The following Fedora 28 Security updates need testing: Age URL 60 https://bodhi.fedoraproject.org/updates/FEDORA-2018-99eed1942f remctl-3.14-1.fc28 56 https://bodhi.fedoraproject.org/updates/FEDORA-2018-d510cfd7eb jgraphx-3.6.0.0-6.fc28 28 https://bodhi.fedoraproject.org/updates/FEDORA-2018-c75a37ae9b blktrace-1.2.0-6.fc28 15 https://bodhi.fedoraproject.org/updates/FEDORA-2018-202c536f70 gifsicle-1.91-1.fc28 9 https://bodhi.fedoraproject.org/updates/FEDORA-2018-52ee188215 cobbler-2.8.3-2.fc28 9 https://bodhi.fedoraproject.org/updates/FEDORA-2018-168af81706 batik-1.10-1.fc28 6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-17843a895b qt3-3.3.8b-74.fc28 6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-d7aeaa74da nodejs-brace-expansion-1.1.11-1.fc28 6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-18f8c6ce79 prosody-0.10.2-1.fc28 6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-d54c4f6452 slurm-17.11.7-1.fc28 4 https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc073fdc1a nodejs-atob-2.1.1-1.fc28 0 https://bodhi.fedoraproject.org/updates/FEDORA-2018-f91531043d elfutils-0.171-1.fc28 0 https://bodhi.fedoraproject.org/updates/FEDORA-2018-7a9a2f6ec0 plexus-archiver-3.5-6.fc28
The following Fedora 28 Critical Path updates have yet to be approved: Age URL 9 https://bodhi.fedoraproject.org/updates/FEDORA-2018-08197bc14f perl-5.26.2-412.fc28 9 https://bodhi.fedoraproject.org/updates/FEDORA-2018-73ddc10fd9 libunistring-0.9.10-1.fc28 7 https://bodhi.fedoraproject.org/updates/FEDORA-2018-fb514a807c p11-kit-0.23.12-1.fc28 7 https://bodhi.fedoraproject.org/updates/FEDORA-2018-26860ed5a8 quota-4.04-7.fc28 6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-37a0310def osinfo-db-20180531-1.fc28 6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-80b606cb29 seabios-1.11.1-1.fc28 6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-3324299b8f edk2-20180529gitee3198e672e2-1.fc28 4 https://bodhi.fedoraproject.org/updates/FEDORA-2018-94ac0eace1 iproute-4.16.0-1.fc28 1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-50a787999b lorax-28.13-1.fc28 1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-e9e11463bd brltty-5.6-19.fc28 0 https://bodhi.fedoraproject.org/updates/FEDORA-2018-366207cd19 kernel-4.16.14-300.fc28 0 https://bodhi.fedoraproject.org/updates/FEDORA-2018-4ed35b8c4f boost-1.66.0-7.fc28 0 https://bodhi.fedoraproject.org/updates/FEDORA-2018-83391450ba curl-7.59.0-4.fc28 0 https://bodhi.fedoraproject.org/updates/FEDORA-2018-f91531043d elfutils-0.171-1.fc28
The following builds have been pushed to Fedora 28 updates-testing
chirp-20180606-1.fc28 ddccontrol-db-20180602-1.fc28 dnsdist-1.3.0-2.fc28 elementary-calculator-0.1.4-1.fc28 freedink-dfarc-3.14-1.fc28 gnutls-3.6.2-3.fc28 kiwi-9.16.0-1.fc28 libtiff-4.0.9-10.fc28 miniupnpd-2.1-1.fc28 mint-themes-1.6.8-1.fc28 mint-x-icons-1.4.9-1.fc28 mint-y-icons-1.2.5-1.fc28 nbdkit-1.2.3-1.fc28 nss-3.37.3-1.1.fc28 nss-softokn-3.37.3-1.1.fc28 nss-util-3.37.3-1.0.fc28 odcs-0.2.4-2.fc28 openssl-pkcs11-0.4.7-7.fc28 openttd-1.8.0-3.fc28 perl-BSSolv-0.14-1.fc28 perl-CPAN-Perl-Releases-3.60-1.fc28 perl-CPANPLUS-0.917.600-1.fc28 perl-CPANPLUS-Dist-Build-0.90-1.fc28 perl-Date-Manip-6.72-1.fc28 perl-Diff-LibXDiff-0.05-1.fc28 php-pecl-mongodb-1.4.4-1.fc28 python-geoip2-2.9.0-1.fc28 python-regex-2018.06.06-1.fc28 scidavis-1.23-2.fc28 selinux-policy-3.14.1-32.fc28 singularity-2.5.1-1.fc28 strongswan-5.6.3-1.fc28 switchboard-2.3.1-1.fc28 unicode-emoji-11.0-1.fc28 xkeyboard-config-2.24-2.fc28 xorg-x11-xkb-utils-7.7-25.fc28 xscreensaver-5.39-5.fc28
Details about builds:
================================================================================ chirp-20180606-1.fc28 (FEDORA-2018-3b04198479) A tool for programming two-way radio equipment -------------------------------------------------------------------------------- Update Information:
Update to 20180606. -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 6 2018 Richard Shaw hobbes1069@gmail.com - 20180606-1 - Update to 20180606. --------------------------------------------------------------------------------
================================================================================ ddccontrol-db-20180602-1.fc28 (FEDORA-2018-7635571c06) DDC/CI control database for ddccontrol -------------------------------------------------------------------------------- Update Information:
This is new version of ddccontrol-db. -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 6 2018 Jaroslav ��karvada jskarvad@redhat.com - 20180602-1 - New version Resolves: rhbz#1587984 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1587984 - ddccontrol-db-20180602 is available https://bugzilla.redhat.com/show_bug.cgi?id=1587984 --------------------------------------------------------------------------------
================================================================================ dnsdist-1.3.0-2.fc28 (FEDORA-2018-489a7ce31e) Highly DNS-, DoS- and abuse-aware loadbalancer -------------------------------------------------------------------------------- Update Information:
Fix sigabrt on tcp query (https://github.com/PowerDNS/pdns/issues/6712) ---- Upstream released new version. See https://blog.powerdns.com/2018/03/30/dnsdist-1-3-0-released/ for more details. -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 6 2018 Ruben Kerkhof ruben@rubenkerkhof.com - 1.3.0-2 - Fix sigabrt on TCP query (https://github.com/PowerDNS/pdns/issues/6712) * Thu May 31 2018 Ruben Kerkhof ruben@rubenkerkhof.com - 1.3.0-1 - Upstream released new version - Enable DNS over TLS -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1409154 - dnsdist-1.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1409154 --------------------------------------------------------------------------------
================================================================================ elementary-calculator-0.1.4-1.fc28 (FEDORA-2018-13f7338f9f) Calculator app designed for elementary -------------------------------------------------------------------------------- Update Information:
Update to version 0.1.4 and renamed package (pantheon-calculator ��� elementary- calculator), following the new upstream naming system. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1587873 - Review Request: elementary-calculator - Calculator app designed for elementary https://bugzilla.redhat.com/show_bug.cgi?id=1587873 --------------------------------------------------------------------------------
================================================================================ freedink-dfarc-3.14-1.fc28 (FEDORA-2018-f2e8788852) Frontend and .dmod installer for GNU FreeDink -------------------------------------------------------------------------------- Update Information:
New upstream release Fix directory traversal in D-Mod extractor (CVE-2018-0496) (#1584843) (no answer from security team) -------------------------------------------------------------------------------- ChangeLog:
* Tue Jun 5 2018 Fedora Release Engineering releng@fedoraproject.org - 3.14-1 - New upstream release - Fix directory traversal in D-Mod extractor (CVE-2018-0496) (#1584843) (no answer from security team) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1584843 https://bugzilla.redhat.com/show_bug.cgi?id=1584843 --------------------------------------------------------------------------------
================================================================================ gnutls-3.6.2-3.fc28 (FEDORA-2018-9717a5bf55) A TLS protocol implementation -------------------------------------------------------------------------------- Update Information:
Include FIPS mode -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 6 2018 Nikos Mavrogiannopoulos nmav@redhat.com - 3.6.2-3 - Update to upstream 3.6.2 release * Fri May 25 2018 David Abdurachmanov david.abdurachmanov@gmail.com - 3.6.2-2 - Add missing BuildRequires: gnupg2 for gpgv2 in %prep --------------------------------------------------------------------------------
================================================================================ kiwi-9.16.0-1.fc28 (FEDORA-2018-af2158841f) Flexible operating system image builder -------------------------------------------------------------------------------- Update Information:
Upgrade to 9.16.0 to fix broken build processes with DNF as the package manager ([GH#SUSE/kiwi#761](https://github.com/SUSE/kiwi/issues/761)) -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 6 2018 Neal Gompa ngompa13@gmail.com - 9.16.0-1 - Upgrade to 9.16.0 (RH#1578808) - Drop Python 2 subpackage for F29+ -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1578808 - kiwi-9.16.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1578808 --------------------------------------------------------------------------------
================================================================================ libtiff-4.0.9-10.fc28 (FEDORA-2018-35d435f362) Library of functions for manipulating TIFF format image files -------------------------------------------------------------------------------- Update Information:
Fix for **CVE-2017-11613**. -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 6 2018 Nikola Forr�� nforro@redhat.com - 4.0.9-10 - Fix CVE-2017-11613 (#1475531) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1475531 - CVE-2017-11613 libtiff: Memory leak via corrupt td_imagelength in TIFFOpen function [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1475531 --------------------------------------------------------------------------------
================================================================================ miniupnpd-2.1-1.fc28 (FEDORA-2018-0001b48b68) Daemon to offer UPnP-IGD and NAT-PMP support -------------------------------------------------------------------------------- Update Information:
New package. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1585365 - Review Request: miniupnpd - Daemon to offer UPnP-IGD and NAT-PMP support https://bugzilla.redhat.com/show_bug.cgi?id=1585365 --------------------------------------------------------------------------------
