The following Fedora 28 Security updates need testing: Age URL 366 https://bodhi.fedoraproject.org/updates/FEDORA-2018-d510cfd7eb jgraphx-3.6.0.0-6.fc28 315 https://bodhi.fedoraproject.org/updates/FEDORA-2018-d7aeaa74da nodejs-brace-expansion-1.1.11-1.fc28 314 https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc073fdc1a nodejs-atob-2.1.1-1.fc28 190 https://bodhi.fedoraproject.org/updates/FEDORA-2018-cc4b7af297 xerces-c27-2.7.0-28.fc28 142 https://bodhi.fedoraproject.org/updates/FEDORA-2018-aa3752ac3c nginx-1.14.1-1.fc28 122 https://bodhi.fedoraproject.org/updates/FEDORA-2018-cc86ef9e22 squid-4.4-1.fc28 49 https://bodhi.fedoraproject.org/updates/FEDORA-2019-86412405d5 bind-9.11.5-4.P4.fc28 36 https://bodhi.fedoraproject.org/updates/FEDORA-2019-63029a7692 libu2f-host-1.1.8-1.fc28 16 https://bodhi.fedoraproject.org/updates/FEDORA-2019-ba19e79e9a thunderbird-60.6.1-1.fc28 15 https://bodhi.fedoraproject.org/updates/FEDORA-2019-8b8c774b84 aria2-1.34.0-4.fc28 14 https://bodhi.fedoraproject.org/updates/FEDORA-2019-0927602e59 chromium-73.0.3683.86-2.fc28 8 https://bodhi.fedoraproject.org/updates/FEDORA-2019-a4ed7400f4 httpd-2.4.39-1.fc28 4 https://bodhi.fedoraproject.org/updates/FEDORA-2019-2fff3c6889 osbs-client-0.52-2.fc28 4 https://bodhi.fedoraproject.org/updates/FEDORA-2019-782e6e61ce atomic-reactor-1.6.36.1-3.fc28 2 https://bodhi.fedoraproject.org/updates/FEDORA-2019-019c5314a0 samba-4.8.11-0.fc28 2 https://bodhi.fedoraproject.org/updates/FEDORA-2019-64ed5e4dfa znc-1.7.3-1.fc28 1 https://bodhi.fedoraproject.org/updates/FEDORA-2019-235c682f35 wavpack-5.1.0-12.fc28 1 https://bodhi.fedoraproject.org/updates/FEDORA-2019-902786bc1e gradle-4.3.1-9.fc28
The following Fedora 28 Critical Path updates have yet to be approved: Age URL 122 https://bodhi.fedoraproject.org/updates/FEDORA-2018-9f541b469b nfs-utils-2.3.3-1.rc2.fc28 86 https://bodhi.fedoraproject.org/updates/FEDORA-2019-78153d357c totem-pl-parser-3.26.2-1.fc28 77 https://bodhi.fedoraproject.org/updates/FEDORA-2019-bb30467485 ostree-2019.1-2.fc28 rpm-ostree-2019.1-1.fc28 69 https://bodhi.fedoraproject.org/updates/FEDORA-2019-cb4a3023ef iproute-4.20.0-1.fc28 52 https://bodhi.fedoraproject.org/updates/FEDORA-2019-6c4e362bd0 dhcp-4.3.6-22.fc28 dnsperf-2.2.1-1.fc28 bind-dyndb-ldap-11.1-13.fc28 bind-9.11.5-2.P1.fc28 32 https://bodhi.fedoraproject.org/updates/FEDORA-2019-c4107ac9d3 koji-1.17.0-5.fc28 31 https://bodhi.fedoraproject.org/updates/FEDORA-2019-cb98bf5ace fedfind-4.2.2-1.fc28 python-productmd-1.20-1.fc28 28 https://bodhi.fedoraproject.org/updates/FEDORA-2019-d95d1a1e0e libseccomp-2.4.0-0.fc28 23 https://bodhi.fedoraproject.org/updates/FEDORA-2019-e60ecc03b4 python-productmd-1.21-1.fc28 23 https://bodhi.fedoraproject.org/updates/FEDORA-2019-457ab67a6c psmisc-23.1-3.1.fc28 16 https://bodhi.fedoraproject.org/updates/FEDORA-2019-a0ae4e93b9 sssd-1.16.4-2.fc28 16 https://bodhi.fedoraproject.org/updates/FEDORA-2019-ba19e79e9a thunderbird-60.6.1-1.fc28 12 https://bodhi.fedoraproject.org/updates/FEDORA-2019-a79729ce2f highlight-3.50-1.fc28 9 https://bodhi.fedoraproject.org/updates/FEDORA-2019-dd57433cec openjpeg2-2.3.1-1.fc28 mingw-openjpeg2-2.3.1-1.fc28 9 https://bodhi.fedoraproject.org/updates/FEDORA-2019-a4a40aeb8f quota-4.04-8.fc28 9 https://bodhi.fedoraproject.org/updates/FEDORA-2019-a15e82b4d9 pungi-4.1.35-1.fc28 8 https://bodhi.fedoraproject.org/updates/FEDORA-2019-ba19af6a58 libldb-1.4.0-5.fc28.1.3.8 samba-4.8.10-0.fc28 8 https://bodhi.fedoraproject.org/updates/FEDORA-2019-8e8681281c fuse-2.9.9-2.fc28 4 https://bodhi.fedoraproject.org/updates/FEDORA-2019-acd6fbb8ff vim-8.1.1137-1.fc28 2 https://bodhi.fedoraproject.org/updates/FEDORA-2019-019c5314a0 samba-4.8.11-0.fc28 1 https://bodhi.fedoraproject.org/updates/FEDORA-2019-a9b42f633a perl-5.26.3-418.fc28 1 https://bodhi.fedoraproject.org/updates/FEDORA-2019-235c682f35 wavpack-5.1.0-12.fc28
The following builds have been pushed to Fedora 28 updates-testing
3dprinter-udev-rules-0.2.2-1.fc28 R-backports-1.1.4-1.fc28 R-rversions-1.1.0-1.fc28 R-rvest-0.3.3-1.fc28 R-tinytex-0.12-1.fc28 appstream-data-28-14.fc28 chirp-20190410-1.fc28 distribution-gpg-keys-1.30-1.fc28 fedora-upgrade-30.5-1.fc28 fotoxx-19.8-1.fc28 gambas3-3.12.2-1.fc28 geolite2-20190409-1.fc28 homebank-5.2.4-1.fc28 hostapd-2.7-2.fc28 hylafax+-7.0.0-1.fc28 jetty-9.4.11-3.v20180605.fc28 linux-system-roles-1.0-9.fc28 nextcloud-client-2.5.2-1.fc28 nmstate-0.0.5-2.fc28 perl-IO-Socket-SSL-2.066-1.fc28 perl-Test2-Suite-0.000111-2.fc28 php-bartlett-php-compatinfo-db-1.42.0-1.fc28 playerctl-2.0.2-2.fc28 python-wtforms-2.2.1-3.fc28 rdopkg-0.51.1-1.fc28 scidavis-1.25-4.fc28 toolbox-0.0.8-1.fc28 torrent-file-editor-0.3.14-1.fc28 webkit2gtk3-2.24.1-1.fc28 xtl-0.6.3-1.fc28 zipios-2.2.0-1.fc28
Details about builds:
================================================================================ 3dprinter-udev-rules-0.2.2-1.fc28 (FEDORA-2019-3d824760e9) Rules for udev to give regular users access to operate 3D printers -------------------------------------------------------------------------------- Update Information:
Update to 0.2.2, add support for Lulzbot TAZ Pro in Bootloader mode -------------------------------------------------------------------------------- ChangeLog:
* Fri Apr 12 2019 Miro Hron��ok mhroncok@redhat.com - 0.2.2-1 - Update to 0.2.2 * Thu Jan 31 2019 Fedora Release Engineering releng@fedoraproject.org - 0.2.1-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Thu Jul 12 2018 Fedora Release Engineering releng@fedoraproject.org - 0.2.1-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ R-backports-1.1.4-1.fc28 (FEDORA-2019-f274656816) Reimplementations of Functions Introduced Since R-3.0.0 -------------------------------------------------------------------------------- Update Information:
Update to latest version -------------------------------------------------------------------------------- ChangeLog:
* Wed Apr 10 2019 Elliott Sales de Andrade quantum.analyst@gmail.com - 1.1.4-1 - Update to latest version -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1698600 - R-backports-1.1.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1698600 --------------------------------------------------------------------------------
================================================================================ R-rversions-1.1.0-1.fc28 (FEDORA-2019-ab29aabc1b) Query 'R' Versions, Including 'r-release' and 'r-oldrel' -------------------------------------------------------------------------------- Update Information:
Update to latest version -------------------------------------------------------------------------------- ChangeLog:
* Thu Apr 11 2019 Elliott Sales de Andrade quantum.analyst@gmail.com - 1.1.0-1 - Update to latest version * Thu Jan 31 2019 Fedora Release Engineering releng@fedoraproject.org - 1.0.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Thu Jul 12 2018 Fedora Release Engineering releng@fedoraproject.org - 1.0.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1698938 - R-rversions-1.1.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1698938 --------------------------------------------------------------------------------
================================================================================ R-rvest-0.3.3-1.fc28 (FEDORA-2019-2be4443c9d) Easily Harvest (Scrape) Web Pages -------------------------------------------------------------------------------- Update Information:
Update to latest version -------------------------------------------------------------------------------- ChangeLog:
* Thu Apr 11 2019 Elliott Sales de Andrade quantum.analyst@gmail.com - 0.3.3-1 - Update to latest version * Thu Jan 31 2019 Fedora Release Engineering releng@fedoraproject.org - 0.3.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Thu Jul 12 2018 Fedora Release Engineering releng@fedoraproject.org - 0.3.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1698846 - R-rvest-0.3.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1698846 --------------------------------------------------------------------------------
================================================================================ R-tinytex-0.12-1.fc28 (FEDORA-2019-032e812023) Helper Functions to Install and Maintain 'TeX Live', and Compile 'LaTeX' Documents -------------------------------------------------------------------------------- Update Information:
Update to latest version -------------------------------------------------------------------------------- ChangeLog:
* Thu Apr 11 2019 Elliott Sales de Andrade quantum.analyst@gmail.com - 0.12-1 - Update to latest version -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1699158 - R-tinytex-0.12 is available https://bugzilla.redhat.com/show_bug.cgi?id=1699158 --------------------------------------------------------------------------------
================================================================================ appstream-data-28-14.fc28 (FEDORA-2019-7d38070324) Fedora AppStream metadata -------------------------------------------------------------------------------- Update Information:
New metadata version -------------------------------------------------------------------------------- ChangeLog:
* Fri Apr 12 2019 Kalev Lember klember@redhat.com - 28-14 - New metadata version --------------------------------------------------------------------------------
================================================================================ chirp-20190410-1.fc28 (FEDORA-2019-7c21cc8ec7) A tool for programming two-way radio equipment -------------------------------------------------------------------------------- Update Information:
Changes for Build #574 [Dan Smith dsmith@danplanet.com] Fix Puxing 777 tuning steps -------------------------------------------------------------------------------- ChangeLog:
* Wed Apr 10 2019 Richard Shaw hobbes1069@gmail.com - 20190410-1 - Update to 20190410. --------------------------------------------------------------------------------
================================================================================ distribution-gpg-keys-1.30-1.fc28 (FEDORA-2019-cee6a06a55) GPG keys of various Linux distributions -------------------------------------------------------------------------------- Update Information:
- Deleted old Copr keys and added new Copr keys - add brave key - Add remi 2019 key -------------------------------------------------------------------------------- ChangeLog:
* Thu Apr 11 2019 Miroslav Such�� msuchy@redhat.com 1.30-1 - Deleted old Copr keys and added new Copr keys - readme: add note about Debian, Ubuntu and Arch - update list of keys in README - add brave key - Add remi 2019 key --------------------------------------------------------------------------------
================================================================================ fedora-upgrade-30.5-1.fc28 (FEDORA-2019-e8d37b9ab2) Upgrade Fedora to next version using dnf upgrade (unofficial tool) -------------------------------------------------------------------------------- Update Information:
- warn when the user is not running screen or tmux - improve exit banner when failure happens - package fedora-release does not need to be installed, it can be fedora- release-common -------------------------------------------------------------------------------- ChangeLog:
* Thu Apr 11 2019 Miroslav Such�� msuchy@redhat.com 30.5-1 - warn when user is not running screen or tmux - improve exit banner when failure happens - package fedora-release does not need to be installed, it can be fedora- release-common --------------------------------------------------------------------------------
================================================================================ fotoxx-19.8-1.fc28 (FEDORA-2019-d736286e83) Photo editor -------------------------------------------------------------------------------- Update Information:
19.8 -------------------------------------------------------------------------------- ChangeLog:
* Fri Apr 12 2019 Gwyn Ciesla gwync@protonmail.com - 19.8-1 - 19.8 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1699299 - fotoxx-19.8 is available https://bugzilla.redhat.com/show_bug.cgi?id=1699299 --------------------------------------------------------------------------------
================================================================================ gambas3-3.12.2-1.fc28 (FEDORA-2019-f75cae22d9) IDE based on a basic interpreter with object extensions -------------------------------------------------------------------------------- Update Information:
Update to 3.12.2. -------------------------------------------------------------------------------- ChangeLog:
* Wed Apr 10 2019 Tom Callaway spot@fedoraproject.org - 3.12.2-1 - update to 3.12.2 * Thu Jan 31 2019 Fedora Release Engineering releng@fedoraproject.org - 3.11.4-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Fri Jan 25 2019 Marek Kasik mkasik@redhat.com - 3.11.4-5 - Rebuild for poppler-0.73.0 * Mon Jan 14 2019 Bj��rn Esser besser82@fedoraproject.org - 3.11.4-4 - Rebuilt for libcrypt.so.2 (#1666033) * Sat Jan 12 2019 Bj��rn Esser besser82@fedoraproject.org - 3.11.4-3 - Add patch to fix missing FALSE/TRUE defines - Remove trailing white-spaces - Install COPYING using %license - Remove unused patches from repo - Drop unneeded Group tag - Use %make_build and %make_install macros - Remove unneeded scriptlets, mime-info has file-triggers * Thu Aug 23 2018 Nicolas Chauvet kwizart@gmail.com - 3.11.4-2 - Rebuilt for glew 2.1.0 * Wed Aug 15 2018 Tom Callaway spot@fedoraproject.org - 3.11.4-1 - update to 3.11.4 * Tue Aug 14 2018 Marek Kasik mkasik@redhat.com - 3.11.3-2 - Rebuild for poppler-0.67.0 * Mon Jul 23 2018 Tom Callaway spot@fedoraproject.org - 3.11.3-1 - update to 3.11.3 * Fri Jul 13 2018 Fedora Release Engineering releng@fedoraproject.org - 3.10.0-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Fri Mar 23 2018 Marek Kasik mkasik@redhat.com - 3.10.0-11 - Rebuild for poppler-0.63.0 --------------------------------------------------------------------------------
================================================================================ geolite2-20190409-1.fc28 (FEDORA-2019-ffb9919046) Free IP geolocation databases -------------------------------------------------------------------------------- Update Information:
- Latest upstream -------------------------------------------------------------------------------- ChangeLog:
* Thu Apr 11 2019 Carl George carl@george.computer - 20190409-1 - Latest upstream --------------------------------------------------------------------------------
