test November 2019

test@lists.fedoraproject.org

26 participants
144 discussions

Fedora 29 updates-testing report
by updates＠fedoraproject.org 02 Nov '19

02 Nov '19

The following Fedora 29 Security updates need testing: Age URL 245 https://bodhi.fedoraproject.org/updates/FEDORA-2019-fa5843e0e1 asterisk-16.2.1-1.fc29 231 https://bodhi.fedoraproject.org/updates/FEDORA-2019-c84f291592 WALinuxAgent-2.2.38-1.fc29 226 https://bodhi.fedoraproject.org/updates/FEDORA-2019-7528388823 chicken-5.0.0-2.fc29 186 https://bodhi.fedoraproject.org/updates/FEDORA-2019-9839aded3f python-gnupg-0.4.4-1.fc29 182 https://bodhi.fedoraproject.org/updates/FEDORA-2019-35cb5a4785 kubernetes-1.13.5-1.fc29 120 https://bodhi.fedoraproject.org/updates/FEDORA-2019-32f7cd9b66 dosbox-0.74.3-2.fc29 7 https://bodhi.fedoraproject.org/updates/FEDORA-2019-758824a3ff python2-2.7.17-1.fc29 python2-docs-2.7.17-1.fc29 7 https://bodhi.fedoraproject.org/updates/FEDORA-2019-d2856deb1f firefox-70.0-1.fc29 7 https://bodhi.fedoraproject.org/updates/FEDORA-2019-e4c45e113c nspr-4.23.0-1.fc29 nss-3.47.0-2.fc29 7 https://bodhi.fedoraproject.org/updates/FEDORA-2019-18036b898e file-5.34-15.fc29 6 https://bodhi.fedoraproject.org/updates/FEDORA-2019-9fffac5168 t1utils-1.41-1.fc29 6 https://bodhi.fedoraproject.org/updates/FEDORA-2019-d81be00640 java-latest-openjdk-13.0.1.9-2.rolling.fc29 2 https://bodhi.fedoraproject.org/updates/FEDORA-2019-8952d0f014 thunderbird-68.2.0-1.fc29 2 https://bodhi.fedoraproject.org/updates/FEDORA-2019-bfb407659e rssh-2.3.4-15.fc29 2 https://bodhi.fedoraproject.org/updates/FEDORA-2019-703e299870 samba-4.9.15-0.fc29 2 https://bodhi.fedoraproject.org/updates/FEDORA-2019-65509aac53 wpa_supplicant-2.7-2.fc29 The following Fedora 29 Critical Path updates have yet to be approved: Age URL 158 https://bodhi.fedoraproject.org/updates/FEDORA-2019-06a2d1c7fb anaconda-29.24.7-3.fc29 155 https://bodhi.fedoraproject.org/updates/FEDORA-2019-4cefd3161a nfs-utils-2.3.3-4.rc2.fc29 129 https://bodhi.fedoraproject.org/updates/FEDORA-2019-583d9d5a56 mutter-3.30.2-3.fc29 115 https://bodhi.fedoraproject.org/updates/FEDORA-2019-6f13c38d0d python-urllib3-1.24.3-2.fc29 112 https://bodhi.fedoraproject.org/updates/FEDORA-2019-62e681b68b ipset-7.2-1.fc29 7 https://bodhi.fedoraproject.org/updates/FEDORA-2019-18036b898e file-5.34-15.fc29 7 https://bodhi.fedoraproject.org/updates/FEDORA-2019-5c6a86b128 libldb-1.4.8-1.fc29 samba-4.9.14-0.fc29 7 https://bodhi.fedoraproject.org/updates/FEDORA-2019-e4c45e113c nspr-4.23.0-1.fc29 nss-3.47.0-2.fc29 7 https://bodhi.fedoraproject.org/updates/FEDORA-2019-186f908f45 linux-firmware-20191022-103.fc29 7 https://bodhi.fedoraproject.org/updates/FEDORA-2019-3a920ca5ea pungi-4.1.40-1.fc29 7 https://bodhi.fedoraproject.org/updates/FEDORA-2019-a746c4f59d libreport-2.11.2-1.fc29 7 https://bodhi.fedoraproject.org/updates/FEDORA-2019-d2856deb1f firefox-70.0-1.fc29 7 https://bodhi.fedoraproject.org/updates/FEDORA-2019-70f23a7a7d vim-8.1.2198-1.fc29 7 https://bodhi.fedoraproject.org/updates/FEDORA-2019-758824a3ff python2-2.7.17-1.fc29 python2-docs-2.7.17-1.fc29 7 https://bodhi.fedoraproject.org/updates/FEDORA-2019-3bdedf56fb sssd-2.2.2-3.fc29 3 https://bodhi.fedoraproject.org/updates/FEDORA-2019-3fcb3b1627 zlib-1.2.11-18.fc29 2 https://bodhi.fedoraproject.org/updates/FEDORA-2019-65509aac53 wpa_supplicant-2.7-2.fc29 2 https://bodhi.fedoraproject.org/updates/FEDORA-2019-458490f1d7 kernel-5.3.8-100.fc29 2 https://bodhi.fedoraproject.org/updates/FEDORA-2019-703e299870 samba-4.9.15-0.fc29 2 https://bodhi.fedoraproject.org/updates/FEDORA-2019-885b33bcfd pcre2-10.33-15.fc29 2 https://bodhi.fedoraproject.org/updates/FEDORA-2019-8952d0f014 thunderbird-68.2.0-1.fc29 The following builds have been pushed to Fedora 29 updates-testing Cadence-1.0.0-0.7.20191021git0642494.fc29 R-littler-0.3.9-1.fc29 R-tinytex-0.17-1.fc29 chromium-78.0.3904.70-1.fc29 fntsample-5.3-4.fc29 gd-2.2.5-8.fc29 ibus-typing-booster-2.7.1-1.fc29 koji-1.19.0-1.fc29 mame-0.215-1.fc29 mock-1.4.21-1.fc29 mock-core-configs-31.7-1.fc29 mpc-0.33-1.fc29 openvpn-2.4.8-1.fc29 perl-Getopt-Lucid-1.10-1.fc29 perl-Net-SSLeay-1.85-11.fc29 pipenv-2018.11.26-12.fc29 python-catkin_lint-1.6.2-1.fc29 python-colcon-cd-0.1.1-3.fc29 python-colcon-cmake-0.2.16-1.fc29 python-colcon-common-extensions-0.2.1-1.fc29 python-colcon-core-0.4.3-1.fc29 python-colcon-devtools-0.2.2-1.fc29 python-colcon-package-information-0.3.0-1.fc29 python-colcon-powershell-0.3.6-1.fc29 python35-3.5.8-2.fc29 redhat-rpm-config-121-1.fc29 rpkg-1.59-2.fc29 sane-backends-1.0.28-5.fc29 system-config-printer-1.5.12-3.fc29 vacuum-im-1.3.0-0.16.20191014git9f3952b.fc29 xen-4.11.2-2.fc29 xtl-0.6.8-1.fc29 Details about builds: ================================================================================ Cadence-1.0.0-0.7.20191021git0642494.fc29 (FEDORA-2019-16d587aa04) A set of tools useful for audio production -------------------------------------------------------------------------------- Update Information: - Remove RR ladish due package is dead ---- Update to 1.0.0-0.6.20191021git0642494 -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 31 2019 Martin Gansser <martinkg(a)fedoraproject.org> - 1.0.0-0.7.20191021git0642494 - Remove RR ladish due package is dead * Wed Oct 30 2019 Martin Gansser <martinkg(a)fedoraproject.org> - 1.0.0-0.6.20191021git0642494 - Update to 1.0.0-0.6.20191021git0642494 * Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.0-0.5.20180827git4a5f5b4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.0-0.4.20180827git4a5f5b4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1767725 - Cadence fails to install in Fedora 31 https://bugzilla.redhat.com/show_bug.cgi?id=1767725 -------------------------------------------------------------------------------- ================================================================================ R-littler-0.3.9-1.fc29 (FEDORA-2019-3844a861df) littler: R at the Command-Line via 'r' -------------------------------------------------------------------------------- Update Information: littler 0.3.9. -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 31 2019 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 0.3.9-1 - New upstream release 0.3.9 * Thu Sep 19 2019 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 0.3.8-5 - Unify specfile * Mon Aug 12 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.3.8-4 - Remove explicit dependencies provided by automatic dependency generator * Mon Aug 12 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.3.8-3 - Rebuild with automatic Provides * Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.8-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ R-tinytex-0.17-1.fc29 (FEDORA-2019-1075862272) Helper Functions to Install and Maintain 'TeX Live', and Compile 'LaTeX' Documents -------------------------------------------------------------------------------- Update Information: Update to latest version -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.17-1 - Update to latest version -------------------------------------------------------------------------------- References: [ 1 ] Bug #1767243 - R-tinytex-0.17 is available https://bugzilla.redhat.com/show_bug.cgi?id=1767243 -------------------------------------------------------------------------------- ================================================================================ chromium-78.0.3904.70-1.fc29 (FEDORA-2019-cdc04140c4) A WebKit (Blink) powered web browser -------------------------------------------------------------------------------- Update Information: Chromium 78. Fixes these: CVE-2019-5870 CVE-2019-5871 CVE-2019-5872 CVE-2019-5874 CVE-2019-5875 CVE-2019-13691 CVE-2019-13692 CVE-2019-5876 CVE-2019-5877 CVE-2019-5878 CVE-2019-5879 CVE-2019-5880 CVE-2019-5881 CVE-2019-13659 CVE-2019-13660 CVE-2019-13661 CVE-2019-13662 CVE-2019-13663 CVE-2019-13664 CVE-2019-13665 CVE-2019-13666 CVE-2019-13667 CVE-2019-13668 CVE-2019-13669 CVE-2019-13670 CVE-2019-13671 CVE-2019-13673 CVE-2019-13674 CVE-2019-13675 CVE-2019-13676 CVE-2019-13677 CVE-2019-13678 CVE-2019-13679 CVE-2019-13680 CVE-2019-13681 CVE-2019-13682 CVE-2019-13683 -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 23 2019 Tom Callaway <spot(a)fedoraproject.org> - 78.0.3904.80-1 - update to 78.0.3904.80 * Wed Oct 16 2019 Tom Callaway <spot(a)fedoraproject.org> - 77.0.3865.120-4 - upstream fix for zlib symbol exports with gcc * Wed Oct 16 2019 Tom Callaway <spot(a)fedoraproject.org> - 77.0.3865.120-3 - silence outdated build noise (bz1745745) * Tue Oct 15 2019 Tom Callaway <spot(a)fedoraproject.org> - 77.0.3865.120-2 - fix node handling for EPEL-8 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1762402 - CVE-2019-13682 chromium-browser: Site isolation bypass https://bugzilla.redhat.com/show_bug.cgi?id=1762402 [ 2 ] Bug #1762401 - CVE-2019-13681 chromium-browser: Bypass on download restrictions https://bugzilla.redhat.com/show_bug.cgi?id=1762401 [ 3 ] Bug #1762400 - CVE-2019-13680 chromium-browser: IP address spoofing to servers https://bugzilla.redhat.com/show_bug.cgi?id=1762400 [ 4 ] Bug #1762399 - CVE-2019-13679 chromium-browser: User gesture needed for printing https://bugzilla.redhat.com/show_bug.cgi?id=1762399 [ 5 ] Bug #1762398 - CVE-2019-13678 chromium-browser: Download dialog spoofing https://bugzilla.redhat.com/show_bug.cgi?id=1762398 [ 6 ] Bug #1762397 - CVE-2019-13677 chromium-browser: Chrome web store origin needs to be isolated