The following Fedora 28 Security updates need testing: Age URL 73 https://bodhi.fedoraproject.org/updates/FEDORA-2018-d510cfd7eb jgraphx-3.6.0.0-6.fc28 45 https://bodhi.fedoraproject.org/updates/FEDORA-2018-c75a37ae9b blktrace-1.2.0-6.fc28 33 https://bodhi.fedoraproject.org/updates/FEDORA-2018-202c536f70 gifsicle-1.91-1.fc28 23 https://bodhi.fedoraproject.org/updates/FEDORA-2018-d7aeaa74da nodejs-brace-expansion-1.1.11-1.fc28 21 https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc073fdc1a nodejs-atob-2.1.1-1.fc28 16 https://bodhi.fedoraproject.org/updates/FEDORA-2018-57a9f93beb sox-14.4.2.0-22.fc28 15 https://bodhi.fedoraproject.org/updates/FEDORA-2018-9dd3f7c013 unrtf-0.21.9-8.fc28 14 https://bodhi.fedoraproject.org/updates/FEDORA-2018-049dee041d mupdf-1.13.0-8.fc28 10 https://bodhi.fedoraproject.org/updates/FEDORA-2018-6d87dc56e0 libgxps-0.3.0-5.fc28 10 https://bodhi.fedoraproject.org/updates/FEDORA-2018-866bd0e3c2 dcraw-9.28.0-1.fc28 10 https://bodhi.fedoraproject.org/updates/FEDORA-2018-f972c1b36e python-XStatic-jquery-ui-1.12.0.1-2.fc28 9 https://bodhi.fedoraproject.org/updates/FEDORA-2018-0e72ef852a libjpeg-turbo-1.5.3-5.fc28 8 https://bodhi.fedoraproject.org/updates/FEDORA-2018-d3cb6f113c xen-4.10.1-4.fc28 6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-0c9ce03fce cri-o-1.10.3-1.gite558bd5.fc28 2 https://bodhi.fedoraproject.org/updates/FEDORA-2018-68349e3094 phpMyAdmin-4.8.2-1.fc28 2 https://bodhi.fedoraproject.org/updates/FEDORA-2018-5c8854a808 qutebrowser-1.3.3-1.fc28 1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-2b96ea9fec podman-0.6.4-1.gitd5beb2f.fc28
The following Fedora 28 Critical Path updates have yet to be approved: Age URL 23 https://bodhi.fedoraproject.org/updates/FEDORA-2018-80b606cb29 seabios-1.11.1-1.fc28 21 https://bodhi.fedoraproject.org/updates/FEDORA-2018-94ac0eace1 iproute-4.16.0-1.fc28 12 https://bodhi.fedoraproject.org/updates/FEDORA-2018-4b709ebc5e lorax-28.15-1.fc28 12 https://bodhi.fedoraproject.org/updates/FEDORA-2018-940ac53cb8 sssd-1.16.2-1.fc28 11 https://bodhi.fedoraproject.org/updates/FEDORA-2018-6a92e4f47a glusterfs-4.1.0-1.fc28 11 https://bodhi.fedoraproject.org/updates/FEDORA-2018-2013948e52 osinfo-db-20180612-1.fc28 10 https://bodhi.fedoraproject.org/updates/FEDORA-2018-8683c6de9b totem-pl-parser-3.26.1-1.fc28 10 https://bodhi.fedoraproject.org/updates/FEDORA-2018-0075e05ecb perl-Time-Local-1.280-1.fc28 10 https://bodhi.fedoraproject.org/updates/FEDORA-2018-6d87dc56e0 libgxps-0.3.0-5.fc28 10 https://bodhi.fedoraproject.org/updates/FEDORA-2018-9d3adb3c1f libgweather-3.28.2-1.fc28 9 https://bodhi.fedoraproject.org/updates/FEDORA-2018-0e72ef852a libjpeg-turbo-1.5.3-5.fc28 8 https://bodhi.fedoraproject.org/updates/FEDORA-2018-d3cb6f113c xen-4.10.1-4.fc28 4 https://bodhi.fedoraproject.org/updates/FEDORA-2018-583469bc5d python-productmd-1.15-1.fc28 4 https://bodhi.fedoraproject.org/updates/FEDORA-2018-066a9994da texinfo-6.5-4.fc28 4 https://bodhi.fedoraproject.org/updates/FEDORA-2018-faae97d0c2 uboot-tools-2018.03-6.fc28 4 https://bodhi.fedoraproject.org/updates/FEDORA-2018-7a80d11d9e python-rpm-macros-3-29.fc28 3 https://bodhi.fedoraproject.org/updates/FEDORA-2018-6273284476 gdb-8.1-18.fc28 3 https://bodhi.fedoraproject.org/updates/FEDORA-2018-e993db60cc edk2-20180529gitee3198e672e2-2.fc28 2 https://bodhi.fedoraproject.org/updates/FEDORA-2018-432d895be2 vim-8.1.095-1.fc28 2 https://bodhi.fedoraproject.org/updates/FEDORA-2018-44436d4611 exo-0.12.2-1.fc28 xfce4-settings-4.12.4-1.fc28 2 https://bodhi.fedoraproject.org/updates/FEDORA-2018-4d3e89e651 xorg-x11-xkb-utils-7.7-26.fc28 2 https://bodhi.fedoraproject.org/updates/FEDORA-2018-d384eab19a ostree-2018.6-3.fc28 1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-0ca2efd3f6 pulseaudio-12.0-1.fc28 1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-4fe9bf6535 lvm2-2.02.177-5.fc28 1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-05713c82c6 iso-codes-3.79-1.fc28
The following builds have been pushed to Fedora 28 updates-testing
dtc-1.4.6-5.fc28 golang-github-minio-6.0.2-1.fc28 inn-2.6.2-1.fc28 knemo-0.7.7-8.20170520git.fc28 libreoffice-6.0.5.2-1.fc28 perl-CPAN-Perl-Releases-3.66-1.fc28 perl-Devel-Size-0.82-1.fc28 python-lz4-2.0.1-1.fc28 python-pycdlib-1.5.0-1.fc28 python-tld-0.7.9-7.fc28 quentier-0.4.0-0.4.20180622.git5a92775.fc28 timeshift-18.6.1-1.fc28 wpa_supplicant-2.6-16.fc28
