The following Fedora 28 Security updates need testing:
Age URL
234
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d510cfd7eb
jgraphx-3.6.0.0-6.fc28
183
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d7aeaa74da
nodejs-brace-expansion-1.1.11-1.fc28
182
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc073fdc1a
nodejs-atob-2.1.1-1.fc28
175
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9dd3f7c013
unrtf-0.21.9-8.fc28
143
https://bodhi.fedoraproject.org/updates/FEDORA-2018-28e9841baf
docker-latest-1.13.1-37.git9cb56fd.fc28
58
https://bodhi.fedoraproject.org/updates/FEDORA-2018-cc4b7af297
xerces-c27-2.7.0-28.fc28
19
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8f0d2429d3 bird-1.6.4-2.fc28
16
https://bodhi.fedoraproject.org/updates/FEDORA-2018-aadd3c2790
mupdf-1.14.0-6.fc28
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-997a9e3e1f xen-4.10.2-4.fc28
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-aa3752ac3c
nginx-1.14.1-1.fc28
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-96b48b34ae
mingw-uriparser-0.9.0-1.fc28
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a3ef0a026f
uriparser-0.9.0-1.fc28
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b9581d9624
python-notebook-5.5.0-6.fc28
9
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b74b9ac8d1 tmux-2.8-2.fc28
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1d2a79fe1c
cobbler-2.8.4-5.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-060302dc83 glibc-2.27-35.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c341b70641
pdns-recursor-4.1.8-1.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b60fdc1998
net-snmp-5.8-3.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ca03363d57
perl-5.26.3-415.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-70fe6a4d75
nagios-4.4.2-3.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f1f44e4c6d
hadoop-2.7.7-1.fc28
The following Fedora 28 Critical Path updates have yet to be approved:
Age URL
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-997a9e3e1f xen-4.10.2-4.fc28
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2f5e72a448 grilo-0.3.7-1.fc28
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d169dbb09d
osinfo-db-20181116-1.fc28
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-fdc6d449e5
pungi-4.1.31-1.fc28
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-63e2c74a11
python-productmd-1.18-1.fc28
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a171287251
libarchive-3.3.3-2.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3222e7c914 radvd-2.17-11.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-17f2d1f30c patch-2.7.6-8.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-060302dc83 glibc-2.27-35.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1fc1f4dbad lorax-28.21-1.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c86898e4a7 gdb-8.1.1-4.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-13fa00525c
libsolv-0.7.1-2.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d6a3723ac6
perl-threads-shared-1.59-1.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ca03363d57
perl-5.26.3-415.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b60fdc1998
net-snmp-5.8-3.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b7705eb407 kobo-0.8.0-1.fc28
The following builds have been pushed to Fedora 28 updates-testing
calibre-3.34.0-1.fc28
debootstrap-1.0.109-3.fc28
dogtag-pki-10.6.8-1.fc28
flatpak-1.0.6-3.fc28
gsequencer-2.1.3-0.fc28
jss-4.5.1-1.fc28
mmapper-2.7.1-1.fc28
nuxwdog-1.0.5-3.fc28
pam_mysql-0.8.1-0.2.fc28
pki-core-10.6.8-1.fc28
python-wikitcms-2.4.2-1.fc28
radeontop-1.2-0.1.20181031git7474f50.fc28
switchboard-plug-sharing-2.1.3-1.fc28
Details about builds:
================================================================================
calibre-3.34.0-1.fc28 (FEDORA-2018-23d16aca68)
E-book converter and library manager
--------------------------------------------------------------------------------
Update Information:
Update to 3.34.0 with bugfixes and new hardware enablement.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 1 2018 Kevin Fenzi <kevin(a)scrye.com> - 3.34.0-1
- Update to 3.34.