================================================================================ mint-themes-1.6.8-1.fc28 (FEDORA-2018-339d60db87) Mint themes -------------------------------------------------------------------------------- Update Information:
........ -------------------------------------------------------------------------------- ChangeLog:
* Thu Jun 7 2018 Leigh Scott leigh123linux@googlemail.com - 1:1.6.8-1 - Update to 1.6.8 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1588234 - mint-themes-1.6.8 is available https://bugzilla.redhat.com/show_bug.cgi?id=1588234 [ 2 ] Bug #1588236 - mint-y-icons-1.2.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=1588236 [ 3 ] Bug #1588235 - mint-x-icons-1.4.9 is available https://bugzilla.redhat.com/show_bug.cgi?id=1588235 --------------------------------------------------------------------------------
================================================================================ mint-x-icons-1.4.9-1.fc28 (FEDORA-2018-339d60db87) Icon theme for Linux Mint -------------------------------------------------------------------------------- Update Information:
........ -------------------------------------------------------------------------------- ChangeLog:
* Thu Jun 7 2018 Leigh Scott leigh123linux@googlemail.com - 1.4.9-1 - New upstream release -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1588234 - mint-themes-1.6.8 is available https://bugzilla.redhat.com/show_bug.cgi?id=1588234 [ 2 ] Bug #1588236 - mint-y-icons-1.2.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=1588236 [ 3 ] Bug #1588235 - mint-x-icons-1.4.9 is available https://bugzilla.redhat.com/show_bug.cgi?id=1588235 --------------------------------------------------------------------------------
================================================================================ mint-y-icons-1.2.5-1.fc28 (FEDORA-2018-339d60db87) The Mint-Y icon theme -------------------------------------------------------------------------------- Update Information:
........ -------------------------------------------------------------------------------- ChangeLog:
* Thu Jun 7 2018 Leigh Scott leigh123linux@googlemail.com - 1.2.5-1 - New upstream release -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1588234 - mint-themes-1.6.8 is available https://bugzilla.redhat.com/show_bug.cgi?id=1588234 [ 2 ] Bug #1588236 - mint-y-icons-1.2.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=1588236 [ 3 ] Bug #1588235 - mint-x-icons-1.4.9 is available https://bugzilla.redhat.com/show_bug.cgi?id=1588235 --------------------------------------------------------------------------------
================================================================================ nbdkit-1.2.3-1.fc28 (FEDORA-2018-fc7f125cfa) NBD server -------------------------------------------------------------------------------- Update Information:
New stable version 1.2.3. -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 6 2018 Richard W.M. Jones rjones@redhat.com - 1.2.3-1 - New stable version 1.2.3. - Add patch to work around libvirt problem with relative socket paths. - Add patch to fix the xz plugin test with recent guestfish. --------------------------------------------------------------------------------
================================================================================ nss-3.37.3-1.1.fc28 (FEDORA-2018-38d2c74097) Network Security Services -------------------------------------------------------------------------------- Update Information:
Updates the nss family of packages to upstream NSS 3.37.3. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes https://developer.mozilla.org/en- US/docs/Mozilla/Projects/NSS/NSS_3.37.3_release_notes -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 6 2018 Daiki Ueno dueno@redhat.com - 3.37.3-1.1 - Backport fix for handling DTLS application_data before handshake * Tue Jun 5 2018 Daiki Ueno dueno@redhat.com - 3.37.3-1.0 - Update to NSS 3.37.3 * Mon Jun 4 2018 Daiki Ueno dueno@redhat.com - 3.37.1-1.0 - Update to NSS 3.37.1 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1553680 - Enable NSS FIPS startup tests in Fedora https://bugzilla.redhat.com/show_bug.cgi?id=1553680 [ 2 ] Bug #1575791 - nss-3.37.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1575791 [ 3 ] Bug #1505493 - Backport fixes related to NSS sql from NSS 3.34 to rawhide (nss-softokn parts) https://bugzilla.redhat.com/show_bug.cgi?id=1505493 [ 4 ] Bug #1543847 - nss-softokn: Build flags injection only partially successful https://bugzilla.redhat.com/show_bug.cgi?id=1543847 --------------------------------------------------------------------------------
================================================================================ nss-softokn-3.37.3-1.1.fc28 (FEDORA-2018-38d2c74097) Network Security Services Softoken Module -------------------------------------------------------------------------------- Update Information:
Updates the nss family of packages to upstream NSS 3.37.3. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes https://developer.mozilla.org/en- US/docs/Mozilla/Projects/NSS/NSS_3.37.3_release_notes -------------------------------------------------------------------------------- ChangeLog:
* Tue Jun 5 2018 Daiki Ueno dueno@redhat.com - 3.37.3-1.1 - Fix partial injection of LDFLAGS (the original relro flags are also set by redhat-rpm-config) - Enable FIPS startup test * Tue Jun 5 2018 Daiki Ueno dueno@redhat.com - 3.37.3-1.0 - Update to NSS 3.37.3 * Mon May 28 2018 Daiki Ueno dueno@redhat.com - 3.37.1-1.0 - Update to NSS 3.37.1 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1553680 - Enable NSS FIPS startup tests in Fedora https://bugzilla.redhat.com/show_bug.cgi?id=1553680 [ 2 ] Bug #1575791 - nss-3.37.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1575791 [ 3 ] Bug #1505493 - Backport fixes related to NSS sql from NSS 3.34 to rawhide (nss-softokn parts) https://bugzilla.redhat.com/show_bug.cgi?id=1505493 [ 4 ] Bug #1543847 - nss-softokn: Build flags injection only partially successful https://bugzilla.redhat.com/show_bug.cgi?id=1543847 --------------------------------------------------------------------------------
================================================================================ nss-util-3.37.3-1.0.fc28 (FEDORA-2018-38d2c74097) Network Security Services Utilities Library -------------------------------------------------------------------------------- Update Information:
Updates the nss family of packages to upstream NSS 3.37.3. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes https://developer.mozilla.org/en- US/docs/Mozilla/Projects/NSS/NSS_3.37.3_release_notes -------------------------------------------------------------------------------- ChangeLog:
* Tue Jun 5 2018 Daiki Ueno dueno@redhat.com - 3.37.3-1.0 - Update to NSS 3.37.3 * Mon May 28 2018 Daiki Ueno dueno@redhat.com - 3.37.1-1.0 - Update to NSS 3.37.1 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1553680 - Enable NSS FIPS startup tests in Fedora https://bugzilla.redhat.com/show_bug.cgi?id=1553680 [ 2 ] Bug #1575791 - nss-3.37.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1575791 [ 3 ] Bug #1505493 - Backport fixes related to NSS sql from NSS 3.34 to rawhide (nss-softokn parts) https://bugzilla.redhat.com/show_bug.cgi?id=1505493 [ 4 ] Bug #1543847 - nss-softokn: Build flags injection only partially successful https://bugzilla.redhat.com/show_bug.cgi?id=1543847 --------------------------------------------------------------------------------
================================================================================ odcs-0.2.4-2.fc28 (FEDORA-2018-b6b901ca1c) The On Demand Compose Service -------------------------------------------------------------------------------- Update Information:
Require python-requests-kerberos https://pagure.io/odcs/issue/203 -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 6 2018 Ralph Bean rbean@redhat.com - 0.2.4-2 - Add dep on python-requests-kerberos https://pagure.io/odcs/issue/203 * Mon Jun 4 2018 Jan Kaluza jkaluza@redhat.com - 0.2.4-1 - updated to new version 0.2.4 --------------------------------------------------------------------------------
================================================================================ openssl-pkcs11-0.4.7-7.fc28 (FEDORA-2018-1e5d7b77cf) A PKCS#11 engine for use with OpenSSL -------------------------------------------------------------------------------- Update Information:
Reintroduce libp11-devel subpackage to Fedora (#1583719) -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 6 2018 Anderson Sasaki ansasaki@redhat.com - 0.4.7-7 - Reintroduce libp11-devel subpackage to Fedora (#1583719) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1583719 - pkgconfig(libp11) missing https://bugzilla.redhat.com/show_bug.cgi?id=1583719 --------------------------------------------------------------------------------
================================================================================ openttd-1.8.0-3.fc28 (FEDORA-2018-4d44caf7f7) Transport system simulation game -------------------------------------------------------------------------------- Update Information:
Now includes timidity++ as weak dependency for playing music in-game. -------------------------------------------------------------------------------- ChangeLog:
* Thu Jun 7 2018 Felix Kaechele heffer@fedoraproject.org - 1.8.0-3 - re-sort BuildRequires - use autosetup macro - Switch openttd-opengfx from Requires to Recommends (game works without it as free/libre content can be downloaded from within the game) - add Recommends timidity++ (BZ#1588367) - add patch to fix compilation with ICU 61 * Mon Apr 30 2018 Pete Walter pwalter@fedoraproject.org - 1.8.0-2 - Rebuild for ICU 61.1 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1588367 - no music in openttd due to missing dependency on timidity++ https://bugzilla.redhat.com/show_bug.cgi?id=1588367 --------------------------------------------------------------------------------
================================================================================ perl-BSSolv-0.14-1.fc28 (FEDORA-2018-3479a83201) OBS solver and repository management using libsolv -------------------------------------------------------------------------------- Update Information:
Rebase to 0.14 to fix various issues and expose modern libsolv features -------------------------------------------------------------------------------- ChangeLog:
* Sun May 27 2018 Neal Gompa ngompa13@gmail.com - 0.14-1 - Rebase to 0.14 - Backport genmetaalgo support - Refresh patch for building against EL libsolv - Enable running unit tests - Modernize spec --------------------------------------------------------------------------------
================================================================================ perl-CPAN-Perl-Releases-3.60-1.fc28 (FEDORA-2018-5097a314fc) Mapping Perl releases on CPAN to the location of the tarballs -------------------------------------------------------------------------------- Update Information:
Updated to the latest version -------------------------------------------------------------------------------- ChangeLog:
* Thu Jun 7 2018 Jitka Plesnikova jplesnik@redhat.com - 3.60-1 - 3.60 bump -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1588216 - perl-CPAN-Perl-Releases-3.60 is available https://bugzilla.redhat.com/show_bug.cgi?id=1588216 --------------------------------------------------------------------------------
================================================================================ perl-CPANPLUS-0.917.600-1.fc28 (FEDORA-2018-fbc1841618) Ameliorated interface to the Comprehensive Perl Archive Network -------------------------------------------------------------------------------- Update Information:
We deliver this release only to provide an up-to-date version string. -------------------------------------------------------------------------------- ChangeLog:
* Thu Jun 7 2018 Petr Pisar ppisar@redhat.com - 0.917.600-1 - 0.9176 bump -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1588217 - perl-CPANPLUS-0.9176 is available https://bugzilla.redhat.com/show_bug.cgi?id=1588217 --------------------------------------------------------------------------------
================================================================================ perl-CPANPLUS-Dist-Build-0.90-1.fc28 (FEDORA-2018-dbcbe02783) Module::Build extension for CPANPLUS -------------------------------------------------------------------------------- Update Information:
This release improves a test. We deliver it only to provide an up-to-date version string. -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 6 2018 Petr Pisar ppisar@redhat.com - 0.90-1 - 0.90 bump * Mon Mar 5 2018 Petr Pisar ppisar@redhat.com - 0.88-5 - Adapt to removing GCC from a build root (bug #1547165) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1587982 - perl-CPANPLUS-Dist-Build-0.90 is available https://bugzilla.redhat.com/show_bug.cgi?id=1587982 --------------------------------------------------------------------------------
================================================================================ perl-Date-Manip-6.72-1.fc28 (FEDORA-2018-31163f509e) Date manipulation routines -------------------------------------------------------------------------------- Update Information:
Rebase to upstream version 6.72. -------------------------------------------------------------------------------- ChangeLog:
* Thu Jun 7 2018 Jan Pazdziora jpazdziora@redhat.com - 6.72-1 - 1585345 - Rebase to upstream version 6.72. * Fri Mar 2 2018 Jan Pazdziora jpazdziora@redhat.com - 6.70-1 - 1550748 - Rebase to upstream version 6.70. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1585345 - perl-Date-Manip-6.72 is available https://bugzilla.redhat.com/show_bug.cgi?id=1585345 --------------------------------------------------------------------------------
================================================================================ perl-Diff-LibXDiff-0.05-1.fc28 (FEDORA-2018-fb5a3157f7) Calculate a diff with LibXDiff (via XS) -------------------------------------------------------------------------------- Update Information:
Initial import into Fedora -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1582876 - Review Request: perl-Diff-LibXDiff - Calculate a diff with LibXDiff (via XS) https://bugzilla.redhat.com/show_bug.cgi?id=1582876 --------------------------------------------------------------------------------
================================================================================ php-pecl-mongodb-1.4.4-1.fc28 (FEDORA-2018-9a0f87389c) MongoDB driver for PHP -------------------------------------------------------------------------------- Update Information:
**Version 1.4.4** Release notes * ** Bug** * [PHPC-1163] - Do not allow a session to be used with an unacknowledged write concern * ** Task** * [PHPC-1168] - Advise macOS users to install using PECL * [PHPC-1197] - Check for unistd.h when compiling bundled zLib -------------------------------------------------------------------------------- ChangeLog:
* Thu Jun 7 2018 Remi Collet remi@remirepo.net - 1.4.4-1 - update to 1.4.4 --------------------------------------------------------------------------------