Details about builds:
================================================================================ dtc-1.4.6-5.fc28 (FEDORA-2018-a89957bdb7) Device Tree Compiler -------------------------------------------------------------------------------- Update Information:
Add static library package, see BZ#1440975 -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 6 2018 Bas Mevissen abuse@basmevissen.nl 1.4.6-5 - Add static library package, see BZ#1440975 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1440975 - overcloud deploy giving "401 Unauthorized" when accessing swift from a mistral workflow https://bugzilla.redhat.com/show_bug.cgi?id=1440975 --------------------------------------------------------------------------------
================================================================================ golang-github-minio-6.0.2-1.fc28 (FEDORA-2018-774bd5e245) Minio Client SDK for Go -------------------------------------------------------------------------------- Update Information:
Forge-specific packaging variables -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1592074 - Review Request: golang-github-minio - Minio Client SDK for Go https://bugzilla.redhat.com/show_bug.cgi?id=1592074 --------------------------------------------------------------------------------
================================================================================ inn-2.6.2-1.fc28 (FEDORA-2018-36a01e2f2a) The InterNetNews system, an Usenet news server -------------------------------------------------------------------------------- Update Information:
# Changes in 2.6.2 * A new syntaxchecks parameter has been added in inn.conf. It permits controlling the level of checks performed by innd and nnrpd. Up to now, only one check can be enabled/disabled: when laxmid is mentioned in the values of this new parameter, INN accepts Message-IDs that contain .. in the left part, as well as Message-IDs with two @ (such Message-IDs would otherwise be considered as syntactically invalid). See the inn.conf(5) man page for more details. * The check is disabled by default (no-laxmid), which corresponds to the legacy behaviour of INN 2.6.1 and earlier. * Use of the ovdb_server helper server is now the default when using the ovdb overview method, that is to say the default value for the readserver parameter in ovdb.conf is now set to true. It improves stability and avoids deadlocks, timing issues and corrupted ovdb databases. * mailpost now removes empty header fields before attempting to post articles, and keeps trace of them in the X-Mailpost-Empty-Hdrs: newly generated header field body. Also, mailpost now sanitizes header fields with regards to empty continuation header lines. Thanks to Kamil Jonca for these bug reports. * A new -z parameter has been added to mailpost to mention a list of header fields to remove from the gated message. Thanks to Dieter Stussy for the patch. * Fixed a bug in inews that was rejecting articles containing header fields whose length exceeded 998 bytes. This limitation is for the length of a single line of a header field (and not for the length of the whole header field, as it was wrongly the case). * Added support for GnuPG's gpg binary (in addition to gpgv) in pgpverify. Indeed, gpg still validates signatures made with weak digest algorithms like MD5 whereas gpgv no longer do. Thanks to Thomas Hochstein for the patch, which permits validating control articles for hierarchies that are still using old PGP keys. * Added similar support for GnuPG's gpg binary in perl-nocem to validate NoCeM notices from issuers who are still using old PGP keys. * A few commands listed in the "Control commands to INND" section in daily Usenet reports were appearing as a mere letter; all of them are now properly converted to meaningful words. * The tlsprotocols parameter in inn.conf now recognizes the TLSv1.3 value (for OpenSSL versions implementing TLS 1.3, that is to say starting from OpenSSL 1.1.1). * The buffindexed overview method will now hopefully work properly on systems with a native page size larger than 16KB. * Other minor bug fixes and documentation improvements. -------------------------------------------------------------------------------- ChangeLog:
* Sat Jun 23 2018 Dominik Mierzejewski rpm@greysector.net - 2.6.2-1 - update to 2.6.2 release (#1557980) - check GPG signature of the tarball -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1557980 - inn-2.6.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1557980 --------------------------------------------------------------------------------
