with
a configuration like: auth [success=1 ignore=ignore default=die]
pam_ssh_user_auth.so auth substack password-auth
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1650633 - Review Request: pam_2fa - Second factor authentication for PAM
https://bugzilla.redhat.com/show_bug.cgi?id=1650633
--------------------------------------------------------------------------------
================================================================================
perl-FFI-CheckLib-0.23-1.fc28 (FEDORA-2018-743cb3ece4)
Check that a library is available for FFI
--------------------------------------------------------------------------------
Update Information:
This release improves documentation.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 19 2018 Petr Pisar <ppisar(a)redhat.com> - 0.23-1
- 0.23 bump
* Mon Oct 15 2018 Jitka Plesnikova <jplesnik(a)redhat.com> - 0.22-1
- 0.22 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1651151 - Upgrade perl-FFI-CheckLib to 0.23
https://bugzilla.redhat.com/show_bug.cgi?id=1651151
--------------------------------------------------------------------------------
================================================================================
perl-Net-Pcap-0.18-8.fc28 (FEDORA-2018-b29814d978)
Interface to pcap(3) LBL packet capture library
--------------------------------------------------------------------------------
Update Information:
Fix build with libpcap-1.9.0
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 19 2018 Jitka Plesnikova <jplesnik(a)redhat.com> - 0.18-8
- Fix build with libpcap-1.9.0 (bug #1612860)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1612860 - perl-Net-Pcap-0.18-9.fc29 FTBFS: stubs.inc:357:8: error:
redefinition of 'struct pcap_rmtauth'
https://bugzilla.redhat.com/show_bug.cgi?id=1612860
--------------------------------------------------------------------------------
================================================================================
php-pecl-apcu-5.1.13-1.fc28 (FEDORA-2018-3c9d5b8195)
APC User Cache
--------------------------------------------------------------------------------
Update Information:
**Version 5.1.13** - Reimplement persistence logic using precise allocation
rather than memory pools. This reduces memory usage of cache entries, especially
for small values, and improves performance of persisting and unpersisting
values. - Fixed GH #335: Stampede protection is broken. - Fixed GH #328:
Segfault in apcu_key_info() if APCu is disabled. - Generally make the behavior
of functions if APCu is disabled more consistent. - Fixed PHP bug #72980: Empty
strings are now consistently allowed as cache keys. - Optimized apcu_key_info()
and apcu_cache_info() by using interned strings. - Fix build against PHP master
(PHP 7.4). - Many changes to internal C APIs.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 19 2018 Remi Collet <remi(a)remirepo.net> - 5.1.13-1
- update to 5.1.13 (stable)
--------------------------------------------------------------------------------
================================================================================
php-pecl-ds-1.2.7-1.fc28 (FEDORA-2018-3f12d217b4)
Data Structures for PHP
--------------------------------------------------------------------------------
Update Information:
**Version 1.2.7** - 2018-11-18 - Fixed pair reflection bugs. #119
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 19 2018 Remi Collet <remi(a)remirepo.net> - 1.2.7-1
- update to 1.2.7
--------------------------------------------------------------------------------
================================================================================
php-pecl-redis4-4.2.0-1.fc28 (FEDORA-2018-b11b078851)
Extension for communicating with the Redis key-value store
--------------------------------------------------------------------------------
Update Information:
**phpredis 4.2.0** The main feature of this release is new Streams API
implemented by Michael Grunder. Note: There are no changes between 4.2.0RC3 and
4.2.0. **4.2.0RC3:** * Optimize close method [2a1ef961] (fanjiapeng) * Prevent
potential infinite loop for sessions [4e2de158] (Pavlo Yatsukhnenko) * Fix
coverty warnings [6f7ddd27] (Pavlo Yatsukhnenko) * Fix session memory leaks
[071a1d54, 92f14b14] (Pavlo Yatsukhnenko, Michael Grunder) * Fix XCLAIM on
32-bit installs [18dc2aac] (Michael Grunder) * Build warning fixes [b5093910,
51027044, 8b0f28cd] (Pavlo Yatsukhnenko, Remi Collet, twosee) **4.2.0RC2:** *
Fix incorrect arginfo for `Redis::sRem` and `Redis::multi` [25b043ce] (Pavlo
Yatsukhnenko) * Update STREAM API to handle STATUS -> BULK reply change
[0b97ec37] (Michael Grunder) * Treat a -1 response from cluster_check_response
as a timeout. [27df9220, 07ef7f4e, d1172426] (Michael Grunder) * Use a ZSET
insted of SET for EVAL tests [2e412373] (Michael Grunder) * Missing space
