The following Fedora 28 Security updates need testing: Age URL 260 https://bodhi.fedoraproject.org/updates/FEDORA-2018-d510cfd7eb jgraphx-3.6.0.0-6.fc28 209 https://bodhi.fedoraproject.org/updates/FEDORA-2018-d7aeaa74da nodejs-brace-expansion-1.1.11-1.fc28 208 https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc073fdc1a nodejs-atob-2.1.1-1.fc28 201 https://bodhi.fedoraproject.org/updates/FEDORA-2018-9dd3f7c013 unrtf-0.21.9-8.fc28 169 https://bodhi.fedoraproject.org/updates/FEDORA-2018-28e9841baf docker-latest-1.13.1-37.git9cb56fd.fc28 84 https://bodhi.fedoraproject.org/updates/FEDORA-2018-cc4b7af297 xerces-c27-2.7.0-28.fc28 42 https://bodhi.fedoraproject.org/updates/FEDORA-2018-aadd3c2790 mupdf-1.14.0-6.fc28 37 https://bodhi.fedoraproject.org/updates/FEDORA-2018-997a9e3e1f xen-4.10.2-4.fc28 37 https://bodhi.fedoraproject.org/updates/FEDORA-2018-aa3752ac3c nginx-1.14.1-1.fc28 27 https://bodhi.fedoraproject.org/updates/FEDORA-2018-b60fdc1998 net-snmp-5.8-3.fc28 27 https://bodhi.fedoraproject.org/updates/FEDORA-2018-70fe6a4d75 nagios-4.4.2-3.fc28 23 https://bodhi.fedoraproject.org/updates/FEDORA-2018-dbcb80405c nbdkit-1.4.4-1.fc28 16 https://bodhi.fedoraproject.org/updates/FEDORA-2018-cc86ef9e22 squid-4.4-1.fc28 15 https://bodhi.fedoraproject.org/updates/FEDORA-2018-f7d9989c42 nettle-3.4.1-1.fc28 13 https://bodhi.fedoraproject.org/updates/FEDORA-2018-2abadd4469 haproxy-1.8.15-1.fc28 13 https://bodhi.fedoraproject.org/updates/FEDORA-2018-b18f9dd65b tomcat-8.5.35-1.fc28 10 https://bodhi.fedoraproject.org/updates/FEDORA-2018-e2e8a07a01 webkit2gtk3-2.22.5-1.fc28 9 https://bodhi.fedoraproject.org/updates/FEDORA-2018-5f91fbf4fd sqlite-3.22.0-5.fc28 9 https://bodhi.fedoraproject.org/updates/FEDORA-2018-67e98d4b7a python-lxml-4.2.5-1.fc28 7 https://bodhi.fedoraproject.org/updates/FEDORA-2018-ea05fcd378 vcftools-0.1.16-1.fc28 7 https://bodhi.fedoraproject.org/updates/FEDORA-2018-93a16d053f leptonica-1.77.0-1.fc28 mingw-leptonica-1.77.0-1.fc28 7 https://bodhi.fedoraproject.org/updates/FEDORA-2018-e69d2aaa60 wordpress-5.0.2-1.fc28 7 https://bodhi.fedoraproject.org/updates/FEDORA-2018-200c84e08a openjpeg2-2.3.0-10.fc28 mingw-openjpeg2-2.3.0-6.fc28 7 https://bodhi.fedoraproject.org/updates/FEDORA-2018-12b934e224 mingw-poppler-0.62.0-2.fc28 6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-50e3877b63 php-pear-1.10.7-2.fc28 6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-2e1d1e4420 krb5-1.16.1-22.fc28 4 https://bodhi.fedoraproject.org/updates/FEDORA-2018-27f957ae8e terminology-1.3.2-1.fc28
The following Fedora 28 Critical Path updates have yet to be approved: Age URL 37 https://bodhi.fedoraproject.org/updates/FEDORA-2018-997a9e3e1f xen-4.10.2-4.fc28 31 https://bodhi.fedoraproject.org/updates/FEDORA-2018-fdc6d449e5 pungi-4.1.31-1.fc28 31 https://bodhi.fedoraproject.org/updates/FEDORA-2018-63e2c74a11 python-productmd-1.18-1.fc28 30 https://bodhi.fedoraproject.org/updates/FEDORA-2018-3222e7c914 radvd-2.17-11.fc28 27 https://bodhi.fedoraproject.org/updates/FEDORA-2018-c86898e4a7 gdb-8.1.1-4.fc28 27 https://bodhi.fedoraproject.org/updates/FEDORA-2018-b60fdc1998 