================================================================================ homebank-5.2.4-1.fc28 (FEDORA-2019-816a6db8c1) Free easy personal accounting for all -------------------------------------------------------------------------------- Update Information:
- Update to 5.2.4 fixes rhbz #1698572 -------------------------------------------------------------------------------- ChangeLog:
* Thu Apr 11 2019 Filipe Rosset rosset.filipe@gmail.com - 5.2.4-1 - Update to 5.2.4 fixes rhbz #1698572 * Tue Mar 19 2019 Mukundan Ragavan nonamedotc@fedoraproject.org - 5.2.3-1 - Update to 5.2.3 * Fri Feb 1 2019 Fedora Release Engineering releng@fedoraproject.org - 5.2.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1698572 - homebank-5.2.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1698572 --------------------------------------------------------------------------------
================================================================================ hostapd-2.7-2.fc28 (FEDORA-2019-d03bae77f5) IEEE 802.11 AP, IEEE 802.1X/WPA/WPA2/EAP/RADIUS Authenticator -------------------------------------------------------------------------------- Update Information:
Update to version 2.7 from upstream Security fix for CVE-2019-9494 (cache attack against SAE) Security fix for CVE-2019-9495 (cache attack against EAP-pwd) Security fix for CVE-2019-9496 (SAE confirm missing state validation in hostapd/AP) Security fix for CVE-2019-9497 (EAP-pwd server not checking for reflection attack) Security fix for CVE-2019-9498 (EAP-pwd server missing commit validation for scalar/element) Security fix for CVE-2019-9499 (EAP-pwd peer missing commit validation for scalar/element) -------------------------------------------------------------------------------- ChangeLog:
* Fri Apr 12 2019 John W. Linville linville@redhat.com - 2.7-2 - Bump N-V-R for rebuild * Fri Apr 12 2019 John W. Linville linville@redhat.com - 2.7-1 - Update to version 2.7 from upstream - Remove obsolete patches for NL80211_ATTR_SMPS_MODE encoding and KRACK - Fix CVE-2019-9494 (cache attack against SAE) - Fix CVE-2019-9495 (cache attack against EAP-pwd) - Fix CVE-2019-9496 (SAE confirm missing state validation in hostapd/AP) - Fix CVE-2019-9497 (EAP-pwd server not checking for reflection attack) - Fix CVE-2019-9498 (EAP-pwd server missing commit validation for scalar/element) - Fix CVE-2019-9499 (EAP-pwd peer missing commit validation for scalar/element) * Fri Feb 1 2019 Fedora Release Engineering releng@fedoraproject.org - 2.6-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Fri Jul 20 2018 John W. Linville linville@redhat.com - 2.6-11 - Add previously unnecessary BuildRequires for gcc * Fri Jul 13 2018 Fedora Release Engineering releng@fedoraproject.org - 2.6-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1699141 - CVE-2019-9494 wpa_supplicant: SAE Timing-based and Cache-based side-channel attack against WPA3's Dragonfly handshake https://bugzilla.redhat.com/show_bug.cgi?id=1699141 [ 2 ] Bug #1699149 - CVE-2019-9495 wpa_supplicant: EAP-pwd cache side-channel attack https://bugzilla.redhat.com/show_bug.cgi?id=1699149 [ 3 ] Bug #1699153 - CVE-2019-9496 hostapd: SAE confirm missing state validation in hostapd/AP https://bugzilla.redhat.com/show_bug.cgi?id=1699153 [ 4 ] Bug #1699164 - CVE-2019-9497 wpa_supplicant: EAP-pwd server not checking for reflection attack https://bugzilla.redhat.com/show_bug.cgi?id=1699164 --------------------------------------------------------------------------------
================================================================================ hylafax+-7.0.0-1.fc28 (FEDORA-2019-eb202d1bf4) An enterprise-strength fax server -------------------------------------------------------------------------------- Update Information:
update to 7.0.0, add openssl dependencies -------------------------------------------------------------------------------- ChangeLog:
* Wed Apr 10 2019 Lee Howard faxguy@howardsilvan.com - 7.0.0-1 - update to 7.0.0, add openssl dependencies * Fri Feb 1 2019 Fedora Release Engineering releng@fedoraproject.org - 5.6.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Mon Jan 14 2019 Bj��rn Esser besser82@fedoraproject.org - 5.6.1-2 - Rebuilt for libcrypt.so.2 (#1666033) --------------------------------------------------------------------------------
================================================================================ jetty-9.4.11-3.v20180605.fc28 (FEDORA-2019-d9f867cb65) Java Webserver and Servlet Container -------------------------------------------------------------------------------- Update Information:
Fixes CVE-2018-12545 - denial of service security vulnerability. -------------------------------------------------------------------------------- ChangeLog:
* Thu Apr 11 2019 Mikolaj Izdebski mizdebsk@redhat.com - 9.4.11-3.v20180605 - Fix denial of service security vulnerability - Resolves: CVE-2018-12545 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1696062 - CVE-2018-12545 jetty: large settings frames causing denial of service https://bugzilla.redhat.com/show_bug.cgi?id=1696062 --------------------------------------------------------------------------------
================================================================================ linux-system-roles-1.0-9.fc28 (FEDORA-2019-197c1515f6) Set of interfaces for unified system management -------------------------------------------------------------------------------- Update Information:
Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1646795 - Review Request: linux-system-roles - Set of interfaces for unified system management https://bugzilla.redhat.com/show_bug.cgi?id=1646795 --------------------------------------------------------------------------------
================================================================================ nextcloud-client-2.5.2-1.fc28 (FEDORA-2019-c5d5d5aef3) The Nextcloud Client -------------------------------------------------------------------------------- Update Information:
2.5.2 release ---- 2.5.1 release ---- 2.5.0 release. Please report any need to reconfigure login access mode -------------------------------------------------------------------------------- ChangeLog:
* Thu Apr 11 2019 Germano Massullo germano.massullo@gmail.com - 2.5.2-1 - 2.5.2 release - Changed python2-sphinx requirement to python3-sphinx * Fri Feb 1 2019 Fedora Release Engineering releng@fedoraproject.org - 2.5.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Wed Jan 9 2019 Germano Massullo germano@germanomassullo.org - 2.5.1-1 - 2.5.1 release * Mon Nov 19 2018 Germano Massullo germano@germanomassullo.org - 2.5.0-2 - added ExcludeArch: ppc64, ppc64le, s390. Read https://bugzilla.redhat.com/show_bug.cgi?id=1651261 * Thu Nov 15 2018 Germano Massullo germano@germanomassullo.org - 2.5.0-1 - 2.5.0 release * Wed Aug 15 2018 Germano Massullo germano.massullo@gmail.com - 2.5.0-0.1 - 2.5.0 beta 1 * Fri Jul 13 2018 Fedora Release Engineering releng@fedoraproject.org - 2.4.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Tue Feb 13 2018 Germano Massullo germano.massullo@gmail.com - 2.4.0-1 - 2.4.0 release - Updated syslibs patch, thanks to Robert-Andr�� Mauchin - Added comment to syslibs patch, thanks to Robert-Andr�� Mauchin - updated nextcloud client theming to 2.3.3 * Thu Feb 8 2018 Fedora Release Engineering releng@fedoraproject.org - 2.3.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1690427 - nextcloud-client-2.5.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1690427 [ 2 ] Bug #1647091 - Nautilus integration not working/shows nothing https://bugzilla.redhat.com/show_bug.cgi?id=1647091 [ 3 ] Bug #1563520 - dependency for nextcloud-client will switch to python3 https://bugzilla.redhat.com/show_bug.cgi?id=1563520 [ 4 ] Bug #1487701 - Window isn't shown when the app is launched https://bugzilla.redhat.com/show_bug.cgi?id=1487701 [ 5 ] Bug #1649714 - nextcloud-client-2.5.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1649714 [ 6 ] Bug #1638347 - Please port nextcloud-client-nemo support to python3 https://bugzilla.redhat.com/show_bug.cgi?id=1638347 [ 7 ] Bug #1659643 - [abrt] nextcloud-client: OCC::PropagatorCompositeJob::scheduleSelfOrChild(): nextcloud killed by SIGSEGV https://bugzilla.redhat.com/show_bug.cgi?id=1659643 --------------------------------------------------------------------------------
================================================================================ nmstate-0.0.5-2.fc28 (FEDORA-2019-436a315cc7) Declarative network manager API -------------------------------------------------------------------------------- Update Information:
Add missing runtime dependency -- python3-dbus -------------------------------------------------------------------------------- ChangeLog:
* Fri Apr 12 2019 Gris Ge <fge@redhat.com - 0.0.5-2 - Add missing runtime requirement: python3-dbus --------------------------------------------------------------------------------
================================================================================ perl-IO-Socket-SSL-2.066-1.fc28 (FEDORA-2019-15afe88b77) Perl library for transparent SSL -------------------------------------------------------------------------------- Update Information:
Current upstream release, with various bug-fixes and enhancements. The certificates used in the test suite have been regenerated (they had expired) so the test suite can run successfully. -------------------------------------------------------------------------------- ChangeLog:
* Wed Mar 6 2019 Paul Howarth paul@city-fan.org - 2.066-1 - Update to 2.066 - Make sure that Net::SSLeay::CTX_get0_param is defined before using X509_V_FLAG_PARTIAL_CHAIN; Net::SSLeay 1.85 defined only the second with LibreSSL 2.7.4 but not the first (CPAN RT#=128716) - Prefer AES for server side cipher default since it is usually hardware-accelerated - Fix test t/verify_partial_chain.t by using the newly exposed function can_partial_chain instead of guessing (wrongly) if the functionality is available * Mon Mar 4 2019 Paul Howarth paul@city-fan.org - 2.064-1 - Update to 2.064 - Make algorithm for fingerprint optional, i.e. detect based on length of fingerprint (CPAN RT#127773) - Fix t/sessions.t and improve stability of t/verify_hostname.t on Windows - Use CTX_set_ecdh_auto when needed (OpenSSL 1.0.2) if explicit curves are set - Update fingerprints for live tests * Sat Mar 2 2019 Paul Howarth paul@city-fan.org - 2.063-1 - Update to 2.063 - Support for both RSA and ECDSA certificate on same domain - Update PublicSuffix - Refuse to build if Net::SSLeay is compiled with one version of OpenSSL but then linked against another API-incompatible version (i.e. more than just the patchlevel differs) * Mon Feb 25 2019 Paul Howarth paul@city-fan.org - 2.062-1 - Update to 2.062 - Enable X509_V_FLAG_PARTIAL_CHAIN if supported by Net::SSLeay (1.83+) and OpenSSL (1.1.0+); this makes leaf certificates or intermediate certificates in the trust store be usable as full trust anchors too * Sat Feb 23 2019 Paul Howarth paul@city-fan.org - 2.061-1 - Update to 2.061 - Support for TLS 1.3 session reuse (needs Net::SSLeay ��� 1.86); note that the previous (and undocumented) API for the session cache has been changed - Support for multiple curves, automatic setting of curves and setting of supported curves in client (needs Net::SSLeay ��� 1.86) - Enable Post-Handshake-Authentication (TLSv1.3 feature) client-side when client certificates are provided (needs Net::SSLeay ��� 1.86) * Thu Feb 7 2019 Petr Pisar ppisar@redhat.com - 2.060-3 - Client sends a post-handshake-authentication extension if a client key and a certificate are available (bug #1632660) * Mon Sep 24 2018 Petr Pisar ppisar@redhat.com - 2.060-2 - Prevent tests from dying on SIGPIPE (CPAN RT#126899) * Mon Sep 17 2018 Paul Howarth paul@city-fan.org - 2.060-1 - Update to 2.060 - Support for TLS 1.3 with OpenSSL 1.1.1 (needs Net::SSLeay ��� 1.86); see also CPAN RT#126899 - TLS 1.3 support is not complete yet for session reuse * Tue Aug 21 2018 Petr Pisar ppisar@redhat.com - 2.059-2 - Adapt to OpenSSL 1.1.1, it requires patched Net-SSLeay (bug #1616198) * Thu Aug 16 2018 Paul Howarth paul@city-fan.org - 2.059-1 - Update to 2.059 - Fix memory leak when CRLs are used (CPAN RT#125867) - Fix memory leak when using stop_SSL and threads (https://rt.cpan.org/Ticket/Display.html?id=125867#txn-1797132) * Thu Jul 19 2018 Paul Howarth paul@city-fan.org - 2.058-1 - Update to 2.058 - Fix memory leak that occurred with explicit stop_SSL in connection with non-blocking sockets or timeout (CPAN RT#125867) - Fix redefine warnings in case Socket6 is installed but neither IO::Socket::IP nor IO::Socket::INET6 (CPAN RT#124963) - IO::Socket::SSL::Intercept - optional 'serial' argument can be starting number or callback to create serial number based on the original certificate - New function get_session_reused to check if a session got reused - IO::Socket::SSL::Utils::CERT_asHash: fingerprint_xxx now set to the correct value - Fix t/session_ticket.t: It failed with OpenSSL 1.1.* since this version expects the extKeyUsage of clientAuth in the client cert also to be allowed by the CA if CA uses extKeyUsage * Fri Jul 13 2018 Fedora Release Engineering releng@fedoraproject.org - 2.056-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Thu Jun 28 2018 Jitka Plesnikova jplesnik@redhat.com - 2.056-2 - Perl 5.28 rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1699247 - perl-IO-Socket-SSL-2.056-1.fc28 FTBFS: tests fail due to expired certificates https://bugzilla.redhat.com/show_bug.cgi?id=1699247 --------------------------------------------------------------------------------
================================================================================ perl-Test2-Suite-0.000111-2.fc28 (FEDORA-2019-85bf368eff) Set of tools built upon the Test2 framework -------------------------------------------------------------------------------- Update Information:
This release fixes a test failure due to an updated perl-Term-Table package. -------------------------------------------------------------------------------- ChangeLog:
* Fri Apr 12 2019 Petr Pisar ppisar@redhat.com - 0.000111-2 - Remove an invalid test that went out of synchronization with Term-Table (bug #1699250) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1699250 - perl-Test2-Suite-0.000111-1.fc28 FTBFS: Failed test 'sanitize' at t/modules/Util/Table.t line 277 https://bugzilla.redhat.com/show_bug.cgi?id=1699250 --------------------------------------------------------------------------------
