The following Fedora 28 Security updates need testing: Age URL 234 https://bodhi.fedoraproject.org/updates/FEDORA-2018-d510cfd7eb jgraphx-3.6.0.0-6.fc28 183 https://bodhi.fedoraproject.org/updates/FEDORA-2018-d7aeaa74da nodejs-brace-expansion-1.1.11-1.fc28 182 https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc073fdc1a nodejs-atob-2.1.1-1.fc28 175 https://bodhi.fedoraproject.org/updates/FEDORA-2018-9dd3f7c013 unrtf-0.21.9-8.fc28 143 https://bodhi.fedoraproject.org/updates/FEDORA-2018-28e9841baf docker-latest-1.13.1-37.git9cb56fd.fc28 58 https://bodhi.fedoraproject.org/updates/FEDORA-2018-cc4b7af297 xerces-c27-2.7.0-28.fc28 19 https://bodhi.fedoraproject.org/updates/FEDORA-2018-8f0d2429d3 bird-1.6.4-2.fc28 16 https://bodhi.fedoraproject.org/updates/FEDORA-2018-aadd3c2790 mupdf-1.14.0-6.fc28 11 https://bodhi.fedoraproject.org/updates/FEDORA-2018-997a9e3e1f xen-4.10.2-4.fc28 11 https://bodhi.fedoraproject.org/updates/FEDORA-2018-aa3752ac3c nginx-1.14.1-1.fc28 10 https://bodhi.fedoraproject.org/updates/FEDORA-2018-96b48b34ae mingw-uriparser-0.9.0-1.fc28 10 https://bodhi.fedoraproject.org/updates/FEDORA-2018-a3ef0a026f uriparser-0.9.0-1.fc28 10 https://bodhi.fedoraproject.org/updates/FEDORA-2018-b9581d9624 python-notebook-5.5.0-6.fc28 9 https://bodhi.fedoraproject.org/updates/FEDORA-2018-b74b9ac8d1 tmux-2.8-2.fc28 5 https://bodhi.fedoraproject.org/updates/FEDORA-2018-1d2a79fe1c cobbler-2.8.4-5.fc28 3 https://bodhi.fedoraproject.org/updates/FEDORA-2018-060302dc83 glibc-2.27-35.fc28 2 https://bodhi.fedoraproject.org/updates/FEDORA-2018-c341b70641 pdns-recursor-4.1.8-1.fc28 1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-b60fdc1998 net-snmp-5.8-3.fc28 1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-ca03363d57 perl-5.26.3-415.fc28 1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-70fe6a4d75 nagios-4.4.2-3.fc28 1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-f1f44e4c6d hadoop-2.7.7-1.fc28
The following Fedora 28 Critical Path updates have yet to be approved: Age URL 11 https://bodhi.fedoraproject.org/updates/FEDORA-2018-997a9e3e1f xen-4.10.2-4.fc28 11 https://bodhi.fedoraproject.org/updates/FEDORA-2018-2f5e72a448 grilo-0.3.7-1.fc28 11 https://bodhi.fedoraproject.org/updates/FEDORA-2018-d169dbb09d osinfo-db-20181116-1.fc28 5 https://bodhi.fedoraproject.org/updates/FEDORA-2018-fdc6d449e5 pungi-4.1.31-1.fc28 5 https://bodhi.fedoraproject.org/updates/FEDORA-2018-63e2c74a11 python-productmd-1.18-1.fc28 5 https://bodhi.fedoraproject.org/updates/FEDORA-2018-a171287251 libarchive-3.3.3-2.fc28 4 https://bodhi.fedoraproject.org/updates/FEDORA-2018-3222e7c914 radvd-2.17-11.fc28 4 https://bodhi.fedoraproject.org/updates/FEDORA-2018-17f2d1f30c patch-2.7.6-8.fc28 3 https://bodhi.fedoraproject.org/updates/FEDORA-2018-060302dc83 glibc-2.27-35.fc28 2 https://bodhi.fedoraproject.org/updates/FEDORA-2018-1fc1f4dbad lorax-28.21-1.fc28 1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-c86898e4a7 gdb-8.1.1-4.fc28 1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-13fa00525c libsolv-0.7.1-2.fc28 1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-d6a3723ac6 perl-threads-shared-1.59-1.fc28 1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-ca03363d57 perl-5.26.3-415.fc28 1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-b60fdc1998 net-snmp-5.8-3.fc28 1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-b7705eb407 kobo-0.8.0-1.fc28
The following builds have been pushed to Fedora 28 updates-testing
calibre-3.34.0-1.fc28 debootstrap-1.0.109-3.fc28 dogtag-pki-10.6.8-1.fc28 flatpak-1.0.6-3.fc28 gsequencer-2.1.3-0.fc28 jss-4.5.1-1.fc28 mmapper-2.7.1-1.fc28 nuxwdog-1.0.5-3.fc28 pam_mysql-0.8.1-0.2.fc28 pki-core-10.6.8-1.fc28 python-wikitcms-2.4.2-1.fc28 radeontop-1.2-0.1.20181031git7474f50.fc28 switchboard-plug-sharing-2.1.3-1.fc28
Details about builds:
================================================================================ calibre-3.34.0-1.fc28 (FEDORA-2018-23d16aca68) E-book converter and library manager -------------------------------------------------------------------------------- Update Information:
Update to 3.34.0 with bugfixes and new hardware enablement. -------------------------------------------------------------------------------- ChangeLog:
* Sat Dec 1 2018 Kevin Fenzi kevin@scrye.com - 3.34.0-1 - Update to 3.34. * Fri Sep 21 2018 Jan Grulich jgrulich@redhat.com - 3.29.0-2 - rebuild (qt5) --------------------------------------------------------------------------------
================================================================================ debootstrap-1.0.109-3.fc28 (FEDORA-2018-6906464d45) Debian GNU/Linux bootstrapper -------------------------------------------------------------------------------- Update Information:
- Don't mangling shebang in /usr/sbin/debootstrap from /bin/sh to /usr/bin/sh (#1654765), thanks to Laurent Vivier -------------------------------------------------------------------------------- ChangeLog:
* Sat Dec 1 2018 S��rgio Basto sergio@serjux.com - 1.0.109-3 - Don't mangling shebang in /usr/sbin/debootstrap from /bin/sh to /usr/bin/sh (#1654765), thanks to Laurent Vivier -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1654765 - chroot: failed to run command './debootstrap/debootstrap': No such file or directory https://bugzilla.redhat.com/show_bug.cgi?id=1654765 --------------------------------------------------------------------------------
================================================================================ dogtag-pki-10.6.8-1.fc28 (FEDORA-2018-115068f60e) Dogtag PKI Package -------------------------------------------------------------------------------- Update Information:
Rebased: * pki-core to 10.6.8 * dogtag-pki to 10.6.8 * jss to 4.5.1 Resubmitting the following since it didn't make it to the stable: * nuxwdog 1.0.5-3 -------------------------------------------------------------------------------- ChangeLog:
* Fri Nov 30 2018 Dogtag PKI Team pki-team@redhat.com - 10.6.8-1 - Rebased to PKI 10.6.8 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1582323 - DER encoding error for enumerated types with a value of zero https://bugzilla.redhat.com/show_bug.cgi?id=1582323 [ 2 ] Bug #1534765 - javadoc for org.mozilla.jss.pkix.cms.SignedData.getSignerInfos() is incorrect https://bugzilla.redhat.com/show_bug.cgi?id=1534765 --------------------------------------------------------------------------------
================================================================================ flatpak-1.0.6-3.fc28 (FEDORA-2018-ffe5c00ef9) Application deployment framework for desktop apps -------------------------------------------------------------------------------- Update Information:
This update fixes problems with OCI remotes installed system wide. It is needed to access Flatpaks on registry.fedoraproject.org. -------------------------------------------------------------------------------- ChangeLog:
* Fri Nov 30 2018 fedora-toolbox otaylor@redhat.com - 1.0.6-3 - Add a patch to fix OCI system remotes - Add patch fixing permissions on icons downloaded from an OCI registry --------------------------------------------------------------------------------
================================================================================ gsequencer-2.1.3-0.fc28 (FEDORA-2018-b3ad624dda) Audio processing engine -------------------------------------------------------------------------------- Update Information:
updated Source to point to new minor version directory -------------------------------------------------------------------------------- ChangeLog:
* Sat Dec 1 2018 Jo��l Kr��hemann jkraehemann@gmail.com 2.1.3-0 - updated Source to point to new minor version directory - removed build dependency ladspa-cmt-plugins and lv2-swh-plugins --------------------------------------------------------------------------------
================================================================================ jss-4.5.1-1.fc28 (FEDORA-2018-115068f60e) Java Security Services (JSS) -------------------------------------------------------------------------------- Update Information:
Rebased: * pki-core to 10.6.8 * dogtag-pki to 10.6.8 * jss to 4.5.1 Resubmitting the following since it didn't make it to the stable: * nuxwdog 1.0.5-3 -------------------------------------------------------------------------------- ChangeLog:
* Thu Nov 29 2018 Dogtag PKI Team pki-devel@redhat.com 4.5.1-1 - Rebased to JSS 4.5.1 - Red Hat Bugzilla #1582323 - DER encoding error for enumerated types with a value of zero - Red Hat Bugzilla #1534765 - javadoc for org.mozilla.jss.pkix.cms.SignedData.getSignerInfos() is incorrect -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1582323 - DER encoding error for enumerated types with a value of zero https://bugzilla.redhat.com/show_bug.cgi?id=1582323 [ 2 ] Bug #1534765 - javadoc for org.mozilla.jss.pkix.cms.SignedData.getSignerInfos() is incorrect https://bugzilla.redhat.com/show_bug.cgi?id=1534765 --------------------------------------------------------------------------------
================================================================================ mmapper-2.7.1-1.fc28 (FEDORA-2018-0a02be5655) Graphical MUME mapper -------------------------------------------------------------------------------- Update Information:
mmapper 2.7.1 release. For details, see https://github.com/MUME/MMapper/releases/tag/v2.7.1 ---- mmapper 2.7.0 release. For details, see https://github.com/MUME/MMapper/releases/tag/v2.7.0 -------------------------------------------------------------------------------- ChangeLog:
* Sat Dec 1 2018 Kalev Lember klember@redhat.com - 2.7.1-1 - Update to 2.7.1 * Tue Nov 27 2018 Kalev Lember klember@redhat.com - 2.7.0-1 - Update to 2.7.0 --------------------------------------------------------------------------------
================================================================================ nuxwdog-1.0.5-3.fc28 (FEDORA-2018-115068f60e) Watchdog server to start and stop processes, and prompt for passwords -------------------------------------------------------------------------------- Update Information:
Rebased: * pki-core to 10.6.8 * dogtag-pki to 10.6.8 * jss to 4.5.1 Resubmitting the following since it didn't make it to the stable: * nuxwdog 1.0.5-3 -------------------------------------------------------------------------------- ChangeLog:
* Fri Nov 30 2018 Dogtag PKI Team (pki-devel@redhat.com) 1.0.5-3 - Rebuild since 1.0.5-2 was deleted in Koji * Wed Aug 22 2018 Alexander Bokovoy abokovoy@redhat.com - 1.0.5-2 - Remove obsolete ExcludeArch statement for RHEL builds - Syncing with upstream changes -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1582323 - DER encoding error for enumerated types with a value of zero https://bugzilla.redhat.com/show_bug.cgi?id=1582323 [ 2 ] Bug #1534765 - javadoc for org.mozilla.jss.pkix.cms.SignedData.getSignerInfos() is incorrect https://bugzilla.redhat.com/show_bug.cgi?id=1534765 --------------------------------------------------------------------------------
================================================================================ pam_mysql-0.8.1-0.2.fc28 (FEDORA-2018-bb07632c10) PAM module for auth UNIX users using MySQL data base -------------------------------------------------------------------------------- Update Information:
Rebase pam_mysql to Nigel Cunningham's fork. -------------------------------------------------------------------------------- ChangeLog:
* Sat Dec 1 2018 Paul Komkoff i@stingr.net - 1:0.8.1-0.2 - fix fat-fingered spec. * Sat Dec 1 2018 Paul Komkoff i@stingr.net - 1:0.8.1-0.1 - move from unmaintained 0.7RC1 upstream to newer repo by Nigel Cunningham. this should fix a lot of issues. * Fri Jul 13 2018 Fedora Release Engineering releng@fedoraproject.org - 1:0.7-0.28.rc1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1588004 - pam_mysql segfaults if the passwords starts with not-letter character https://bugzilla.redhat.com/show_bug.cgi?id=1588004 [ 2 ] Bug #1506858 - /usr/lib64/security/pam_mysql.so: undefined symbol: my_make_scrambled_password https://bugzilla.redhat.com/show_bug.cgi?id=1506858 [ 3 ] Bug #1587980 - pam_mysql memory leak https://bugzilla.redhat.com/show_bug.cgi?id=1587980 [ 4 ] Bug #1615900 - PAM unable to dlopen(/usr/lib64/security/pam_mysql.so): /usr/lib64/security/pam_mysql.so: undefined symbol: my_make_scrambled_password https://bugzilla.redhat.com/show_bug.cgi?id=1615900 --------------------------------------------------------------------------------