net-snmp-5.8-3.fc28 25 https://bodhi.fedoraproject.org/updates/FEDORA-2018-12c54ca4bf gjs-1.52.5-1.fc28 16 https://bodhi.fedoraproject.org/updates/FEDORA-2018-9f541b469b nfs-utils-2.3.3-1.rc2.fc28 15 https://bodhi.fedoraproject.org/updates/FEDORA-2018-9963fc558e efivar-37-1.fc28 15 https://bodhi.fedoraproject.org/updates/FEDORA-2018-f7d9989c42 nettle-3.4.1-1.fc28 12 https://bodhi.fedoraproject.org/updates/FEDORA-2018-816dbc3486 osinfo-db-20181214-1.fc28 9 https://bodhi.fedoraproject.org/updates/FEDORA-2018-67e98d4b7a python-lxml-4.2.5-1.fc28 9 https://bodhi.fedoraproject.org/updates/FEDORA-2018-db7152a500 flatpak-1.0.6-4.fc28 9 https://bodhi.fedoraproject.org/updates/FEDORA-2018-5f91fbf4fd sqlite-3.22.0-5.fc28 7 https://bodhi.fedoraproject.org/updates/FEDORA-2018-bfd076926b redhat-rpm-config-110-1.fc28 7 https://bodhi.fedoraproject.org/updates/FEDORA-2018-200c84e08a openjpeg2-2.3.0-10.fc28 mingw-openjpeg2-2.3.0-6.fc28 7 https://bodhi.fedoraproject.org/updates/FEDORA-2018-7d88c302b7 linux-firmware-20181219-89.git0f22c852.fc28 7 https://bodhi.fedoraproject.org/updates/FEDORA-2018-74b0e315c8 libpcap-1.9.0-2.fc28 7 https://bodhi.fedoraproject.org/updates/FEDORA-2018-d81ade974c glib2-2.56.4-1.fc28 7 https://bodhi.fedoraproject.org/updates/FEDORA-2018-43c225890a libfm-1.3.1-1.fc28 pcmanfm-1.3.1-1.fc28 7 https://bodhi.fedoraproject.org/updates/FEDORA-2018-4dddcb3e5e highlight-3.48-1.fc28 6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-2e1d1e4420 krb5-1.16.1-22.fc28 6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-fe07b3a436 breeze-icon-theme-5.53.0-1.fc28 extra-cmake-modules-5.53.0-1.fc28 kf5-5.53.0-1.fc28 kf5-attica-5.53.0-1.fc28 kf5-baloo-5.53.0-1.fc28 kf5-bluez-qt-5.53.0-1.fc28 kf5-frameworkintegration-5.53.0-2.fc28 kf5-kactivities-5.53.0-1.fc28 kf5-kactivities-stats-5.53.0-1.fc28 kf5-kapidox-5.53.0-1.fc28 kf5-karchive-5.53.0-1.fc28 kf5-kauth-5.53.0-1.fc28 kf5-kbookmarks-5.53.0-1.fc28 kf5-kcmutils-5.53.0-1.fc28 kf5-kcodecs-5.53.0-1.fc28 kf5-kcompletion-5.53.0-1.fc28 kf5-kconfig-5.53.0-1.fc28 kf5-kconfigwidgets-5.53.0-1.fc28 kf5-kcoreaddons-5.53.0-1.fc28 kf5-kcrash-5.53.0-1.fc28 kf5-kdbusaddons-5.53.0-1.fc28 kf5-kdeclarative-5.53.0-2.fc28 kf5-kded-5.53.0-1.fc28 kf5-kdelibs4support-5.53.0-1.fc28 kf5-kdesignerplugin-5.53.0-1.fc28 kf5-kdesu-5.53.0-1.fc28 kf5-kdewebkit-5.53.0-1.fc28 kf5-kdnssd-5.53.0-1.fc28 kf5-kdoctools-5.53.0-1.fc28 kf5-kemoticons-5.53.0-1.fc28 kf5-kfilemetadata-5.53.0-1.fc28 kf5-kglobalaccel-5.53.0-1.fc28 kf5-kguiad dons-5.53.0-1.fc28 kf5-kholidays-5.53.0-1.fc28 kf5-khtml-5.53.0-1.fc28 kf5-ki18n-5.53.0-1.fc28 kf5-kiconthemes-5.53.0-1.fc28 kf5-kidletime-5.53.0-1.fc28 kf5-kimageformats-5.53.0-1.fc28 kf5-kinit-5.53.0-1.fc28 kf5-kio-5.53.0-1.fc28 kf5-kirigami2-5.53.0-1.fc28 kf5-kitemmodels-5.53.0-1.fc28 kf5-kitemviews-5.53.0-1.fc28 kf5-kjobwidgets-5.53.0-1.fc28 kf5-kjs-5.53.0-1.fc28 kf5-kjsembed-5.53.0-1.fc28 kf5-kmediaplayer-5.53.0-1.fc28 kf5-knewstuff-5.53.0-1.fc28 kf5-knotifications-5.53.0-1.fc28 kf5-knotifyconfig-5.53.0-1.fc28 kf5-kpackage-5.53.0-1.fc28 kf5-kparts-5.53.0-1.fc28 kf5-kpeople-5.53.0-1.fc28 kf5-kplotting-5.53.0-1.fc28 