https://bugzilla.redhat.com/show_bug.cgi?id=1762397 [ 7 ] Bug #1762396 - CVE-2019-13676 chromium-browser: Google URI shown for certificate warning https://bugzilla.redhat.com/show_bug.cgi?id=1762396 [ 8 ] Bug #1762395 - CVE-2019-13675 chromium-browser: Extensions can be disabled by trailing slash https://bugzilla.redhat.com/show_bug.cgi?id=1762395 [ 9 ] Bug #1762394 - CVE-2019-13674 chromium-browser: IDN spoofing https://bugzilla.redhat.com/show_bug.cgi?id=1762394 [ 10 ] Bug #1762393 - CVE-2019-13673 chromium-browser: Cross-origin information leak using devtools https://bugzilla.redhat.com/show_bug.cgi?id=1762393 [ 11 ] Bug #1762392 - CVE-2019-13671 chromium-browser: Dialog box fails to show origin https://bugzilla.redhat.com/show_bug.cgi?id=1762392 [ 12 ] Bug #1762391 - CVE-2019-13670 chromium-browser: V8 memory corruption in regex https://bugzilla.redhat.com/show_bug.cgi?id=1762391 [ 13 ] Bug #1762390 - CVE-2019-13669 chromium-browser: HTTP authentication spoof https://bugzilla.redhat.com/show_bug.cgi?id=1762390 [ 14 ] Bug #1762389 - CVE-2019-13668 chromium-browser: Global window leak via console https://bugzilla.redhat.com/show_bug.cgi?id=1762389 [ 15 ] Bug #1762388 - CVE-2019-13667 chromium-browser: URI bar spoof when using external app URIs https://bugzilla.redhat.com/show_bug.cgi?id=1762388 [ 16 ] Bug #1762387 - CVE-2019-13666 chromium-browser: Side channel using storage size estimate https://bugzilla.redhat.com/show_bug.cgi?id=1762387 [ 17 ] Bug #1762386 - CVE-2019-13665 chromium-browser: Multiple file download protection bypass https://bugzilla.redhat.com/show_bug.cgi?id=1762386 [ 18 ] Bug #1762385 - CVE-2019-13664 chromium-browser: CSRF bypass https://bugzilla.redhat.com/show_bug.cgi?id=1762385 [ 19 ] Bug #1762384 - CVE-2019-13663 chromium-browser: IDN spoof https://bugzilla.redhat.com/show_bug.cgi?id=1762384 [ 20 ] Bug #1762383 - CVE-2019-13662 chromium-browser: CSP bypass https://bugzilla.redhat.com/show_bug.cgi?id=1762383 [ 21 ] Bug #1762382 - CVE-2019-13661 chromium-browser: Full screen notification spoof https://bugzilla.redhat.com/show_bug.cgi?id=1762382 [ 22 ] Bug #1762381 - CVE-2019-13660 chromium-browser: Full screen notification overlap https://bugzilla.redhat.com/show_bug.cgi?id=1762381 [ 23 ] Bug #1762380 - CVE-2019-13659 chromium-browser: URL spoof https://bugzilla.redhat.com/show_bug.cgi?id=1762380 [ 24 ] Bug #1762379 - CVE-2019-5881 chromium-browser: Arbitrary read in SwiftShader https://bugzilla.redhat.com/show_bug.cgi?id=1762379 [ 25 ] Bug #1762378 - CVE-2019-5880 chromium-browser: SameSite cookie bypass https://bugzilla.redhat.com/show_bug.cgi?id=1762378 [ 26 ] Bug #1762377 - CVE-2019-5879 chromium-browser: Extensions can read some local files https://bugzilla.redhat.com/show_bug.cgi?id=1762377 [ 27 ] Bug #1762376 - CVE-2019-5878 chromium-browser: Use-after-free in V8 https://bugzilla.redhat.com/show_bug.cgi?id=1762376 [ 28 ] Bug #1762375 - CVE-2019-5877 chromium-browser: Out-of-bounds access in V8 https://bugzilla.redhat.com/show_bug.cgi?id=1762375 [ 29 ] Bug #1762374 - CVE-2019-5876 chromium-browser: Use-after-free in media https://bugzilla.redhat.com/show_bug.cgi?id=1762374 [ 30 ] Bug #1762373 - CVE-2019-13692 chromium-browser: SOP bypass https://bugzilla.redhat.com/show_bug.cgi?id=1762373 [ 31 ] Bug #1762372 - CVE-2019-13691 chromium-browser: Omnibox spoof https://bugzilla.redhat.com/show_bug.cgi?id=1762372 [ 32 ] Bug #1762371 - CVE-2019-5875 chromium-browser: URL bar spoof via download redirect https://bugzilla.redhat.com/show_bug.cgi?id=1762371 [ 33 ] Bug #1762370 - CVE-2019-5874 chromium-browser: External URIs may trigger other browsers https://bugzilla.redhat.com/show_bug.cgi?id=1762370 [ 34 ] Bug #1762368 - CVE-2019-5872 chromium-browser: Use-after-free in Mojo https://bugzilla.redhat.com/show_bug.cgi?id=1762368 [ 35 ] Bug #1762367 - CVE-2019-5871 chromium-browser: Heap overflow in Skia https://bugzilla.redhat.com/show_bug.cgi?id=1762367 [ 36 ] Bug #1762366 - CVE-2019-5870 chromium-browser: Use-after-free in media https://bugzilla.redhat.com/show_bug.cgi?id=1762366 -------------------------------------------------------------------------------- ================================================================================ fntsample-5.3-4.fc29 (FEDORA-2019-b8b76c0915) A program for making font samples that show Unicode coverage of the font -------------------------------------------------------------------------------- Update Information: Resolves:rh#1761556 - Add missing dependency perl(Locale::TextDomain) -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 1 2019 Parag Nemade <pnemade AT redhat DOT com> - 5.3-4 - Resolves:rh#1761556 - Add missing dependency perl(Locale::TextDomain) * Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Thu Feb 14 2019 Parag Nemade <pnemade AT redhat DOT com> - 5.3-2 - Remove previously added patch as pango is fixed * Sun Feb 3 2019 Parag Nemade <pnemade AT redhat DOT com> - 5.3-1 - Update to 5.3 version - Added missing glib2-devel while linking in CMakeFiles.txt * Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1761556 - fntsample missing dependency on perl-libintl-perl https://bugzilla.redhat.com/show_bug.cgi?id=1761556 -------------------------------------------------------------------------------- ================================================================================ gd-2.2.5-8.fc29 (FEDORA-2019-d7f8995451) A graphics library for quick creation of PNG or JPEG images -------------------------------------------------------------------------------- Update Information: fixed multiple security bugs -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 1 2019 odubaj(a)redhat.com - 2.2.5-8 - Fixed heap based buffer overflow in gd_color_match.c:gdImageColorMatch() in libgd as used in imagecolormatch() - Resolves: RHBZ#1678104 (CVE-2019-6977) - Fixed potential double-free in gdImage*Ptr() - Resolves: RHBZ#1671391 (CVE-2019-6978) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1672210 - CVE-2019-6977 gd: heap based buffer overflow in gd_color_match.c:gdImageColorMatch() in libgd as used in imagecolormatch() [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1672210 [ 2 ] Bug #1671391 - CVE-2019-6978 gd: double free in the gdImage*Ptr in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1671391 -------------------------------------------------------------------------------- ================================================================================ ibus-typing-booster-2.7.1-1.fc29 (FEDORA-2019-7ec2dcb525) A completion input method -------------------------------------------------------------------------------- Update Information: Update to 2.7.1; Many translations updated, some new translations, some bugfixes. -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 31 2019 Mike FABIAN <mfabian(a)redhat.com> - 2.7.1-1 - Update to 2.7.1 - Update Chinese (Simplified) translations from Weblate (13.5% translated) - Update Spanish translations from Weblate (92.2% translated) - Update Catalan translations from Weblate (12.4% translated) - Add Hebrew translation from Weblate (67.4% translated) - Add Arabic translation from Weblate (28.0% translated) - Update Ukrainian translations from Weblate (100.0% translated) - Update German translations from Weblate (100.0% translated) - Update Japanese translations from Weblate (35.2% translated) - Update French translations from Weblate (93.8% translated) - Add Hungarian translation from Weblate (58.0% translated) - Add Odia translations from Weblate (2.6% translated) - Improve compose file parsing to get results containing \" correct - More test cases for compose sequences - Change README.md to refer to Weblate for translations instead of Zanata - Fix display of code points in emoji-picker when running in or_IN.UTF-8 locale -------------------------------------------------------------------------------- ================================================================================ koji-1.19.0-1.fc29 (FEDORA-2019-c77daad60e) Build system tools -------------------------------------------------------------------------------- Update Information: Upstream bugfix release 1.19.0. See https://docs.pagure.org/koji/release_notes_1.19/ for more info -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 1 2019 Mohan Boddu <mboddu(a)bhujji.com> - 1.19.0-1 - Rebase to 1.19.0 - Removing downstream patch 1613 * Wed Oct 9 2019 Patrick Uiterwijk <patrick(a)puiterwijk.org> - 1.18.1-1 - Rebase to 1.18.1 for CVE-2019-17109 * Wed Sep 18 2019 Jiri Popelka <jpopelka(a)redhat.com> - 1.18.0-6 - Fix macro added in previous change. * Tue Sep 17 2019 Kevin Fenzi <kevin(a)scrye.com> - 1.18.0-5 - Add provides for python3 subpackage. Fixes bug #1750391 * Sat Aug 17 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 1.18.0-4 - Rebuilt for Python 3.8 * Fri Aug 16 2019 Kevin Fenzi <kevin(a)scrye.com> - 1.18.0-3 - Fix pkgsurl/topurl default mistake. * Fri Aug 16 2019 Kevin Fenzi <kevin(a)scrye.com> - 1.18.0-2 - Fix mergerepos conditional for f30. * Fri Aug 16 2019 Kevin Fenzi <kevin(a)scrye.com> - 1.18.0-1 - Update to 1.18.0. * Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.17.0-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Thu May 30 2019 Kevin Fenzi <kevin(a)scrye.com> - 1.17.0-7 - Add patch to fix koji kerberos auth with python3. - Drop internal mergerepos so we can go all python3. Fixes bug #1715257 * Wed May 29 2019 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 1.17.0-7 - Expose dynamic_buildrequires mock setting * Tue May 28 2019 Kevin Fenzi <kevin(a)scrye.com> - 1.17.0-6 - Switch kojid back to python3 as imagefactory and oz have moved. - Backport patch to download only repomd.xml instead of all repodata. - Backport patch to allow 'bare' repo merging for modularity. - Backport patch to allow for seperate srpm repos in buildroot repos. -------------------------------------------------------------------------------- ================================================================================ mame-0.215-1.fc29 (FEDORA-2019-45f2dfb7f9) Multiple Arcade Machine Emulator -------------------------------------------------------------------------------- Update Information: An update to the latest upstream release: * https://www.mamedev.org/?p=475 -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Julian Sikorski <belegdol(a)fedoraproject.org> - 0.215-1 - Update to 0.215 - Do not extract 3rdparty code not needed on Linux -------------------------------------------------------------------------------- ================================================================================ mock-1.4.21-1.fc29 (FEDORA-2019-ad7ecf205b) Builds packages inside chroots -------------------------------------------------------------------------------- Update Information: - copy distribution-gpg-keys if this is boostrap and we use container image - move podman initialization to buildroot.py [GH#380] - bootstrap: fix --install and --installdeps [RHBZ#1447627] - selinuxfs, one more fix for nspawn [RHBZ#1756972] - fix broken rpmbuildstate [GH#349] -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 1 2019 Miroslav Such�� <msuchy(a)redhat.com> 1.4.21-1 - copy distribution-gpg-keys if this is boostrap and we use container image - move podman initialization to buildroot.py [GH#380] - bootstrap: fix --install and --installdeps [RHBZ#1447627] - mock: selinuxfs, one more fix for nspawn [RHBZ#1756972] - mock: fix broken rpmbuildstate [GH#349] -------------------------------------------------------------------------------- References: [ 1 ] Bug #1447627 - mock --installdeps or --install can't find rpm to install with --bootstrap-chroot https://bugzilla.redhat.com/show_bug.cgi?id=1447627 [ 2 ] Bug #1756972 - building Fedora 31 packages on Fedora 30 cause SELinux contexts to be unmapped https://bugzilla.redhat.com/show_bug.cgi?id=1756972 -------------------------------------------------------------------------------- ================================================================================ mock-core-configs-31.7-1.fc29 (FEDORA-2019-7f5744fed8) Mock core config files basic chroots -------------------------------------------------------------------------------- Update Information: - Add configs for epel8-playground - add 3 base packages to epel-playground buildroot [RHBZ#1764445] - add 3 base packages to epel buildroot [RHBZ#1764445] -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 1 2019 Miroslav Such�� <msuchy(a)redhat.com> 31.7-1 - Add configs for epel8-playground (mmathesi(a)redhat.com) - add 3 base packages to epel-playground buildroot [RHBZ#1764445] - add 3 base packages to epel buildroot [RHBZ#1764445] -------------------------------------------------------------------------------- References: [ 1 ] Bug #1764445 - Packages missing in EPEL 8 mock buildroot https://bugzilla.redhat.com/show_bug.cgi?id=1764445 -------------------------------------------------------------------------------- ================================================================================ mpc-0.33-1.fc29 (FEDORA-2019-825750ebfa) Command-line client for MPD -------------------------------------------------------------------------------- Update Information: Update to 0.33. -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 1 2019 Vasiliy Glazov <vascom2(a)gmail.com> - 0.33-1 - Update to 0.33 -------------------------------------------------------------------------------- ================================================================================ openvpn-2.4.8-1.fc29 (FEDORA-2019-a7d5349837) A full-featured SSL VPN solution -------------------------------------------------------------------------------- Update Information: Update to latest OpenVPN 2.4.8 release. See [Release notes](https://community.op envpn.net/openvpn/wiki/ChangesInOpenvpn24#OpenVPN2.4.8) for more details. -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 1 2019 David Sommerseth <dazo(a)eurephia.org> - 2.4.8-1 - Updating to upstream OpenVPN 2.4.8 -------------------------------------------------------------------------------- ================================================================================ perl-Getopt-Lucid-1.10-1.fc29 (FEDORA-2019-852e533d7b) Clear, readable syntax for command line processing -------------------------------------------------------------------------------- Update Information: This release corrects misspellings in a documentation. -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 31 2019 Petr Pisar <ppisar(a)redhat.com> - 1.10-1 - 1.10 bump -------------------------------------------------------------------------------- References: [ 1 ] Bug #1765773 - perl-Getopt-Lucid-1.10 is available https://bugzilla.redhat.com/show_bug.cgi?id=1765773 -------------------------------------------------------------------------------- ================================================================================ perl-Net-SSLeay-1.85-11.fc29 (FEDORA-2019-aa0d14547a) Perl extension for using OpenSSL -------------------------------------------------------------------------------- Update Information: This update addresses a problem that the package failed to rebuild from source with the openssl packages in the updates repository, which no longer have a dependency on the zlib-devel package. The Net-SSLeay build scripts assume that OpenSSL is linked against zlib, which is no longer the case, and this caused the failure to build. The update fixes this by checking at build time which libraries need to be linked against for OpenSSL. -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 1 2019 Paul Howarth <paul(a)city-fan.org> - 1.85-11 - Get libraries to link against from pkg-config (#1704785) Adapted from https://github.com/radiator-software/p5-net-ssleay/pull/127 * Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.85-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1704785 - perl-Net-SSLeay-1.85-9.fc29 FTBFS: /usr/bin/ld: cannot find -lz https://bugzilla.redhat.com/show_bug.cgi?id=1704785 -------------------------------------------------------------------------------- ================================================================================ pipenv-2018.11.26-12.fc29 (FEDORA-2019-b9d986e330) The higher level Python packaging tool -------------------------------------------------------------------------------- Update Information: Fix pipenv for Python 2.7 projects. -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 2018.11.26-12 - Keep pathlib2, scandir, click-completion and backports.* bundled (#1767003) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1767003 - pipenv does not work on Fedora 31 with Python 2.7 https://bugzilla.redhat.com/show_bug.cgi?id=1767003 -------------------------------------------------------------------------------- ================================================================================ python-catkin_lint-1.6.2-1.fc29 (FEDORA-2019-c835f2122e) Check catkin packages for common errors -------------------------------------------------------------------------------- Update Information: Update to 1.6.2 -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 31 2019 Scott K Logan <logans(a)cottsay.net> - 1.6.2-1 - Update to 1.6.2 (rhbz#1767353) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1767353 - python-catkin_lint-1.6.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1767353 -------------------------------------------------------------------------------- ================================================================================ python-colcon-cd-0.1.1-3.fc29 (FEDORA-2019-89b0ea1ffb) Extension for colcon to change the current working directory -------------------------------------------------------------------------------- Update Information: Initial release of `colcon-cd` -------------------------------------------------------------------------------- References: [ 1 ] Bug #1767216 - Review Request: python-colcon-cd - Extension for colcon to change the current working directory https://bugzilla.redhat.com/show_bug.cgi?id=1767216 -------------------------------------------------------------------------------- ================================================================================ python-colcon-cmake-0.2.16-1.fc29 (FEDORA-2019-fd19ff6991) Extension for colcon to support CMake packages -------------------------------------------------------------------------------- Update Information: Update to latest `colcon-*` releases -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.2.16-1 - Update to 0.2.16 (rhbz#1762084) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1763461 - python-colcon-devtools-0.2.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763461 [ 2 ] Bug #1762532 - python-colcon-powershell-0.3.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762532 [ 3 ] Bug #1765938 - python-colcon-package-information-0.