* Fri Sep 21 2018 Jan Grulich <jgrulich(a)redhat.com> - 3.29.0-2
- rebuild (qt5)
--------------------------------------------------------------------------------
================================================================================
debootstrap-1.0.109-3.fc28 (FEDORA-2018-6906464d45)
Debian GNU/Linux bootstrapper
--------------------------------------------------------------------------------
Update Information:
- Don't mangling shebang in /usr/sbin/debootstrap from /bin/sh to /usr/bin/sh
(#1654765), thanks to Laurent Vivier
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 1 2018 S��rgio Basto <sergio(a)serjux.com> - 1.0.109-3
- Don't mangling shebang in /usr/sbin/debootstrap from /bin/sh to /usr/bin/sh
(#1654765), thanks to Laurent Vivier
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1654765 - chroot: failed to run command './debootstrap/debootstrap':
No such file or directory
https://bugzilla.redhat.com/show_bug.cgi?id=1654765
--------------------------------------------------------------------------------
================================================================================
dogtag-pki-10.6.8-1.fc28 (FEDORA-2018-115068f60e)
Dogtag PKI Package
--------------------------------------------------------------------------------
Update Information:
Rebased: * pki-core to 10.6.8 * dogtag-pki to 10.6.8 * jss to 4.5.1
Resubmitting the following since it didn't make it to the stable: * nuxwdog
1.0.5-3
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 30 2018 Dogtag PKI Team <pki-team(a)redhat.com> - 10.6.8-1
- Rebased to PKI 10.6.8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1582323 - DER encoding error for enumerated types with a value of zero
https://bugzilla.redhat.com/show_bug.cgi?id=1582323
[ 2 ] Bug #1534765 - javadoc for org.mozilla.jss.pkix.cms.SignedData.getSignerInfos() is
incorrect
https://bugzilla.redhat.com/show_bug.cgi?id=1534765
--------------------------------------------------------------------------------
================================================================================
flatpak-1.0.6-3.fc28 (FEDORA-2018-ffe5c00ef9)
Application deployment framework for desktop apps
--------------------------------------------------------------------------------
Update Information:
This update fixes problems with OCI remotes installed system wide. It is needed
to access Flatpaks on
registry.fedoraproject.org.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 30 2018 fedora-toolbox <otaylor(a)redhat.com> - 1.0.6-3
- Add a patch to fix OCI system remotes
- Add patch fixing permissions on icons downloaded from an OCI registry
--------------------------------------------------------------------------------
================================================================================
gsequencer-2.1.3-0.fc28 (FEDORA-2018-b3ad624dda)
Audio processing engine
--------------------------------------------------------------------------------
Update Information:
updated Source to point to new minor version directory
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 1 2018 Jo��l Kr��hemann <jkraehemann(a)gmail.com> 2.1.3-0
- updated Source to point to new minor version directory
- removed build dependency ladspa-cmt-plugins and lv2-swh-plugins
--------------------------------------------------------------------------------
================================================================================
jss-4.5.1-1.fc28 (FEDORA-2018-115068f60e)
Java Security Services (JSS)
--------------------------------------------------------------------------------
Update Information:
Rebased: * pki-core to 10.6.8 * dogtag-pki to 10.6.8 * jss to 4.5.1
Resubmitting the following since it didn't make it to the stable: * nuxwdog
1.0.5-3
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 29 2018 Dogtag PKI Team <pki-devel(a)redhat.com> 4.5.1-1
- Rebased to JSS 4.5.1
- Red Hat Bugzilla #1582323 - DER encoding error for enumerated types with a value of
zero
- Red Hat Bugzilla #1534765 - javadoc for
org.mozilla.jss.pkix.cms.SignedData.getSignerInfos() is incorrect
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1582323 - DER encoding error for enumerated types with a value of zero
https://bugzilla.redhat.com/show_bug.cgi?id=1582323
[ 2 ] Bug #1534765 - javadoc for org.mozilla.jss.pkix.cms.SignedData.getSignerInfos() is
incorrect
https://bugzilla.redhat.com/show_bug.cgi?id=1534765
--------------------------------------------------------------------------------
================================================================================
mmapper-2.7.1-1.fc28 (FEDORA-2018-0a02be5655)
Graphical MUME mapper
--------------------------------------------------------------------------------
Update Information:
mmapper 2.7.1 release. For details, see
https://github.com/MUME/MMapper/releases/tag/v2.7.1 ---- mmapper 2.7.0
release. For details, see
https://github.com/MUME/MMapper/releases/tag/v2.7.0
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 1 2018 Kalev Lember <klember(a)redhat.com> - 2.7.1-1
- Update to 2.7.1
* Tue Nov 27 2018 Kalev Lember <klember(a)redhat.com> - 2.7.0-1
- Update to 2.7.0
--------------------------------------------------------------------------------
================================================================================
nuxwdog-1.0.5-3.fc28 (FEDORA-2018-115068f60e)
Watchdog server to start and stop processes, and prompt for passwords
--------------------------------------------------------------------------------
Update Information:
Rebased: * pki-core to 10.6.8 * dogtag-pki to 10.6.8 * jss to 4.5.1
Resubmitting the following since it didn't make it to the stable: * nuxwdog
1.0.5-3
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 30 2018 Dogtag PKI Team (pki-devel(a)redhat.com) 1.0.5-3
- Rebuild since 1.0.5-2 was deleted in Koji
* Wed Aug 22 2018 Alexander Bokovoy <abokovoy(a)redhat.com> - 1.0.5-2
- Remove obsolete ExcludeArch statement for RHEL builds
- Syncing with upstream changes
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1582323 - DER encoding error for enumerated types with a value of zero
https://bugzilla.redhat.com/show_bug.cgi?id=1582323
[ 2 ] Bug #1534765 - javadoc for org.mozilla.jss.pkix.cms.SignedData.getSignerInfos() is
incorrect
https://bugzilla.redhat.com/show_bug.cgi?id=1534765
--------------------------------------------------------------------------------
================================================================================
pam_mysql-0.8.1-0.2.fc28 (FEDORA-2018-bb07632c10)
PAM module for auth UNIX users using MySQL data base
--------------------------------------------------------------------------------
Update Information:
Rebase pam_mysql to Nigel Cunningham's fork.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 1 2018 Paul Komkoff <i(a)stingr.net> - 1:0.8.1-0.2
- fix fat-fingered spec.