kf5-kpty-5.53.0-1.fc28 kf5-kross-5.53.0-1.fc28 kf5-krunner-5.53.0-1.fc28 kf5-kservice-5.53.0-1.fc28 kf5-ktexteditor-5.53.0-1.fc28 kf5-ktextwidgets-5.53.0-1.fc28 kf5-kunitconversion-5.53.0-1.fc28 kf5-kwallet-5.53.0-1.fc28 kf5-kwayland-5.53.0-2.fc28 kf5-kwidgetsaddons-5.53.0-1.fc28 kf5-kwindowsystem-5.53.0-1.fc28 kf5-kxmlgui-5.53.0-2.fc28 kf5-kxmlrpcclient-5.53.0-1.fc28 kf5-modemmanager-qt-5.53.0-1.fc28 kf5-networkmanager-qt-5.53.0-1.fc28 kf5-plasma-5.53.0-1.fc28 kf5-prison-5.53.0-1.fc28 kf5-purpose-5.53.0-1.fc28 kf5-solid-5.53.0-1.fc28 kf5-sonnet-5.53.0-1.fc28 kf5-syndication-5.53.0-1.fc28 kf5-syntax-highlighting-5.53.0-1.fc28 kf5-threadweaver-5.53.0-1.fc28 oxygen-icon-theme-5.53.0-1.fc28 qqc2-desktop-style-5.53.0-1.fc28 5 https://bodhi.fedoraproject.org/updates/FEDORA-2018-e6538e58ce ceph-12.2.10-1.fc28
The following builds have been pushed to Fedora 28 updates-testing
beep-1.3-24.fc28 blueman-2.1-0.11.alpha3.fc28 libcmis-0.5.2-1.fc28 lollypop-0.9.908-1.fc28 mmapper-2.7.3-1.fc28 python-stem-1.7.1-1.fc28 terminus-fonts-4.46-2.fc28 vala-0.40.12-1.fc28 youtube-dl-2018.12.17-1.fc28
Details about builds:
================================================================================ beep-1.3-24.fc28 (FEDORA-2018-276a5f97b6) Beep the PC speaker any number of ways -------------------------------------------------------------------------------- Update Information:
Security fix for CVE-2018-1000532 and a few smaller fixes -------------------------------------------------------------------------------- ChangeLog:
* Fri Dec 28 2018 Hans Ulrich Niedermann hun@n-dimensional.de - 1.3-24 - Actually apply the patches - Update COPYING with new FSF address - Fix Patch9 to work as non-git patch (do the rest with shell) - Proper naming of Patch14 - Exit beep when error accessing API * Fri Dec 28 2018 Hans Ulrich Niedermann hun@n-dimensional.de - 1.3-23 - Fix CVE-2018-1000532 and mitigate against related issues (#1595592) - Fix a number of potential integer overflows * Thu Jul 12 2018 Fedora Release Engineering releng@fedoraproject.org - 1.3-22 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Tue Apr 3 2018 Hans Ulrich Niedermann hun@n-dimensional.de - 1.3-21 - Add CVE-2018-0492 fix. - Behaviour of multiple -f parameters matches documentation now. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1595591 - CVE-2018-1000532 beep: External control of file name or path via --device option https://bugzilla.redhat.com/show_bug.cgi?id=1595591 --------------------------------------------------------------------------------
================================================================================ blueman-2.1-0.11.alpha3.fc28 (FEDORA-2018-442e242808) GTK+ Bluetooth Manager -------------------------------------------------------------------------------- Update Information:
Upgrade to new upstream pre-release (2.1.alpha3) -------------------------------------------------------------------------------- ChangeLog:
* Thu Dec 27 2018 Artur Iwicki fedora@svgames.pl - 1:2.1-0.11.alpha3 - Upgrade to new upstream pre-release - Remove the Group: tag (no longer used in Fedora) * Wed Feb 7 2018 Fedora Release Engineering releng@fedoraproject.org - 1:2.1-0.10.alpha2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1657627 - Blueman needs updating https://bugzilla.redhat.com/show_bug.cgi?id=1657627 [ 2 ] Bug #1631055 - blueman uses env python, not system python https://bugzilla.redhat.com/show_bug.cgi?id=1631055 --------------------------------------------------------------------------------
================================================================================ libcmis-0.5.2-1.fc28 (FEDORA-2018-af658d4d80) A C/C++ client library for CM interfaces -------------------------------------------------------------------------------- Update Information:
https://github.com/tdf/libcmis/releases/tag/v0.5.2 -------------------------------------------------------------------------------- ChangeLog:
* Thu Dec 27 2018 David Tardon dtardon@redhat.com - 0.5.2-1 - new upstream release --------------------------------------------------------------------------------
================================================================================ lollypop-0.9.908-1.fc28 (FEDORA-2018-27750947f8) Music player for GNOME -------------------------------------------------------------------------------- Update Information:
Update to 0.9.908-1 ---- Update to 0.9.907-1 ---- Update to 0.9.906-1 ---- Update to 0.9.905-1 ---- Update to 0.9.904-1 ---- Update to 0.9.903-1 ---- Update to 0.9.902-1 ---- Update to 0.9.900-1 ---- - Drop a Python 2 dependency from Python 3 package -------------------------------------------------------------------------------- ChangeLog:
* Thu Dec 27 2018 Martin Gansser martinkg@fedoraproject.org - 0.9.908-1 - Update to 0.9.908 * Wed Dec 26 2018 Martin Gansser martinkg@fedoraproject.org - 0.9.907-1 - Update to 0.9.907 * Thu Dec 20 2018 Martin Gansser martinkg@fedoraproject.org - 0.9.906-1 - Update to 0.9.906 * Wed Dec 19 2018 Martin Gansser martinkg@fedoraproject.org - 0.9.905-1 - Update to 0.9.905 * Tue Dec 18 2018 Martin Gansser martinkg@fedoraproject.org - 0.9.904-1 - Update to 0.9.904 * Sat Dec 15 2018 Martin Gansser martinkg@fedoraproject.org - 0.9.903-1 - Update to 0.9.903 * Sat Dec 15 2018 Martin Gansser martinkg@fedoraproject.org - 0.9.902-1 - Update to 0.9.902 * Fri Dec 14 2018 Martin Gansser martinkg@fedoraproject.org - 0.9.900-1 - Update to 0.9.900 * Sun Dec 9 2018 Miro Hron��ok mhroncok@redhat.com - 0.9.612-2 - Drop a Python 2 dependency from Python 3 package -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1651119 - [abrt] lollypop: __new__(): Gdk.py:346:__new__:TypeError: constructor returned NULL https://bugzilla.redhat.com/show_bug.cgi?id=1651119 --------------------------------------------------------------------------------
================================================================================ mmapper-2.7.3-1.fc28 (FEDORA-2018-17f2558780) Graphical MUME mapper -------------------------------------------------------------------------------- Update Information:
mmapper 2.7.3 release. For details, see https://github.com/MUME/MMapper/releases/tag/v2.7.3 -------------------------------------------------------------------------------- ChangeLog:
* Thu Dec 27 2018 Kalev Lember klember@redhat.com - 2.7.3-1 - Update to 2.7.3 --------------------------------------------------------------------------------
================================================================================ python-stem-1.7.1-1.fc28 (FEDORA-2018-5e12d09b3a) Python controller library for Tor -------------------------------------------------------------------------------- Update Information:
Version 1.7.1 -------------------------------------------------------------------------------- ChangeLog:
* Thu Dec 27 2018 Juan Orti Alcaine jorti@fedoraproject.org - 1.7.1-1 - Version 1.7.1 --------------------------------------------------------------------------------
================================================================================ terminus-fonts-4.46-2.fc28 (FEDORA-2018-d2577f4b8d) Clean fixed width font -------------------------------------------------------------------------------- Update Information:
Update to terminus-font-4.46 Add grub2 subpackage with *.pf2 fonts -------------------------------------------------------------------------------- ChangeLog:
* Tue Dec 18 2018 Hans Ulrich Niedermann hun@n-dimensional.de - 4.46-2 - Add grub2 subpackage with *.pf2 fonts * Tue Dec 18 2018 Hans Ulrich Niedermann hun@n-dimensional.de - 4.46-1 - Update to terminus-font-4.46 * Sat Jul 14 2018 Fedora Release Engineering releng@fedoraproject.org - 4.40-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1465198 - terminus-fonts-4.46 is available https://bugzilla.redhat.com/show_bug.cgi?id=1465198 --------------------------------------------------------------------------------
================================================================================ vala-0.40.12-1.fc28 (FEDORA-2018-d6d4034472) A modern programming language for GNOME -------------------------------------------------------------------------------- Update Information:
vala 0.40.12 release. For details, see https://mail.gnome.org/archives/ftp- release-list/2018-December/msg00073.html -------------------------------------------------------------------------------- ChangeLog:
* Thu Dec 27 2018 Kalev Lember klember@redhat.com - 0.40.12-1 - Update to 0.40.12 --------------------------------------------------------------------------------
================================================================================ youtube-dl-2018.12.17-1.fc28 (FEDORA-2018-6ed19d7945) A small command-line program to download online videos -------------------------------------------------------------------------------- Update Information:
Update to the latest upstream release (also fix bug 1662322) -------------------------------------------------------------------------------- ChangeLog:
* Thu Dec 27 2018 Mat��j Cepl mcepl@cepl.eu - 2018.12.17-1 - Update to the latest upstream release. - Make python-setuptools Required. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1662322 - youtube-dl must depend on python3-setuptools https://bugzilla.redhat.com/show_bug.cgi?id=1662322 --------------------------------------------------------------------------------