================================================================================ python-geoip2-2.9.0-1.fc28 (FEDORA-2018-75dc83b707) MaxMind GeoIP2 API -------------------------------------------------------------------------------- Update Information:
Update to 2.9.0 -------------------------------------------------------------------------------- ChangeLog:
* Mon May 28 2018 Lumir Balhar lbalhar@redhat.com - 2.9.0-1 - Update to 2.9.0 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1582682 - python-geoip2-v2.9.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1582682 --------------------------------------------------------------------------------
================================================================================ python-regex-2018.06.06-1.fc28 (FEDORA-2018-e271cbbf17) Alternative regular expression module, to replace re -------------------------------------------------------------------------------- Update Information:
Update to the latest released version. -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 6 2018 Thomas Moschny thomas.moschny@gmx.de - 2018.06.06-1 - Update to 2018.06.06. --------------------------------------------------------------------------------
================================================================================ scidavis-1.23-2.fc28 (FEDORA-2018-d5e8a801fc) Application for Scientific Data Analysis and Visualization -------------------------------------------------------------------------------- Update Information:
* New version with some new features and many bugfixes * Fixes a crash when saving after having used the new color picker * Remove ambiguous python version from scripts -------------------------------------------------------------------------------- ChangeLog:
* Thu Jun 7 2018 Alexander Ploumistos alexpl@fedoraproject.org - 1.23-2 - Fix a crash caused by Qt color picker - patch by Miquel Garriga - Explicitly require python2 in script headers * Mon Jun 4 2018 Alexander Ploumistos alexpl@fedoraproject.org - 1.23-1 - Update to 1.23 - Remove unneeded patches -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1585691 - scidavis-1.23 is available https://bugzilla.redhat.com/show_bug.cgi?id=1585691 --------------------------------------------------------------------------------
================================================================================ selinux-policy-3.14.1-32.fc28 (FEDORA-2018-743a9247de) SELinux policy configuration -------------------------------------------------------------------------------- Update Information:
More info: https://koji.fedoraproject.org/koji/taskinfo?taskID=27453962 -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 6 2018 Lukas Vrabec lvrabec@redhat.com - 3.14.1-32 - Add dac_override capability to sendmail_t domain * Wed Jun 6 2018 Lukas Vrabec lvrabec@redhat.com - 3.14.1-31 - Fix typo in authconfig policy - Update ctdb domain to support gNFS setup - Allow authconfig_t dbus chat with policykit - Allow lircd_t domain to read system state - Revert "Allow fsdaemon_t do send emails BZ(1582701)" - Typo in uuidd policy - Allow tangd_t domain read certs - Allow vpnc_t domain to read configfs_t files/dirs BZ(1583107) - Allow vpnc_t domain to read generic certs BZ(1583100) - Label /var/lib/phpMyAdmin directory as httpd_sys_rw_content_t BZ(1584811) - Allow NetworkManager_ssh_t domain to be system dbud client - Allow virt_qemu_ga_t read utmp - Add capability dac_override to system_mail_t domain - Update uuidd policy to reflect last changes from base branch - Add cap dac_override to procmail_t domain - Allow sendmail to mmap etc_aliases_t files BZ(1578569) - Add new interface dbus_read_pid_sock_files() - Allow mpd_t domain read config_home files if mpd_enable_homedirs boolean will be enabled - Allow fsdaemon_t do send emails BZ(1582701) - Allow firewalld_t domain to request kernel module BZ(1573501) - Allow chronyd_t domain to send send msg via dgram socket BZ(1584757) - Add sys_admin capability to fprint_t SELinux domain - Allow cyrus_t domain to create own files under /var/run BZ(1582885) - Allow cachefiles_kernel_t domain to have capability dac_override - Update policy for ypserv_t domain - Allow zebra_t domain to bind on tcp/udp ports labeled as qpasa_agent_port_t - Allow cyrus to have dac_override capability - Dontaudit action when abrt-hook-ccpp is writing to nscd sockets - Fix homedir polyinstantion under mls - Fixed typo in init.if file - Allow systemd to remove generic tmpt files BZ(1583144) - Update init_named_socket_activation() interface to also allow systemd create objects in /var/run with proper label during socket activation - Allow systemd-networkd and systemd-resolved services read system-dbusd socket BZ(1579075) - Fix typo in authlogin SELinux security module - Allod nsswitch_domain attribute to be system dbusd client BZ(1584632) - Allow audisp_t domain to mmap audisp_exec_t binary - Update ssh_domtrans_keygen interface to allow mmap ssh_keygen_exec_t binary file - Label tcp/udp ports 2612 as