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1765938 [ 4 ] Bug #1762084 - python-colcon-cmake-0.2.16 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762084 [ 5 ] Bug #1762548 - python-colcon-core-0.4.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762548 [ 6 ] Bug #1763100 - python-colcon-common-extensions-0.2.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763100 -------------------------------------------------------------------------------- ================================================================================ python-colcon-common-extensions-0.2.1-1.fc29 (FEDORA-2019-fd19ff6991) Meta package aggregating colcon-core and common extensions -------------------------------------------------------------------------------- Update Information: Update to latest `colcon-*` releases -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 1 2019 Scott K Logan <logans(a)cottsay.net> - 0.2.1-1 - Update to 0.2.1 (rhbz#1763100) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1763461 - python-colcon-devtools-0.2.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763461 [ 2 ] Bug #1762532 - python-colcon-powershell-0.3.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762532 [ 3 ] Bug #1765938 - python-colcon-package-information-0.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1765938 [ 4 ] Bug #1762084 - python-colcon-cmake-0.2.16 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762084 [ 5 ] Bug #1762548 - python-colcon-core-0.4.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762548 [ 6 ] Bug #1763100 - python-colcon-common-extensions-0.2.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763100 -------------------------------------------------------------------------------- ================================================================================ python-colcon-core-0.4.3-1.fc29 (FEDORA-2019-fd19ff6991) Command line tool to build sets of software packages -------------------------------------------------------------------------------- Update Information: Update to latest `colcon-*` releases -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.4.3-1 - Update to 0.4.3 (rhbz#1762548) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1763461 - python-colcon-devtools-0.2.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763461 [ 2 ] Bug #1762532 - python-colcon-powershell-0.3.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762532 [ 3 ] Bug #1765938 - python-colcon-package-information-0.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1765938 [ 4 ] Bug #1762084 - python-colcon-cmake-0.2.16 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762084 [ 5 ] Bug #1762548 - python-colcon-core-0.4.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762548 [ 6 ] Bug #1763100 - python-colcon-common-extensions-0.2.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763100 -------------------------------------------------------------------------------- ================================================================================ python-colcon-devtools-0.2.2-1.fc29 (FEDORA-2019-fd19ff6991) Extension for information about colcon extensibility -------------------------------------------------------------------------------- Update Information: Update to latest `colcon-*` releases -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.2.2-1 - Update to 0.2.2 (rhbz#1763461) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1763461 - python-colcon-devtools-0.2.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763461 [ 2 ] Bug #1762532 - python-colcon-powershell-0.3.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762532 [ 3 ] Bug #1765938 - python-colcon-package-information-0.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1765938 [ 4 ] Bug #1762084 - python-colcon-cmake-0.2.16 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762084 [ 5 ] Bug #1762548 - python-colcon-core-0.4.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762548 [ 6 ] Bug #1763100 - python-colcon-common-extensions-0.2.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763100 -------------------------------------------------------------------------------- ================================================================================ python-colcon-package-information-0.3.0-1.fc29 (FEDORA-2019-fd19ff6991) Extension for colcon to output package information -------------------------------------------------------------------------------- Update Information: Update to latest `colcon-*` releases -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.3.0-1 - Update to 0.3.0 (rhbz#1765938) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1763461 - python-colcon-devtools-0.2.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763461 [ 2 ] Bug #1762532 - python-colcon-powershell-0.3.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762532 [ 3 ] Bug #1765938 - python-colcon-package-information-0.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1765938 [ 4 ] Bug #1762084 - python-colcon-cmake-0.2.16 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762084 [ 5 ] Bug #1762548 - python-colcon-core-0.4.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762548 [ 6 ] Bug #1763100 - python-colcon-common-extensions-0.2.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763100 -------------------------------------------------------------------------------- ================================================================================ python-colcon-powershell-0.3.6-1.fc29 (FEDORA-2019-fd19ff6991) Extension for colcon to provide PowerShell scripts -------------------------------------------------------------------------------- Update Information: Update to latest `colcon-*` releases -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.3.6-1 - Update to 0.3.6 (rhbz#1762532) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1763461 - python-colcon-devtools-0.2.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763461 [ 2 ] Bug #1762532 - python-colcon-powershell-0.3.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762532 [ 3 ] Bug #1765938 - python-colcon-package-information-0.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1765938 [ 4 ] Bug #1762084 - python-colcon-cmake-0.2.16 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762084 [ 5 ] Bug #1762548 - python-colcon-core-0.4.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762548 [ 6 ] Bug #1763100 - python-colcon-common-extensions-0.2.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763100 -------------------------------------------------------------------------------- ================================================================================ python35-3.5.8-2.fc29 (FEDORA-2019-d202cda4f8) Version 3.5 of the Python programming language -------------------------------------------------------------------------------- Update Information: Python 3.5 has now entered "security fixes only" mode, and as such the only changes since Python 3.5.4 are security fixes. https://www.python.org/downloads/release/python-358/ https://docs.python.org/3.5/whatsnew/changelog.html#python-3-5-8 Security fix for CVE-2019-9740, CVE-2019-10160, CVE-2019-16935, CVE-2019-18348 , CVE-2019-16056. -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 3.5.8-2 - Use the correct upstream tarball - https://mail.python.org/archives/list/python-dev@python.org/message/OYNQS2B… * Tue Oct 29 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 3.5.8-1 - Update to 3.5.8 * Sat Oct 12 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 3.5.8~rc2-1 - Update to 3.5.8rc2 * Mon Sep 9 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 3.5.8~rc1-1 - Update to 3.5.8rc1 * Sat Aug 10 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 3.5.7-4 - Build against OpenSSL 1.1.x, not 1.0.x * Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.5.7-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Tue Apr 2 2019 Victor Stinner <vstinner(a)redhat.com> - 3.5.7-2 - Skip test_ssl and test_asyncio tests failing with OpenSSL 1.1.1 (rhbz#1685609) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1749839 - CVE-2019-16056 python: email.utils.parseaddr wrongly parses email addresses https://bugzilla.redhat.com/show_bug.cgi?id=1749839 [ 2 ] Bug #1727276 - CVE-2019-18348 python: CRLF injection via the host part of the url passed to urlopen() https://bugzilla.redhat.com/show_bug.cgi?id=1727276 [ 3 ] Bug #1763229 - CVE-2019-16935 python: XSS vulnerability in the documentation XML-RPC server in server_title field https://bugzilla.redhat.com/show_bug.cgi?id=1763229 [ 4 ] Bug #1718388 - CVE-2019-10160 python: regression of CVE-2019-9636 due to functional fix to allow port numbers in netloc https://bugzilla.redhat.com/show_bug.cgi?id=1718388 [ 5 ] Bug #1688169 - CVE-2019-9740 python: CRLF injection via the query part of the url passed to urlopen() https://bugzilla.redhat.com/show_bug.cgi?id=1688169 -------------------------------------------------------------------------------- ================================================================================ redhat-rpm-config-121-1.fc29 (FEDORA-2019-e5d246aa34) Red Hat specific rpm configuration files -------------------------------------------------------------------------------- Update Information: Simplify the API of %gpgverify. -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 1 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 121-1 - Fix the simple API of %gpgverify. * Thu Oct 31 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 120-1 - Simplify the API of %gpgverify. -------------------------------------------------------------------------------- ================================================================================ rpkg-1.59-2.fc29 (FEDORA-2019-f7857e3660) Python library for interacting with rpm+git -------------------------------------------------------------------------------- Update Information: Backporting some fixes and features ### container-build: add new arguments to the subcommand: --isolated Isolated builds will only update the {version}-{release} unique tag and the primary tag in the target container registry. Also, OSBS's bump_release plugin will ignore isolated builds. Users must specify a --build-release argument when the use the --isolated argument. --koji-parent-build OSBS allows users to dynamically override the Dockerfile's "FROM" image at build time. This allows you to build your container against a specific parent image without pushing changes to dist-git. ### Reuse koji_cli.lib.unique_path Call this method instead of constructing the path by rpkg itself. ### Pass skip_build option to buildContainer (fix) -------------------------------------------------------------------------------- ChangeLog: * Fri Oct 25 2019 Ondrej Nosek <onosek(a)redhat.com> - 1.59-2 - Backport: container-build: add --isolated and --koji-parent-build arguments - Backport: Pass skip_build option to buildContainer - Backport: Reuse koji_cli.lib.unique_path -------------------------------------------------------------------------------- ================================================================================ sane-backends-1.0.28-5.fc29 (FEDORA-2019-3b65c609e8) Scanner access software -------------------------------------------------------------------------------- Update Information: 1761530 - apply upstream patch -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 31 2019 Zdenek Dohnal <zdohnal(a)redhat.com> - 1.0.28-5 - 1761530 - apply upstream patch -------------------------------------------------------------------------------- ================================================================================ system-config-printer-1.5.12-3.fc29 (FEDORA-2019-2145947b10) A printer administration tool -------------------------------------------------------------------------------- Update Information: whole fix for #1765915 -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 31 2019 Zdenek Dohnal <zdohnal(a)redhat.com> - 1.5.12-3 - whole fix for #1765915 * Tue Oct 29 2019 Zdenek Dohnal <zdohnal(a)redhat.com> - 1.5.12-2 - 1765915 - abrt in udev-configure-printer -------------------------------------------------------------------------------- ================================================================================ vacuum-im-1.3.0-0.16.20191014git9f3952b.fc29 (FEDORA-2019-0fbadc07d7) XMPP/Jabber client -------------------------------------------------------------------------------- Update Information: Update to 1.3.0-0.16.20191014git9f3952b -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 31 2019 Martin Gansser <martinkg(a)fedoraproject.org> - 1.3.0-0.16.20191014git9f3952b - Update to 1.3.0-0.16.20191014git9f3952b * Sat Jul 27 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.0-0.15.20181129git52c2a8c - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Sun Feb 3 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.0-0.14.20181129git52c2a8c - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ xen-4.11.2-2.fc29 (FEDORA-2019-865bb16900) Xen is a virtual machine monitor -------------------------------------------------------------------------------- Update Information: VCPUOP_initialise DoS [XSA-296, CVE-2019-18420] missing descriptor table limit checking in x86 PV emulation [XSA-298, CVE-2019-18425] Issues with restartable PV type change operations [XSA-299, CVE-2019-18421] (#1767726) add-to-physmap can be abused to DoS Arm hosts [XSA-301, CVE-2019-18423] passed through PCI devices may corrupt host memory after deassignment [XSA-302, CVE-2019-18424] (#1767731) ARM: Interrupts are unconditionally unmasked in exception handlers [XSA-303, CVE-2019-18422] -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 1 2019 Michael Young <m.a.young(a)durham.ac.uk> - 4.11.2-2 - VCPUOP_initialise DoS [XSA-296, CVE-2019-18420] - missing descriptor table limit checking in x86 PV emulation [XSA-298, CVE-2019-18425] - Issues with restartable PV type change operations [XSA-299, CVE-2019-18421] (#1767726) - add-to-physmap can be abused to DoS Arm hosts [XSA-301, CVE-2019-18423] - passed through PCI devices may corrupt host memory after deassignment [XSA-302, CVE-2019-18424] (#1767731) - ARM: Interrupts are unconditionally unmasked in exception handlers [XSA-303, CVE-2019-18422] -------------------------------------------------------------------------------- References: [ 1 ] Bug #1765043 - CVE-2019-18421 xen: a malicious PV guest administrator may be able to escalate their privilege to that of the host https://bugzilla.redhat.com/show_bug.cgi?id=1765043 [ 2 ] Bug #1767730 - CVE-2019-18424 xen: passed through PCI devices may corrupt host memory after deassignment leading to privilege escalation https://bugzilla.redhat.com/show_bug.cgi?id=1767730 -------------------------------------------------------------------------------- ================================================================================ xtl-0.6.8-1.fc29 (FEDORA-2019-e9c1b9caba) QuantStack tools library -------------------------------------------------------------------------------- Update Information: Update to latest version -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 31 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.6.8-1 - Update to latest version -------------------------------------------------------------------------------- References: [ 1 ] Bug #1767641 - xtl-0.6.8 is available https://bugzilla.redhat.com/show_bug.cgi?id=1767641 --------------------------------------------------------------------------------

1 0

Fedora 30 updates-testing report
by updates＠fedoraproject.org 02 Nov '19

02 Nov '19

The following Fedora 30 Security updates need testing: Age URL 7 https://bodhi.fedoraproject.org/updates/FEDORA-2019-74ba24605e python2-2.7.17-1.fc30 python2-docs-2.7.17-1.fc30 7 https://bodhi.fedoraproject.org/updates/FEDORA-2019-73919e71f8 aspell-0.60.8-1.fc30 5 https://bodhi.fedoraproject.org/updates/FEDORA-2019-b2156dcba6 t1utils-1.41-1.fc30 5 https://bodhi.fedoraproject.org/updates/FEDORA-2019-119312dbfc java-latest-openjdk-13.0.1.9-2.rolling.fc30 0 https://bodhi.fedoraproject.org/updates/FEDORA-2019-0bf2749723 thunderbird-68.2.0-1.fc30 0 https://bodhi.fedoraproject.org/updates/FEDORA-2019-6057a71211 golang-1.12.12-1.fc30 0 https://bodhi.fedoraproject.org/updates/FEDORA-2019-d1487c13ac rssh-2.3.4-15.fc30 0 https://bodhi.fedoraproject.org/updates/FEDORA-2019-460ad648e7 samba-4.10.10-0.fc30 0 https://bodhi.fedoraproject.org/updates/FEDORA-2019-ec04c34768 libssh2-1.9.0-3.fc30 0 https://bodhi.fedoraproject.org/updates/FEDORA-2019-2265b5ae86 hostapd-2.9-2.fc30 0 https://bodhi.fedoraproject.org/updates/FEDORA-2019-2bdcccee3c wpa_supplicant-2.8-3.fc30 The following Fedora 30 Critical Path updates have yet to be approved: Age URL 114 https://bodhi.fedoraproject.org/updates/FEDORA-2019-c05e4425d1 dash-0.5.10.2-3.fc30 7 https://bodhi.fedoraproject.org/updates/FEDORA-2019-bb9ea29ef2 linux-firmware-20191022-103.fc30 7 https://bodhi.fedoraproject.org/updates/FEDORA-2019-a07ea39a27 pungi-4.1.40-1.fc30 7 https://bodhi.fedoraproject.org/updates/FEDORA-2019-751c65ba68 librsvg2-2.46.3-1.fc30 7 https://bodhi.fedoraproject.org/updates/FEDORA-2019-40dba3d36e plymouth-0.9.4-11.20191022git32c097c.fc30 7 https://bodhi.fedoraproject.org/updates/FEDORA-2019-1b16b0e9ae sssd-2.2.2-3.fc30 7 https://bodhi.fedoraproject.org/updates/FEDORA-2019-25ba44eac2 fedora-release-30-6 7 https://bodhi.fedoraproject.org/updates/FEDORA-2019-74ba24605e python2-2.7.17-1.fc30 python2-docs-2.7.17-1.fc30 7 https://bodhi.fedoraproject.org/updates/FEDORA-2019-7b32145751 initial-setup-0.3.69-2.fc30 5 https://bodhi.fedoraproject.org/updates/FEDORA-2019-af5e9f72a8 libedit-3.1-29.20191025cvs.fc30 5 https://bodhi.fedoraproject.org/updates/FEDORA-2019-f83217e2bf selinux-policy-3.14.3-51.fc30 3 https://bodhi.fedoraproject.org/updates/FEDORA-2019-6ca9241892 glusterfs-6.6-1.fc30 3 https://bodhi.fedoraproject.org/updates/FEDORA-2019-e42a5ed21e polkit-0.116-2.fc30.2 0 https://bodhi.fedoraproject.org/updates/FEDORA-2019-2bdcccee3c wpa_supplicant-2.8-3.fc30 0 https://bodhi.fedoraproject.org/updates/FEDORA-2019-ec04c34768 libssh2-1.9.0-3.fc30 0 https://bodhi.fedoraproject.org/updates/FEDORA-2019-0e85bbd15b kernel-5.3.8-200.fc30 0 https://bodhi.fedoraproject.org/updates/FEDORA-2019-460ad648e7 samba-4.10.10-0.fc30 0 https://bodhi.fedoraproject.org/updates/FEDORA-2019-bd6f08f65c gnutls-3.6.10-1.fc30 0 https://bodhi.fedoraproject.org/updates/FEDORA-2019-79048fc832 pcre2-10.33-15.fc30 0 https://bodhi.fedoraproject.org/updates/FEDORA-2019-0bf2749723 thunderbird-68.2.0-1.fc30 The following builds have been pushed to Fedora 30 updates-testing Cadence-1.0.0-0.7.20191021git0642494.fc30 R-littler-0.3.9-1.fc30 R-tinytex-0.17-1.fc30 automake-1.16.1-13.fc30 binutils-2.31.1-34.fc30 chromium-78.0.3904.70-1.fc30 clazy-1.6-1.fc30 cryptsetup-2.2.2-1.fc30 elementary-icon-theme-5.1.0-2.fc30 fntsample-5.3-4.fc30 gd-2.2.5-9.fc30 gnome-abrt-1.2.9-2.fc30 ibus-typing-booster-2.7.1-1.fc30 