================================================================================ knemo-0.7.7-8.20170520git.fc28 (FEDORA-2018-22628764e3) A KDE network monitoring tool -------------------------------------------------------------------------------- Update Information:
frameworks git 20170520 snapshot -------------------------------------------------------------------------------- ChangeLog:
* Sat Jun 23 2018 Alexey Kurov nucleo@fedoraproject.org - 0.7.7-8.20170520git - frameworks git 20170520 snapshot -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1240779 - knemo doesn't appear at system settings, and doesn't start automatically https://bugzilla.redhat.com/show_bug.cgi?id=1240779 --------------------------------------------------------------------------------
================================================================================ libreoffice-6.0.5.2-1.fc28 (FEDORA-2018-7b955ba398) Free Software Productivity Suite -------------------------------------------------------------------------------- Update Information:
- update to latest stable of 6.0.5 -------------------------------------------------------------------------------- ChangeLog:
* Fri Jun 22 2018 Caol��n McNamara caolanm@redhat.com - 1:6.0.5.2-1 - latest 6.0 release * Tue Jun 19 2018 Miro Hron��ok mhroncok@redhat.com - 1:6.0.4.2-5 - Rebuilt for Python 3.7 --------------------------------------------------------------------------------
================================================================================ perl-CPAN-Perl-Releases-3.66-1.fc28 (FEDORA-2018-ce2f0ee67d) Mapping Perl releases on CPAN to the location of the tarballs -------------------------------------------------------------------------------- Update Information:
Updated to the latest version ---- Updated to the latest version ---- Updated to the latest version -------------------------------------------------------------------------------- ChangeLog:
* Sat Jun 23 2018 Jitka Plesnikova jplesnik@redhat.com - 3.66-1 - 3.66 bump * Wed Jun 20 2018 Jitka Plesnikova jplesnik@redhat.com - 3.64-1 - 3.64 bump * Tue Jun 19 2018 Jitka Plesnikova jplesnik@redhat.com - 3.62-1 - 3.62 bump -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1594468 - perl-CPAN-Perl-Releases-3.66 is available https://bugzilla.redhat.com/show_bug.cgi?id=1594468 [ 2 ] Bug #1593043 - perl-CPAN-Perl-Releases-3.64 is available https://bugzilla.redhat.com/show_bug.cgi?id=1593043 [ 3 ] Bug #1592742 - perl-CPAN-Perl-Releases-3.62 is available https://bugzilla.redhat.com/show_bug.cgi?id=1592742 --------------------------------------------------------------------------------
================================================================================ perl-Devel-Size-0.82-1.fc28 (FEDORA-2018-2e57d7e2d0) Perl extension for finding the memory usage of Perl variables -------------------------------------------------------------------------------- Update Information:
Updated to the latest version -------------------------------------------------------------------------------- ChangeLog:
* Sat Jun 23 2018 Jitka Plesnikova jplesnik@redhat.com - 0.82-1 - 0.82 bump -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1594467 - perl-Devel-Size-0.82 is available https://bugzilla.redhat.com/show_bug.cgi?id=1594467 --------------------------------------------------------------------------------
================================================================================ python-lz4-2.0.1-1.fc28 (FEDORA-2018-6da2b68c62) LZ4 Bindings for Python -------------------------------------------------------------------------------- Update Information:
Update to latest version. -------------------------------------------------------------------------------- ChangeLog:
* Thu Jun 21 2018 Jonathan Underwood jonathan.underwood@gmail.com - 2.0.1-1 - Update to version 2.0.1 * Wed Jun 20 2018 Jonathan Underwood jonathan.underwood@gmail.com - 2.0.0-2 - Add BuildRequires for python{2,3}-psutil for tests * Wed Jun 20 2018 Jonathan Underwood jonathan.underwood@gmail.com - 2.0.0-1 - Update to version 2.0.0 * Tue Jun 19 2018 Miro Hron��ok mhroncok@redhat.com - 1.1.0-3 - Rebuilt for Python 3.7 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1589436 - python-lz4-2.0.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1589436 --------------------------------------------------------------------------------
================================================================================ python-pycdlib-1.5.0-1.fc28 (FEDORA-2018-86600f0607) A pure python ISO9660 read and write library -------------------------------------------------------------------------------- Update Information:
Update to upstream version 1.5.0 -------------------------------------------------------------------------------- ChangeLog:
* Sat Jun 23 2018 Chris Lalancette clalancette@gmail.com - 1.5.0-1 - Update to upstream version 1.5.0 --------------------------------------------------------------------------------
================================================================================ python-tld-0.7.9-7.fc28 (FEDORA-2018-c20d01d619) Extract the top level domain from the URL given -------------------------------------------------------------------------------- Update Information:
Update license tag -------------------------------------------------------------------------------- ChangeLog:
* Sat Jun 23 2018 William Moreno Reyes williamjmorenor@gmail.com - 0.7.9-7 - Update license tag - https://github.com/barseghyanartur/tld/issues/46 - https://bugzilla.redhat.com/show_bug.cgi?id=1577466 * Tue Jun 19 2018 Miro Hron��ok mhroncok@redhat.com - 0.7.9-6 - Rebuilt for Python 3.7 * Fri Mar 16 2018 Jan Beran jberan@redhat.com - 0.7.9-5 - Fix of python3-tld requires both Python 2 and Python 3 (rhbz #1546814) --------------------------------------------------------------------------------
================================================================================ quentier-0.4.0-0.4.20180622.git5a92775.fc28 (FEDORA-2018-5b6109905f) Cross-platform desktop Evernote client -------------------------------------------------------------------------------- Update Information:
Bump to 5a9277504a6a68da0a490f755e036561270094c7 -------------------------------------------------------------------------------- ChangeLog:
* Fri Jun 22 2018 Robert-Andr�� Mauchin zebob.m@gmail.com - 0.4.0-0.4.20180622git5a92775 - Bump to 5a9277504a6a68da0a490f755e036561270094c7 --------------------------------------------------------------------------------
================================================================================ timeshift-18.6.1-1.fc28 (FEDORA-2018-ac8b7ef0cf) System restore tool for Linux -------------------------------------------------------------------------------- Update Information:
Update to 18.6.1. Upstream changelog: https://github.com/teejee2008/timeshift/releases -------------------------------------------------------------------------------- ChangeLog:
* Sun Jun 24 2018 Samuel Rakitni��an samuel.rakitnican@gmail.com 18.6.1-1 - Update to 18.6.1 with vte291 fixes for F28 and rawhide * Sun Jun 24 2018 Samuel Rakitni��an samuel.rakitnican@gmail.com 18.4-1 - Update to 18.4 - Add runtime dependency on psmisc - Update sed expression to avoid false matches --------------------------------------------------------------------------------
================================================================================ wpa_supplicant-2.6-16.fc28 (FEDORA-2018-1cc52e0dd5) WPA/WPA2/IEEE 802.1X Supplicant -------------------------------------------------------------------------------- Update Information:
fixed wrong encoding of NL80211_ATTR_SMPS_MODE -------------------------------------------------------------------------------- ChangeLog:
* Fri Jun 22 2018 Davide Caratti dcaratti@redhat.com - 1:2.6-16 - Fix endoding of NL80211_ATTR_SMPS_MODE (rh#1570903) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1570903 - Attribute type 213 has an invalid length https://bugzilla.redhat.com/show_bug.cgi?id=1570903 --------------------------------------------------------------------------------