================================================================================ pki-core-10.6.8-1.fc28 (FEDORA-2018-115068f60e) PKI Core Package -------------------------------------------------------------------------------- Update Information:
Rebased: * pki-core to 10.6.8 * dogtag-pki to 10.6.8 * jss to 4.5.1 Resubmitting the following since it didn't make it to the stable: * nuxwdog 1.0.5-3 -------------------------------------------------------------------------------- ChangeLog:
* Fri Nov 30 2018 Dogtag PKI Team pki-devel@redhat.com - 10.6.8-1 - Rebased to PKI 10.6.8 * Fri Oct 26 2018 Dogtag PKI Team pki-devel@redhat.com - 10.6.7-3 - Fixed default token normalization in initialization.py * Thu Oct 25 2018 Dogtag PKI Team pki-devel@redhat.com - 10.6.7-2 - Fixed missing token in verify_certificate_exists * Thu Oct 4 2018 Dogtag PKI Team pki-devel@redhat.com - 10.6.7-1 - Rebased to PKI 10.6.7 * Mon Sep 10 2018 Dennis Gilmore dennis@ausil.us - 10.6.6-2 - add back aarch64 support as esc is now built for aarch64 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1582323 - DER encoding error for enumerated types with a value of zero https://bugzilla.redhat.com/show_bug.cgi?id=1582323 [ 2 ] Bug #1534765 - javadoc for org.mozilla.jss.pkix.cms.SignedData.getSignerInfos() is incorrect https://bugzilla.redhat.com/show_bug.cgi?id=1534765 --------------------------------------------------------------------------------
================================================================================ python-wikitcms-2.4.2-1.fc28 (FEDORA-2018-1617b9f3ce) Fedora QA wiki test management Python library -------------------------------------------------------------------------------- Update Information:
This update provides a new release of python-wikitcms, which fixes a flow issue that - combined with [a bug](https://pagure.io/fedora-infrastructure/issue/7415) in the Fedora wiki itself - was preventing the Current redirect pages (e.g. [Current Installation Test](https://fedoraproject.org/wiki/Test_Results:Current_Installation_Test)) from being updated when new validation events were created. -------------------------------------------------------------------------------- ChangeLog:
* Fri Nov 30 2018 Adam Williamson awilliam@redhat.com - 2.4.2-1 - New release 2.4.2: fix a test bug exposed by the 2.4.1 bug fix * Fri Nov 30 2018 Adam Williamson awilliam@redhat.com - 2.4.1-1 - New release 2.4.1: fix Current redirect page updates * Thu Nov 22 2018 Adam Williamson awilliam@redhat.com - 2.4.0-2 - Disable Python 2 build on F30+, EL8+ --------------------------------------------------------------------------------
================================================================================ radeontop-1.2-0.1.20181031git7474f50.fc28 (FEDORA-2018-f2e1cbe9e9) View GPU utilization of AMD/ATI Radeon devices -------------------------------------------------------------------------------- Update Information:
This update add support of newer AMD APU and Radeon GPU -------------------------------------------------------------------------------- ChangeLog:
* Fri Nov 30 2018 Luya Tshimbalanga luya@fedoraproject.org 1.2-0.1.20181031git7474f50 - Update to 20181031 which support newer AMD APU and GPU * Sat Jul 14 2018 Fedora Release Engineering releng@fedoraproject.org - 1.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ switchboard-plug-sharing-2.1.3-1.fc28 (FEDORA-2018-1cef01bbb7) Switchboard Sharing Plug -------------------------------------------------------------------------------- Update Information:
Initial official packaging for fedora. This package was previously available from the elementary-staging and elementary-nightly COPR repositories. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1654869 - Review Request: switchboard-plug-sharing - Switchboard Sharing Plug https://bugzilla.redhat.com/show_bug.cgi?id=1654869 --------------------------------------------------------------------------------