qpasa_agetn_port_t -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1584478 - cyrus-imapd fails with selinux dac_override denied https://bugzilla.redhat.com/show_bug.cgi?id=1584478 [ 2 ] Bug #1549364 - SELinux is preventing fprintd from using the 'sys_admin' capabilities. https://bugzilla.redhat.com/show_bug.cgi?id=1549364 [ 3 ] Bug #1585470 - SELinux is preventing sendmail(ssmtp) from using the 'dac_override' capabilities. https://bugzilla.redhat.com/show_bug.cgi?id=1585470 [ 4 ] Bug #1583107 - SELinux is preventing openconnect from 'search' accesses on the directory /sys/kernel/config. https://bugzilla.redhat.com/show_bug.cgi?id=1583107 [ 5 ] Bug #1584811 - SELinux is preventing php-fpm from 'map' accesses on the file /var/lib/phpMyAdmin/temp/twig/80/809dbf34efabcf21fa6d57b8d6f95b7ad7ac7d190851f4ef36fa9f94bac71c36.php. https://bugzilla.redhat.com/show_bug.cgi?id=1584811 [ 6 ] Bug #1579075 - AVC: systemd-networkd and resolved unable to communicate over dbus https://bugzilla.redhat.com/show_bug.cgi?id=1579075 [ 7 ] Bug #1574156 - SELinux is preventing sh from 'execute_no_trans' accesses on the file /usr/bin/kmod. https://bugzilla.redhat.com/show_bug.cgi?id=1574156 [ 8 ] Bug #1585359 - SELinux is preventing mpd from 'search' accesses on the directory .config. https://bugzilla.redhat.com/show_bug.cgi?id=1585359 [ 9 ] Bug #1582701 - SELinux is preventing mkdir from 'getattr' accesses on the directory /root/.esmtp_queue. https://bugzilla.redhat.com/show_bug.cgi?id=1582701 [ 10 ] Bug #1584757 - AVC denial appear when joining with freeipa-client https://bugzilla.redhat.com/show_bug.cgi?id=1584757 [ 11 ] Bug #1578569 - SELinux is preventing sendmail from 'map' accesses on the file /etc/mail/userdb.db. https://bugzilla.redhat.com/show_bug.cgi?id=1578569 [ 12 ] Bug #1482353 - SELinux is preventing dhclient from 'map' accesses on the file /var/lib/NetworkManager/dhclient-f7751877-018c-4740-9ab0-7fdd76d9e1f2-wlp1s0.lease. https://bugzilla.redhat.com/show_bug.cgi?id=1482353 [ 13 ] Bug #1582883 - SELinux is preventing master from using the 'dac_override' capabilities. https://bugzilla.redhat.com/show_bug.cgi?id=1582883 [ 14 ] Bug #1483716 - SELinux is preventing systemd from 'create' accesses on the netlink_audit_socket Unknown. https://bugzilla.redhat.com/show_bug.cgi?id=1483716 [ 15 ] Bug #1584632 - Add nss_systemd support to auth_use_nsswitch() https://bugzilla.redhat.com/show_bug.cgi?id=1584632 [ 16 ] Bug #1579626 - SELinux is preventing procmail from using the 'dac_override' capabilities. https://bugzilla.redhat.com/show_bug.cgi?id=1579626 [ 17 ] Bug #1583100 - SELinux is preventing openconnect from 'map' accesses on the file /usr/share/pki/ca-trust-source/ca-bundle.trust.p11-kit. https://bugzilla.redhat.com/show_bug.cgi?id=1583100 [ 18 ] Bug #1575237 - SELinux is preventing gssproxy from 'read' accesses on the lnk_file exe. https://bugzilla.redhat.com/show_bug.cgi?id=1575237 [ 19 ] Bug #1583144 - SELinux is preventing systemd from 'unlink' accesses on the archivo adb.0.log. https://bugzilla.redhat.com/show_bug.cgi?id=1583144 [ 20 ] Bug #1582885 - SELinux is preventing imapd from 'create' accesses on the directory n. https://bugzilla.redhat.com/show_bug.cgi?id=1582885 [ 21 ] Bug #1576998 - SELinux is preventing kworker/u8:4 from using the 'dac_override' capabilities. https://bugzilla.redhat.com/show_bug.cgi?id=1576998 [ 22 ] Bug #1575582 - SELinux is preventing (geoclue) from using the 'nnp_transition' accesses on a process. https://bugzilla.redhat.com/show_bug.cgi?id=1575582 --------------------------------------------------------------------------------
================================================================================ singularity-2.5.1-1.fc28 (FEDORA-2018-da87b1e643) Application and environment virtualization -------------------------------------------------------------------------------- Update Information:
This rebases singularity from 2.2.1 to 2.5.1, which should include all corresponding updates (n.b. a request for rebase permission has been put into FESCo; hence auto-push has been disabled until they approve). Please test for functionality and backward compatibility issues, particularly around the runtime components. -------------------------------------------------------------------------------- ChangeLog:
* Fri May 4 2018 Dave Dykstra dwd@fnal.gov - 2.5.1-1 - Update to upstream version 2.5.1 * Fri Apr 27 2018 Dave Dykstra dwd@fnal.gov - 2.5.0-1 - Update to upstream version 2.5.0 * Mon Apr 16 2018 Dave Dykstra dwd@fnal.gov - 2.4.6-1 - Update to upstream version 2.4.6 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1585620 - singularity: Multiple security vulnerabilities fixed in 2.5.0 [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1585620 [ 2 ] Bug #1585619 - singularity: Multiple security vulnerabilities fixed in 2.5.0 [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1585619 [ 3 ] Bug #1452572 - singularity: Switch to Python 3 https://bugzilla.redhat.com/show_bug.cgi?id=1452572 [ 4 ] Bug #1457856 - singularity-2.5.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1457856 --------------------------------------------------------------------------------