================================================================================ php-bartlett-php-compatinfo-db-1.42.0-1.fc28 (FEDORA-2019-e188e8f629) Reference Database to be used with php-compatinfo library -------------------------------------------------------------------------------- Update Information:
**Version 1.42.0** - 2019-04-10 **Added** - Support to PHP 7.3.4 - Support to PHP 7.2.17 - Support to PHP 7.1.28 **Changed** - Igbinary reference updated to version 3.0.1 (stable) - Mailparse reference updated to version 3.0.3 (stable) - Redis reference updated to version 4.3.0 (stable) - Xdebug reference updated to version 2.7.1 (stable) -------------------------------------------------------------------------------- ChangeLog:
* Thu Apr 11 2019 Remi Collet remi@remirepo.net - 1.42.0-1 - update to 1.42.0 - open https://github.com/llaville/php-compatinfo-db/issues/28 missing new reference for memcache 4.0.3 and sqlite3 --------------------------------------------------------------------------------
================================================================================ playerctl-2.0.2-2.fc28 (FEDORA-2019-4249741e9d) Command-line MPRIS-compatible Media Player Controller -------------------------------------------------------------------------------- Update Information:
First package for playerctl in Fedora -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1671571 - Review Request: playerctl - MPRIS command-line controller and library for spotify, vlc, audacious, bmp, cmus, and others https://bugzilla.redhat.com/show_bug.cgi?id=1671571 --------------------------------------------------------------------------------
================================================================================ python-wtforms-2.2.1-3.fc28 (FEDORA-2019-439c683618) Forms validation and rendering library for python -------------------------------------------------------------------------------- Update Information:
New upstream version 2.2.1, where Field supports render_kw -------------------------------------------------------------------------------- ChangeLog:
* Sat Jul 14 2018 Fedora Release Engineering releng@fedoraproject.org - 2.2.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Sun Jul 8 2018 Itamar Reis Peixoto itamar@ispbrasil.com.br - 2.2.1-2 - update some macros * Sat Jun 30 2018 Itamar Reis Peixoto itamar@ispbrasil.com.br - 2.2.1-1 - new version 2.2.1 * Tue Jun 19 2018 Miro Hron��ok mhroncok@redhat.com - 2.0-15 - Rebuilt for Python 3.7 * Fri Feb 16 2018 Itamar Reis Peixoto itamar@ispbrasil.com.br - 2.0-14 - make spec file compatible with epel7 - remove conditionals, always build for python 3 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1620370 - new version python-wtforms 2.2.1 https://bugzilla.redhat.com/show_bug.cgi?id=1620370 --------------------------------------------------------------------------------
================================================================================ rdopkg-0.51.1-1.fc28 (FEDORA-2019-de7597b449) RPM packaging automation tool CLI -------------------------------------------------------------------------------- Update Information:
- Update to 0.51.1 - Change requirement: bunch -> munch (available for both py2 and py3) -------------------------------------------------------------------------------- ChangeLog:
* Mon Apr 8 2019 Jakub Ru��i��ka jruzicka@redhat.com 0.51.1-1 - Update to 0.51.1 - Change requirement: bunch -> munch * Mon Apr 8 2019 Jakub Ru��i��ka jruzicka@redhat.com 0.50.0-1 - Update to 0.50.0 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1695604 - rdopkg mockbuild breaks to due missing bunch import in py3 https://bugzilla.redhat.com/show_bug.cgi?id=1695604 --------------------------------------------------------------------------------
================================================================================ scidavis-1.25-4.fc28 (FEDORA-2019-85d8d00628) Application for Scientific Data Analysis and Visualization -------------------------------------------------------------------------------- Update Information:
Fixes sf bugs [#380](https://sourceforge.net/p/scidavis/scidavis-bugs/380/) & [#381](https://sourceforge.net/p/scidavis/scidavis-bugs/381/), concerning text loading and colors. -------------------------------------------------------------------------------- ChangeLog:
* Fri Apr 12 2019 Alexander Ploumistos alexpl@fedoraproject.org - 1.25-4 - Backport fixes for sf bugs #380 and #381 - Merge all post-1.25 bugfixes as the same files are being edited --------------------------------------------------------------------------------
================================================================================ toolbox-0.0.8-1.fc28 (FEDORA-2019-a6d1d59354) Unprivileged development environment -------------------------------------------------------------------------------- Update Information:
* Add label for tagging, not tied to the fedora-toolbox name * Add short variants for various options in 'create' and 'enter' * Ensure that names of toolbox containers don't have a colon * Enable Travis * Fix miscellaneous issues pointed out by https://www.shellcheck.net/ * Give access to Kerberos if KCM credential caches are being used * Improve the onboarding experience * Reduce the sizes of the images by removing temporary files created by DNF * Use a lighter entry point than /bin/sh -------------------------------------------------------------------------------- ChangeLog:
* Fri Apr 12 2019 Debarshi Ray rishi@fedoraproject.org - 0.0.8-1 - Update to 0.0.8 --------------------------------------------------------------------------------
================================================================================ torrent-file-editor-0.3.14-1.fc28 (FEDORA-2019-6f52515f74) Qt based GUI tool designed to create and edit .torrent files -------------------------------------------------------------------------------- Update Information:
Bump to v0.3.14 -------------------------------------------------------------------------------- ChangeLog:
* Fri Apr 12 2019 Ivan Romanov drizt72@zoho.eu - 0.3.14-1 - Bump to v0.3.14 * Sun Feb 3 2019 Fedora Release Engineering releng@fedoraproject.org - 0.3.13-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ webkit2gtk3-2.24.1-1.fc28 (FEDORA-2019-432b3dff25) GTK Web content engine library -------------------------------------------------------------------------------- Update Information:
Rebase to latest stable branch 2.24. For details see 2.23 and 2.24 release notes: * https://www.webkitgtk.org/2018/11/22/webkitgtk2.23.1-released.html * https://www.webkitgtk.org/2019/01/08/webkitgtk2.23.2-released.html * https://www.webkitgtk.org/2019/01/14/webkitgtk2.23.3-released.html * https://www.webkitgtk.org/2019/02/14/webkitgtk2.23.90-released.html * https://www.webkitgtk.org/2019/02/20/webkitgtk2.23.91-released.html * https://www.webkitgtk.org/2019/03/06/webkitgtk2.23.92-released.html * https://www.webkitgtk.org/2019/03/13/webkitgtk2.24.0-released.html * https://www.webkitgtk.org/2019/04/09/webkitgtk2.24.1-released.html Security fix for CVE-2019-6251 -------------------------------------------------------------------------------- ChangeLog:
* Wed Apr 10 2019 Eike Rathke erack@redhat.com - 2.24.1-1 - Update to 2.24.1 - Merged from F30 for consistency: - Switch to Ninja - Switch to python3 - Switch to using pkgconfig build requires - Switch to enchant-2 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1667409 - CVE-2019-6251 epiphany: Improper input validation in embed/ephy-web-view.c https://bugzilla.redhat.com/show_bug.cgi?id=1667409 --------------------------------------------------------------------------------
================================================================================ xtl-0.6.3-1.fc28 (FEDORA-2019-9cbfff4bbd) QuantStack tools library -------------------------------------------------------------------------------- Update Information:
Update to latest version -------------------------------------------------------------------------------- ChangeLog:
* Wed Apr 10 2019 Elliott Sales de Andrade quantum.analyst@gmail.com - 0.6.3-1 - Update to latest version * Sat Apr 6 2019 Elliott Sales de Andrade quantum.analyst@gmail.com - 0.6.2-1 - Update to latest version -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1695706 - xtl-0.6.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1695706 [ 2 ] Bug #1697991 - xtl-0.6.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1697991 --------------------------------------------------------------------------------
================================================================================ zipios-2.2.0-1.fc28 (FEDORA-2019-2c3e4f110b) C++ library for reading and writing Zip files -------------------------------------------------------------------------------- Update Information:
Release notes for Zipios++ 2.2.0 -------------------------------- As per [issue #28 on Github](https://github.com/Zipios/Zipios/issues/28), there was a discrepancy in licenses because of the dostime.c and dostime.h files. These two files were removed and replaced by a DOSDateTime class instead. It's all C++ and uses a structure with field to convert the data as required. The license was also updated and copyright file fixed up to match the newer version. -------------------------------------------------------------------------------- ChangeLog:
* Thu Apr 11 2019 Richard Shaw hobbes1069@gmail.com - 2.2.0-1 - Update to 2.2.0. * Sun Feb 3 2019 Fedora Release Engineering releng@fedoraproject.org - 2.1.1-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Sat Jul 14 2018 Fedora Release Engineering releng@fedoraproject.org - 2.1.1-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1698849 - zipios-2.2.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1698849 --------------------------------------------------------------------------------