between command and args [0af2a7fe] (@remicollet) **4.2.0RC1:** * Streams API
[2c9e0572] (Michael Grunder) * Reset the socket after a timeout to make sure no
wrong data is received [cd6ebc6d] (@marcdejonge) * Modify session testing logic
[bfd27471] (Michael Grunder) * Allow '-' and '+' arguments and add tests
for
zLexCount and zRemRangeByLex [d4a08697] (Michael Grunder) * Fix printf format
warnings [dcde9331] (Pavlo Yatsukhnenko) * Session module is required [58bd8cc8]
(@remicollet) * Set default values for ini entries [e206ce9c] (Pavlo
Yatsukhnenko) * Display ini entries in output of phpinfo [908ac4b3] (Pavlo
Yatsukhnenko) * Persistant connections can be closed via close method + change
reconnection logic [1d997873] (Pavlo Yatsukhnenko) * Documentation improvements
(@mg, @elcheco, @lucascourot, @nolimitdev, Michael Grunder)
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 18 2018 Remi Collet <remi(a)remirepo.net> - 4.2.0-1
- update to 4.2.0 (stable)
- temporarily disable test suite on s390x
--------------------------------------------------------------------------------
================================================================================
python-fedmsg-meta-fedora-infrastructure-0.27.0-1.fc28 (FEDORA-2018-93ae7be82e)
Metadata providers for Fedora Infrastructure's fedmsg deployment
--------------------------------------------------------------------------------
Update Information:
Update to 0.27.0 Change log can be found at:
https://github.com/fedora-
infra/fedmsg_meta_fedora_infrastructure/blob/develop/CHANGELOG.rst#0270 ----
Upgrade to 0.26.0 Changelog is at:
https://github.com/fedora-
infra/fedmsg_meta_fedora_infrastructure/blob/develop/CHANGELOG.rst#0260
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 19 2018 Pierre-Yves Chibon <pingou(a)pingoured.fr> - 0.27.0-1
- Upgrade to 0.27.0
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.26.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 0.26.0-2
- Rebuilt for Python 3.7
* Mon Jun 11 2018 Pierre-Yves Chibon <pingou(a)pingoured.fr> - 0.26.0-1
- Update to 0.26.0
* Tue May 29 2018 Pierre-Yves Chibon <pingou(a)pingoured.fr> - 0.25.0-2
- Fix the Requires in el6
--------------------------------------------------------------------------------
================================================================================
python-pygiftiio-1.0.4-2.fc28 (FEDORA-2018-625dee4559)
Python bindings for Gifti
--------------------------------------------------------------------------------
Update Information:
* New package!
https://www.nitrc.org/frs/?group_id=75
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1650947 - Review Request: python-pygiftiio - Python bindings for Gifti
https://bugzilla.redhat.com/show_bug.cgi?id=1650947
--------------------------------------------------------------------------------
================================================================================
speed-dreams-2.2.2-1.fc28 (FEDORA-2018-017ae00d08)
The Open Racing Car Simulator
--------------------------------------------------------------------------------
Update Information:
Update to 2.2.2-1
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 19 2018 Martin Gansser <martinkg(a)fedoraproject.org> - 1:2.2.2-1
- Update to 2.2.2
--------------------------------------------------------------------------------
================================================================================
xed-2.0.0-1.fc28 (FEDORA-2018-189a250423)
X-Apps [Text] Editor (Cross-DE, backward-compatible, GTK3, traditional UI)
--------------------------------------------------------------------------------
Update Information:
- Update
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 19 2018 Leigh Scott <leigh123linux(a)googlemail.com> - 2.0.0-1
- Update to 2.0.0 release
--------------------------------------------------------------------------------
================================================================================
xpad-5.2.0-1.fc28 (FEDORA-2018-58b4f508bd)
Sticky notepad for GTK
--------------------------------------------------------------------------------
Update Information:
Update to 5.2.0 with a few bugfixes.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 18 2018 Kevin Fenzi <kevin(a)scrye.com> - 5.2.0-1
- Update to 5.2.0.
--------------------------------------------------------------------------------
================================================================================
xreader-2.0.0-1.fc28 (FEDORA-2018-189a250423)
Simple document viewer
--------------------------------------------------------------------------------
Update Information:
- Update
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 19 2018 Leigh Scott <leigh123linux(a)googlemail.com> - 2.0.0-1
- Update to 2.0.0 release
--------------------------------------------------------------------------------