* Sat Dec 1 2018 Paul Komkoff <i(a)stingr.net> - 1:0.8.1-0.1
- move from unmaintained 0.7RC1 upstream to newer repo by Nigel Cunningham.
this should fix a lot of issues.
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
1:0.7-0.28.rc1
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1588004 - pam_mysql segfaults if the passwords starts with not-letter
character
https://bugzilla.redhat.com/show_bug.cgi?id=1588004
[ 2 ] Bug #1506858 - /usr/lib64/security/pam_mysql.so: undefined symbol:
my_make_scrambled_password
https://bugzilla.redhat.com/show_bug.cgi?id=1506858
[ 3 ] Bug #1587980 - pam_mysql memory leak
https://bugzilla.redhat.com/show_bug.cgi?id=1587980
[ 4 ] Bug #1615900 - PAM unable to dlopen(/usr/lib64/security/pam_mysql.so):
/usr/lib64/security/pam_mysql.so: undefined symbol: my_make_scrambled_password
https://bugzilla.redhat.com/show_bug.cgi?id=1615900
--------------------------------------------------------------------------------
================================================================================
pki-core-10.6.8-1.fc28 (FEDORA-2018-115068f60e)
PKI Core Package
--------------------------------------------------------------------------------
Update Information:
Rebased: * pki-core to 10.6.8 * dogtag-pki to 10.6.8 * jss to 4.5.1
Resubmitting the following since it didn't make it to the stable: * nuxwdog
1.0.5-3
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 30 2018 Dogtag PKI Team <pki-devel(a)redhat.com> - 10.6.8-1
- Rebased to PKI 10.6.8
* Fri Oct 26 2018 Dogtag PKI Team <pki-devel(a)redhat.com> - 10.6.7-3
- Fixed default token normalization in initialization.py
* Thu Oct 25 2018 Dogtag PKI Team <pki-devel(a)redhat.com> - 10.6.7-2
- Fixed missing token in verify_certificate_exists
* Thu Oct 4 2018 Dogtag PKI Team <pki-devel(a)redhat.com> - 10.6.7-1
- Rebased to PKI 10.6.7
* Mon Sep 10 2018 Dennis Gilmore <dennis(a)ausil.us> - 10.6.6-2
- add back aarch64 support as esc is now built for aarch64
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1582323 - DER encoding error for enumerated types with a value of zero
https://bugzilla.redhat.com/show_bug.cgi?id=1582323
[ 2 ] Bug #1534765 - javadoc for org.mozilla.jss.pkix.cms.SignedData.getSignerInfos() is
incorrect
https://bugzilla.redhat.com/show_bug.cgi?id=1534765
--------------------------------------------------------------------------------
================================================================================
python-wikitcms-2.4.2-1.fc28 (FEDORA-2018-1617b9f3ce)
Fedora QA wiki test management Python library
--------------------------------------------------------------------------------
Update Information:
This update provides a new release of python-wikitcms, which fixes a flow issue
that - combined with [a bug](https://pagure.io/fedora-infrastructure/issue/7415)
in the Fedora wiki itself - was preventing the Current redirect pages (e.g.
[Current Installation
Test](https://fedoraproject.org/wiki/Test_Results:Current_Installation_Test))
from being updated when new validation events were created.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 30 2018 Adam Williamson <awilliam(a)redhat.com> - 2.4.2-1
- New release 2.4.2: fix a test bug exposed by the 2.4.1 bug fix
* Fri Nov 30 2018 Adam Williamson <awilliam(a)redhat.com> - 2.4.1-1
- New release 2.4.1: fix Current redirect page updates
* Thu Nov 22 2018 Adam Williamson <awilliam(a)redhat.com> - 2.4.0-2
- Disable Python 2 build on F30+, EL8+
--------------------------------------------------------------------------------
================================================================================
radeontop-1.2-0.1.20181031git7474f50.fc28 (FEDORA-2018-f2e1cbe9e9)
View GPU utilization of AMD/ATI Radeon devices
--------------------------------------------------------------------------------
Update Information:
This update add support of newer AMD APU and Radeon GPU
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 30 2018 Luya Tshimbalanga <luya(a)fedoraproject.org>
1.2-0.1.20181031git7474f50
- Update to 20181031 which support newer AMD APU and GPU
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
switchboard-plug-sharing-2.1.3-1.fc28 (FEDORA-2018-1cef01bbb7)
Switchboard Sharing Plug
--------------------------------------------------------------------------------
Update Information:
Initial official packaging for fedora. This package was previously available
from the elementary-staging and elementary-nightly COPR repositories.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1654869 - Review Request: switchboard-plug-sharing - Switchboard Sharing
Plug
https://bugzilla.redhat.com/show_bug.cgi?id=1654869
--------------------------------------------------------------------------------