jaero-1.0.4.11-2.fc30 koji-1.19.0-1.fc30 ledger-3.1.3-1.20191030git2ca3d69.fc30 libcouchbase-2.10.5-1.fc30 lollypop-1.2.4-1.fc30 mame-0.215-1.fc30 mmapper-19.10.1-1.fc30 mock-1.4.21-1.fc30 mock-core-configs-31.7-1.fc30 mpc-0.33-1.fc30 openvpn-2.4.8-1.fc30 perl-Devel-Cover-1.31-3.fc30 perl-Getopt-Lucid-1.10-1.fc30 perl-Net-SSLeay-1.85-11.fc30 perl-XML-TreeBuilder-5.4-14.fc30 php-mikey179-vfsstream-1.6.8-1.fc30 php-pecl-xdebug-2.8.0-1.fc30 pipenv-2018.11.26-12.fc30 python-catkin_lint-1.6.2-1.fc30 python-colcon-cd-0.1.1-3.fc30 python-colcon-cmake-0.2.16-1.fc30 python-colcon-common-extensions-0.2.1-1.fc30 python-colcon-core-0.4.3-1.fc30 python-colcon-devtools-0.2.2-1.fc30 python-colcon-package-information-0.3.0-1.fc30 python-colcon-powershell-0.3.6-1.fc30 python-pyrsistent-0.15.5-1.fc30 python35-3.5.8-2.fc30 quisk-4.1.47-1.fc30 redhat-rpm-config-132-1.fc30 sane-backends-1.0.28-5.fc30 switchboard-plug-bluetooth-2.3.0-1.fc30 system-config-printer-1.5.12-3.fc30 timescaledb-1.5.0-1.fc30 unbound-1.9.4-1.fc30 vacuum-im-1.3.0-0.16.20191014git9f3952b.fc30 wingpanel-2.2.6-1.fc30 wingpanel-indicator-datetime-2.2.0-1.fc30 xen-4.11.2-2.fc30 xpra-3.0.1-2.fc30 xtl-0.6.8-1.fc30 yp-tools-4.2.3-6.fc30 Details about builds: ================================================================================ Cadence-1.0.0-0.7.20191021git0642494.fc30 (FEDORA-2019-617b601e7d) A set of tools useful for audio production -------------------------------------------------------------------------------- Update Information: - Remove RR ladish due package is dead -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 31 2019 Martin Gansser <martinkg(a)fedoraproject.org> - 1.0.0-0.7.20191021git0642494 - Remove RR ladish due package is dead * Wed Oct 30 2019 Martin Gansser <martinkg(a)fedoraproject.org> - 1.0.0-0.6.20191021git0642494 - Update to 1.0.0-0.6.20191021git0642494 * Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.0-0.5.20180827git4a5f5b4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1767725 - Cadence fails to install in Fedora 31 https://bugzilla.redhat.com/show_bug.cgi?id=1767725 -------------------------------------------------------------------------------- ================================================================================ R-littler-0.3.9-1.fc30 (FEDORA-2019-8a8986981f) littler: R at the Command-Line via 'r' -------------------------------------------------------------------------------- Update Information: littler 0.3.9. -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 31 2019 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 0.3.9-1 - New upstream release 0.3.9 * Thu Sep 19 2019 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 0.3.8-5 - Unify specfile * Mon Aug 12 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.3.8-4 - Remove explicit dependencies provided by automatic dependency generator * Mon Aug 12 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.3.8-3 - Rebuild with automatic Provides * Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.8-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ R-tinytex-0.17-1.fc30 (FEDORA-2019-5f8b580b4e) Helper Functions to Install and Maintain 'TeX Live', and Compile 'LaTeX' Documents -------------------------------------------------------------------------------- Update Information: Update to latest version -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.17-1 - Update to latest version -------------------------------------------------------------------------------- References: [ 1 ] Bug #1767243 - R-tinytex-0.17 is available https://bugzilla.redhat.com/show_bug.cgi?id=1767243 -------------------------------------------------------------------------------- ================================================================================ automake-1.16.1-13.fc30 (FEDORA-2019-5f53dc10b2) A GNU tool for automatically creating Makefiles -------------------------------------------------------------------------------- Update Information: Rebuild for pep3147 tweak patch -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 1 2019 Patrik Novotn�� <panovotn(a)redhat.com> - 1.16.1-13 - Rebuild for pep3147 tweak patch -------------------------------------------------------------------------------- References: [ 1 ] Bug #1757854 - automake 1.16.1 bug on am__pep3147_tweak https://bugzilla.redhat.com/show_bug.cgi?id=1757854 -------------------------------------------------------------------------------- ================================================================================ binutils-2.31.1-34.fc30 (FEDORA-2019-d3a867a569) A GNU collection of binary utilities -------------------------------------------------------------------------------- Update Information: A recent update to the binutils package for F31 and F30 has improved the note merging abilities of the objdump program. This is significant because this note merging is now part of the standard rpm build sequence and the size reduction can be quite noticeable. For example the merge can reduce the size of the annobin build notes in the libc.so executable from 3.8Mb down to 3.7Kb. (Ie megabytes to kilobytes). Although this change should not be directly visible to users, it would be helpful to have it in the build system, and this should help to reduce the size of many compiled packages. -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 31 2019 Nick Clifton <nickc(a)redhat.com> - 2.31.1-34 - Improve objcopy's ability to merge GNU build attribute notes. * Fri Aug 9 2019 Nick Clifton <nickc(a)redhat.com> - 2.31.1-33 - Fix potential integer overflow in GOLD. (#1739491) * Tue Jul 2 2019 Nick Clifton <nickc(a)redhat.com> - 2.31.1-32 - Stop the BFD library from complaining about sections found inside debuginfo files. (PR 24717) * Tue May 21 2019 Nick Clifton <nickc(a)redhat.com> - 2.31.1-31 - Import fix for PR 23870 in order to help building Go binaries. * Wed Apr 10 2019 Nick Clifton <nickc(a)redhat.com> - 2.31.1-30 - Fix a stack exhaustion problem in libiberty's name demangling code. (#1680658) - Fix a bug handling 8-bit displacements in x86 insns. (PR 23465) -------------------------------------------------------------------------------- ================================================================================ chromium-78.0.3904.70-1.fc30 (FEDORA-2019-a0e51168eb) A WebKit (Blink) powered web browser -------------------------------------------------------------------------------- Update Information: Chromium 78. Fixes these: CVE-2019-5870 CVE-2019-5871 CVE-2019-5872 CVE-2019-5874 CVE-2019-5875 CVE-2019-13691 CVE-2019-13692 CVE-2019-5876 CVE-2019-5877 CVE-2019-5878 CVE-2019-5879 CVE-2019-5880 CVE-2019-5881 CVE-2019-13659 CVE-2019-13660 CVE-2019-13661 CVE-2019-13662 CVE-2019-13663 CVE-2019-13664 CVE-2019-13665 CVE-2019-13666 CVE-2019-13667 CVE-2019-13668 CVE-2019-13669 CVE-2019-13670 CVE-2019-13671 CVE-2019-13673 CVE-2019-13674 CVE-2019-13675 CVE-2019-13676 CVE-2019-13677 CVE-2019-13678 CVE-2019-13679 CVE-2019-13680 CVE-2019-13681 CVE-2019-13682 CVE-2019-13683 -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 23 2019 Tom Callaway <spot(a)fedoraproject.org> - 78.0.3904.80-1 - update to 78.0.3904.80 * Wed Oct 16 2019 Tom Callaway <spot(a)fedoraproject.org> - 77.0.3865.120-4 - upstream fix for zlib symbol exports with gcc * Wed Oct 16 2019 Tom Callaway <spot(a)fedoraproject.org> - 77.0.3865.120-3 - silence outdated build noise (bz1745745) * Tue Oct 15 2019 Tom Callaway <spot(a)fedoraproject.org> - 77.0.3865.120-2 - fix node handling for EPEL-8 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1762402 - CVE-2019-13682 chromium-browser: Site isolation bypass https://bugzilla.redhat.com/show_bug.cgi?id=1762402 [ 2 ] Bug #1762401 - CVE-2019-13681 chromium-browser: Bypass on download restrictions https://bugzilla.redhat.com/show_bug.cgi?id=1762401 [ 3 ] Bug #1762400 - CVE-2019-13680 chromium-browser: IP address spoofing to servers https://bugzilla.redhat.com/show_bug.cgi?id=1762400 [ 4 ] Bug #1762399 - CVE-2019-13679 chromium-browser: User gesture needed for printing https://bugzilla.redhat.com/show_bug.cgi?id=1762399 [ 5 ] Bug #1762398 - CVE-2019-13678 chromium-browser: Download dialog spoofing https://bugzilla.redhat.com/show_bug.cgi?id=1762398 [ 6 ] Bug #1762397 - CVE-2019-13677 chromium-browser: Chrome web store origin needs to be isolated https://bugzilla.redhat.com/show_bug.cgi?id=1762397 [ 7 ] Bug #1762396 - CVE-2019-13676 chromium-browser: Google URI shown for certificate warning https://bugzilla.redhat.com/show_bug.cgi?id=1762396 [ 8 ] Bug #1762395 - CVE-2019-13675 chromium-browser: Extensions can be disabled by trailing slash https://bugzilla.redhat.com/show_bug.cgi?id=1762395 [ 9 ] Bug #1762394 - CVE-2019-13674 chromium-browser: IDN spoofing https://bugzilla.redhat.com/show_bug.cgi?id=1762394 [ 10 ] Bug #1762393 - CVE-2019-13673 chromium-browser: Cross-origin information leak using devtools https://bugzilla.redhat.com/show_bug.cgi?id=1762393 [ 11 ] Bug #1762392 - CVE-2019-13671 chromium-browser: Dialog box fails to show origin https://bugzilla.redhat.com/show_bug.cgi?id=1762392 [ 12 ] Bug #1762391 - CVE-2019-13670 chromium-browser: V8 memory corruption in regex https://bugzilla.redhat.com/show_bug.cgi?id=1762391 [ 13 ] Bug #1762390 - CVE-2019-13669 chromium-browser: HTTP authentication spoof https://bugzilla.redhat.com/show_bug.cgi?id=1762390 [ 14 ] Bug #1762389 - CVE-2019-13668 chromium-browser: Global window leak via console