================================================================================ strongswan-5.6.3-1.fc28 (FEDORA-2018-0de3edbdea) An OpenSource IPsec-based VPN and TNC solution -------------------------------------------------------------------------------- Update Information:
New version 5.6.3 Security fix for CVE-2018-10811 -------------------------------------------------------------------------------- ChangeLog:
* Tue May 29 2018 Mikhail Zabaluev mikhail.zabaluev@gmail.com - 5.6.3-1 - New version 5.6.3 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1585968 - CVE-2018-10811 strongswan: Missing initialization of a variable in IKEv2 key derivation allows denial of service [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1585968 --------------------------------------------------------------------------------
================================================================================ switchboard-2.3.1-1.fc28 (FEDORA-2018-dbd16983b0) Modular Desktop Settings Hub -------------------------------------------------------------------------------- Update Information:
Update to version 2.3.1. -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 6 2018 Fabio Valentini decathorpe@gmail.com - 2.3.1-1 - Update to version 2.3.1. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1587989 - switchboard-2.3.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1587989 --------------------------------------------------------------------------------
================================================================================ unicode-emoji-11.0-1.fc28 (FEDORA-2018-1453abb999) Unicode Emoji Data Files -------------------------------------------------------------------------------- Update Information:
Bump Version number to 11.0 because Unicode 11.0.0 is officially released now. The emoji data did not change. -------------------------------------------------------------------------------- ChangeLog:
* Thu Jun 7 2018 Mike FABIAN mfabian@redhat.com - 11.0-1 - Bump Version number to 11.0 because Unicode 11.0.0 is officially released now. The emoji data did not change. --------------------------------------------------------------------------------
================================================================================ xkeyboard-config-2.24-2.fc28 (FEDORA-2018-ab743936f1) X Keyboard Extension configuration data -------------------------------------------------------------------------------- Update Information:
Revert two high keycode mappings, xkbcomp fails to parse those. -------------------------------------------------------------------------------- ChangeLog:
* Thu Jun 7 2018 Peter Hutterer peter.hutterer@redhat.com 2.24-2 - Revert two high keycode mappings, xkbcomp fails to parse those. (#1587998) * Tue Jun 5 2018 Peter Hutterer peter.hutterer@redhat.com 2.24-1 - xkeyboard-config 2.24 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1587998 - Update to 2.24 breaks keyboard layouts in XWayland applications when having several keyboard layouts enabled https://bugzilla.redhat.com/show_bug.cgi?id=1587998 --------------------------------------------------------------------------------
================================================================================ xorg-x11-xkb-utils-7.7-25.fc28 (FEDORA-2018-2d182a2b08) X.Org X11 xkb utilities -------------------------------------------------------------------------------- Update Information:
Ignore maximum keycode range greater than 255 (#1587998) -------------------------------------------------------------------------------- ChangeLog:
* Thu Jun 7 2018 Peter Hutterer peter.hutterer@redhat.com 7.7-25 - Ignore maximum keycode range greater than 255 (#1587998) * Tue Mar 13 2018 Adam Jackson ajax@redhat.com - 7.7-24 - Make -devel Require the base package, so the pc file will point to an xkbcomp that actually exists. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1587998 - Update to 2.24 breaks keyboard layouts in XWayland applications when having several keyboard layouts enabled https://bugzilla.redhat.com/show_bug.cgi?id=1587998 --------------------------------------------------------------------------------
================================================================================ xscreensaver-5.39-5.fc28 (FEDORA-2018-9a7432f63c) X screen saver and locker -------------------------------------------------------------------------------- Update Information:
xscreensaver rpm currently shipped on Fedora cannot generate backtrace properly. With this new rpm, when one of xscreensaver components crashes with some reason, abrt should be able to generate backtrace properly. -------------------------------------------------------------------------------- ChangeLog:
* Mon May 28 2018 Mamoru TASAKA mtasaka@fedoraproject.org - 1:5.39-5 - Reback to -g from -g3 to fix debuginfo generation (c.f. bug 1582631) --------------------------------------------------------------------------------