https://bugzilla.redhat.com/show_bug.cgi?id=1762389 [ 15 ] Bug #1762388 - CVE-2019-13667 chromium-browser: URI bar spoof when using external app URIs https://bugzilla.redhat.com/show_bug.cgi?id=1762388 [ 16 ] Bug #1762387 - CVE-2019-13666 chromium-browser: Side channel using storage size estimate https://bugzilla.redhat.com/show_bug.cgi?id=1762387 [ 17 ] Bug #1762386 - CVE-2019-13665 chromium-browser: Multiple file download protection bypass https://bugzilla.redhat.com/show_bug.cgi?id=1762386 [ 18 ] Bug #1762385 - CVE-2019-13664 chromium-browser: CSRF bypass https://bugzilla.redhat.com/show_bug.cgi?id=1762385 [ 19 ] Bug #1762384 - CVE-2019-13663 chromium-browser: IDN spoof https://bugzilla.redhat.com/show_bug.cgi?id=1762384 [ 20 ] Bug #1762383 - CVE-2019-13662 chromium-browser: CSP bypass https://bugzilla.redhat.com/show_bug.cgi?id=1762383 [ 21 ] Bug #1762382 - CVE-2019-13661 chromium-browser: Full screen notification spoof https://bugzilla.redhat.com/show_bug.cgi?id=1762382 [ 22 ] Bug #1762381 - CVE-2019-13660 chromium-browser: Full screen notification overlap https://bugzilla.redhat.com/show_bug.cgi?id=1762381 [ 23 ] Bug #1762380 - CVE-2019-13659 chromium-browser: URL spoof https://bugzilla.redhat.com/show_bug.cgi?id=1762380 [ 24 ] Bug #1762379 - CVE-2019-5881 chromium-browser: Arbitrary read in SwiftShader https://bugzilla.redhat.com/show_bug.cgi?id=1762379 [ 25 ] Bug #1762378 - CVE-2019-5880 chromium-browser: SameSite cookie bypass https://bugzilla.redhat.com/show_bug.cgi?id=1762378 [ 26 ] Bug #1762377 - CVE-2019-5879 chromium-browser: Extensions can read some local files https://bugzilla.redhat.com/show_bug.cgi?id=1762377 [ 27 ] Bug #1762376 - CVE-2019-5878 chromium-browser: Use-after-free in V8 https://bugzilla.redhat.com/show_bug.cgi?id=1762376 [ 28 ] Bug #1762375 - CVE-2019-5877 chromium-browser: Out-of-bounds access in V8 https://bugzilla.redhat.com/show_bug.cgi?id=1762375 [ 29 ] Bug #1762374 - CVE-2019-5876 chromium-browser: Use-after-free in media https://bugzilla.redhat.com/show_bug.cgi?id=1762374 [ 30 ] Bug #1762373 - CVE-2019-13692 chromium-browser: SOP bypass https://bugzilla.redhat.com/show_bug.cgi?id=1762373 [ 31 ] Bug #1762372 - CVE-2019-13691 chromium-browser: Omnibox spoof https://bugzilla.redhat.com/show_bug.cgi?id=1762372 [ 32 ] Bug #1762371 - CVE-2019-5875 chromium-browser: URL bar spoof via download redirect https://bugzilla.redhat.com/show_bug.cgi?id=1762371 [ 33 ] Bug #1762370 - CVE-2019-5874 chromium-browser: External URIs may trigger other browsers https://bugzilla.redhat.com/show_bug.cgi?id=1762370 [ 34 ] Bug #1762368 - CVE-2019-5872 chromium-browser: Use-after-free in Mojo https://bugzilla.redhat.com/show_bug.cgi?id=1762368 [ 35 ] Bug #1762367 - CVE-2019-5871 chromium-browser: Heap overflow in Skia https://bugzilla.redhat.com/show_bug.cgi?id=1762367 [ 36 ] Bug #1762366 - CVE-2019-5870 chromium-browser: Use-after-free in media https://bugzilla.redhat.com/show_bug.cgi?id=1762366 -------------------------------------------------------------------------------- ================================================================================ clazy-1.6-1.fc30 (FEDORA-2019-46aa02129e) Qt oriented code checker based on clang framework -------------------------------------------------------------------------------- Update Information: Clazy 1.6 release. -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Jan Grulich <jgrulich(a)redhat.com> - 1.6-1 - 1.6 * Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ cryptsetup-2.2.2-1.fc30 (FEDORA-2019-84830f1224) A utility for setting up encrypted disks -------------------------------------------------------------------------------- Update Information: Update to version 2.2.2. -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 1 2019 Ondrej Kozina <okozina(a)redhat.com> - 2.2.2-1 - Update to cryptsetup 2.2.2. -------------------------------------------------------------------------------- ================================================================================ elementary-icon-theme-5.1.0-2.fc30 (FEDORA-2019-274bbf0162) Icons from the Elementary Project -------------------------------------------------------------------------------- Update Information: Update to version 5.1.0. Release notes: https://github.com/elementary/icons/releases/tag/5.1.0 -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 1 2019 Fabio Valentini <decathorpe(a)gmail.com> - 5.1.0-2 - Fix minor build issues. * Fri Nov 1 2019 Fabio Valentini <decathorpe(a)gmail.com> - 5.1.0-1 - Update to version 5.1.0. -------------------------------------------------------------------------------- ================================================================================ fntsample-5.3-4.fc30 (FEDORA-2019-3e4e542c08) A program for making font samples that show Unicode coverage of the font -------------------------------------------------------------------------------- Update Information: Resolves:rh#1761556 - Add missing dependency perl(Locale::TextDomain) -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 1 2019 Parag Nemade <pnemade AT redhat DOT com> - 5.3-4 - Resolves:rh#1761556 - Add missing dependency perl(Locale::TextDomain) * Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1761556 - fntsample missing dependency on perl-libintl-perl https://bugzilla.redhat.com/show_bug.cgi?id=1761556 -------------------------------------------------------------------------------- ================================================================================ gd-2.2.5-9.fc30 (FEDORA-2019-ab7d22a466) A graphics library for quick creation of PNG or JPEG images -------------------------------------------------------------------------------- Update Information: fixed multiple security bugs -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 1 2019 odubaj(a)redhat.com - 2.2.5-9 - Fixed heap based buffer overflow in gd_color_match.c:gdImageColorMatch() in libgd as used in imagecolormatch() - Resolves: RHBZ#1678104 (CVE-2019-6977) - Fixed potential double-free in gdImage*Ptr() - Resolves: RHBZ#1671391 (CVE-2019-6978) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1672210 - CVE-2019-6977 gd: heap based buffer overflow in gd_color_match.c:gdImageColorMatch() in libgd as used in imagecolormatch() [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1672210 [ 2 ] Bug #1671391 - CVE-2019-6978 gd: double free in the gdImage*Ptr in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1671391 -------------------------------------------------------------------------------- ================================================================================ gnome-abrt-1.2.9-2.fc30 (FEDORA-2019-b83ee0356a) A utility for viewing problems that have occurred with the system -------------------------------------------------------------------------------- Update Information: * New translation language: Afrikaans. * Updated translations: Czech, Danish, Dutch, French, Friulian, Indonesian, Polish, Portuguese (PT), Slovak, Swedish, Ukrainian. -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 31 2019 Rafal Luzynski <digitalfreak(a)lingonborough.com> - 1.2.9-2 - Apply upstream changes in the spec file - Fix "gnome-abrt --help" not fully translated - New translation language: Afrikaans - Update translations: Czech, Danish, Dutch, French, Friulian, Indonesian, Polish, Portuguese (PT), Slovak, Swedish, Ukrainian -------------------------------------------------------------------------------- ================================================================================ ibus-typing-booster-2.7.1-1.fc30 (FEDORA-2019-e4459b404d) A completion input method -------------------------------------------------------------------------------- Update Information: Update to 2.7.1; Many translations updated, some new translations, some bugfixes. -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 31 2019 Mike FABIAN <mfabian(a)redhat.com> - 2.7.1-1 - Update to 2.7.1 - Update Chinese (Simplified) translations from Weblate (13.5% translated) - Update Spanish translations from Weblate (92.2% translated) - Update Catalan translations from Weblate (12.4% translated) - Add Hebrew translation from Weblate (67.4% translated) - Add Arabic translation from Weblate (28.0% translated) - Update Ukrainian translations from Weblate (100.0% translated) - Update German translations from Weblate (100.0% translated) - Update Japanese translations from Weblate (35.2% translated) - Update French translations from Weblate (93.8% translated) - Add Hungarian translation from Weblate (58.0% translated) - Add Odia translations from Weblate (2.6% translated) - Improve compose file parsing to get results containing \" correct - More test cases for compose sequences - Change README.md to refer to Weblate for translations instead of Zanata - Fix display of code points in emoji-picker when running in or_IN.UTF-8 locale -------------------------------------------------------------------------------- ================================================================================ jaero-1.0.4.11-2.fc30 (FEDORA-2019-e309378f52) A SatCom ACARS demodulator and decoder for the Aero standard -------------------------------------------------------------------------------- Update Information: Added new package. -------------------------------------------------------------------------------- ================================================================================ koji-1.19.0-1.fc30 (FEDORA-2019-da62df426e) Build system tools -------------------------------------------------------------------------------- Update Information: Upstream bugfix release 1.19.0. See https://docs.pagure.org/koji/release_notes_1.19/ for more info -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 1 2019 Mohan Boddu <mboddu(a)bhujji.com> - 1.19.0-1 - Rebase to 1.19.0 - Removing downstream patch 1613 -------------------------------------------------------------------------------- ================================================================================ ledger-3.1.3-1.20191030git2ca3d69.fc30 (FEDORA-2019-dc3547af8a) A powerful command-line double-entry accounting system -------------------------------------------------------------------------------- Update Information: Update to 3.1.3 Remove Python 2 dependency -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Jani Juhani Sinervo <jani(a)sinervo.fi> - 3.1.3-1.20191030git2ca3d69 - Update docs - Remove python 2 dependence - Disable tests because of their dependence on python 2 * Fri Oct 25 2019 Jani Juhani Sinervo <jani(a)sinervo.fi> - 3.1.3-1.20191025git49b07a1 - Update to version 3.1.3 - emacs-ledger and emacs-ledger-el have been separated from the main tree - Enable tests * Wed Oct 9 2019 Jerry James <loganjerry(a)gmail.com> - 3.1.1-24 - Rebuild for mpfr 4 * Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.1.1-23 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1672857 - ledger-3.1.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1672857 -------------------------------------------------------------------------------- ================================================================================ libcouchbase-2.10.5-1.fc30 (FEDORA-2019-b6ed9a2d9f) Client and protocol library for the Couchbase project -------------------------------------------------------------------------------- Update Information: Update to 2.10.5 -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 1 2019 Sergey Avseyev <sergey.avseyev(a)gmail.com> - 2.10.5-1 - Update to 2.10.5 -------------------------------------------------------------------------------- ================================================================================ lollypop-1.2.4-1.fc30 (FEDORA-2019-a05cb7d625) Music player for GNOME -------------------------------------------------------------------------------- Update Information: Update to 1.2.4-1 ---- Update to 1.2.3-1 ---- Update to lollypop-1.2.2-1 ---- Update to lollypop-1.2.1 ---- - Update to 1.2.0 - Add pkgconfig(pygobject-3.0) - Add pkgconfig(libsoup-2.4) -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 1 2019 Martin Gansser <martinkg(a)fedoraproject.org> - 1.2.4-1 - Update to 1.2.4 * Thu Oct 31 2019 Martin Gansser <martinkg(a)fedoraproject.org> - 1.2.3-1 - Update to 1.2.3 * Sat Oct 26 2019 Martin Gansser <martinkg(a)fedoraproject.org> - 1.2.2-1 - Update to 1.2.2 * Wed Oct 23 2019 Martin Gansser <martinkg(a)fedoraproject.org> - 1.2.1-1 - Update to 1.2.1 * Mon Oct 21 2019 Martin Gansser <martinkg(a)fedoraproject.org> - 1.2.0-1 - Update to 1.2.0 - Add pkgconfig(pygobject-3.0) - Add pkgconfig(libsoup-2.4) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1767873 - lollypop-1.2.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1767873 [ 2 ] Bug #1766286 - [abrt] lollypop: __popup_menu(): widgets_row.py:290:__popup_menu:ModuleNotFoundError: No module named 'lollypop.pop_menu' https://bugzilla.redhat.com/show_bug.cgi?id=1766286 [ 3 ] Bug #1764361 - lollypop-1.2.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1764361 [ 4 ] Bug #1756631 - lollypop-1.2.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1756631 [ 5 ] Bug #1761252 - [abrt] lollypop: wrapper(): helper_signals.py:40:wrapper:TypeError: __init__() got an unexpected keyword argument 'search' https://bugzilla.redhat.com/show_bug.cgi?id=1761252 [ 6 ] Bug #1756754 - [abrt] lollypop: insert_album(): view_albums_list.py:558:insert_album:IndexError: list index out of range https://bugzilla.redhat.com/show_bug.cgi?id=1756754 [ 7 ] Bug #1747484 - [abrt] lollypop: set_listened_at(): database_tracks.py:801:set_listened_at:sqlite3.OperationalError: database is locked https://bugzilla.redhat.com/show_bug.cgi?id=1747484 [ 8 ] Bug #1765737 - lollypop-1.2.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1765737 [ 9 ] Bug #1767121 - lollypop-1.2.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1767121 -------------------------------------------------------------------------------- ================================================================================ mame-0.215-1.fc30 (FEDORA-2019-a81b030b0a) Multiple Arcade Machine Emulator -------------------------------------------------------------------------------- Update Information: An update to the latest upstream release: * https://www.mamedev.org/?p=475 -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Julian Sikorski <belegdol(a)fedoraproject.org> - 0.215-1 - Update to 0.215 - Do not extract 3rdparty code not needed on Linux -------------------------------------------------------------------------------- ================================================================================ mmapper-19.10.1-1.fc30 (FEDORA-2019-97af0a57b9) Graphical MUME mapper -------------------------------------------------------------------------------- Update Information: mmaper 19.10.1 release. For details, see https://github.com/MUME/MMapper/releases/tag/v19.10.1 ---- mmaper 19.10.0 release. For details, see https://github.com/MUME/MMapper/releases/tag/v19.10.0 -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 1 2019 Kalev Lember <klember(a)redhat.com> - 19.10.1-1 - Update to 19.10.1 * Sat Oct 26 2019 Kalev Lember <klember(a)redhat.com> - 19.10.0-1 - Update to 19.10.0 - Disable github version checks -------------------------------------------------------------------------------- ================================================================================ mock-1.4.21-1.fc30 (FEDORA-2019-c6079af90e) Builds packages inside chroots -------------------------------------------------------------------------------- Update Information: - copy distribution-gpg-keys if this is boostrap and we use container image - move podman initialization to buildroot.py [GH#380] - bootstrap: fix --install and --installdeps [RHBZ#1447627] - selinuxfs, one more fix for nspawn [RHBZ#1756972] - fix broken rpmbuildstate [GH#349] -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 1 2019 Miroslav Such�� <msuchy(a)redhat.com> 1.4.21-1 - copy distribution-gpg-keys if this is boostrap and we use container image - move podman initialization to buildroot.py [GH#380] - bootstrap: fix --install and --installdeps [RHBZ#1447627] - mock: selinuxfs, one more fix for nspawn [RHBZ#1756972] - mock: fix broken rpmbuildstate [GH#349] -------------------------------------------------------------------------------- References: [ 1 ] Bug #1447627 - mock --installdeps or --install can't find rpm to install with --bootstrap-chroot https://bugzilla.redhat.com/show_bug.cgi?id=1447627 [ 2 ] Bug #1756972 - building Fedora 31 packages on Fedora 30 cause SELinux contexts to be unmapped https://bugzilla.redhat.com/show_bug.cgi?id=1756972 -------------------------------------------------------------------------------- ================================================================================ mock-core-configs-31.7-1.fc30 (FEDORA-2019-7b62e2bc40) Mock core config files basic chroots -------------------------------------------------------------------------------- Update Information: - Add configs for epel8-playground - add 3 base packages to epel-playground buildroot [RHBZ#1764445] - add 3 base packages to epel buildroot [RHBZ#1764445] -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 1 2019 Miroslav Such�� <msuchy(a)redhat.com> 31.7-1 - Add configs for epel8-playground (mmathesi(a)redhat.com) - add 3 base packages to epel-playground buildroot [RHBZ#1764445] - add 3 base packages to epel buildroot [RHBZ#1764445] -------------------------------------------------------------------------------- References: [ 1 ] Bug #1764445 - Packages missing in EPEL 8 mock buildroot https://bugzilla.redhat.com/show_bug.cgi?id=1764445 -------------------------------------------------------------------------------- ================================================================================ mpc-0.33-1.fc30 (FEDORA-2019-b5f2b8d389) Command-line client for MPD -------------------------------------------------------------------------------- Update Information: Update to 0.33. -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 1 2019 Vasiliy Glazov <vascom2(a)gmail.com> - 0.33-1 - Update to 0.33 -------------------------------------------------------------------------------- ================================================================================ openvpn-2.4.8-1.fc30 (FEDORA-2019-251c06eff1) A full-featured SSL VPN solution -------------------------------------------------------------------------------- Update Information: Update to latest OpenVPN 2.4.8 release. See [Release notes](https://community.op envpn.net/openvpn/wiki/ChangesInOpenvpn24#OpenVPN2.4.8) for more details. -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 1 2019 David Sommerseth <dazo(a)eurephia.org> - 2.4.8-1 - Updating to upstream OpenVPN 2.4.8 -------------------------------------------------------------------------------- ================================================================================ perl-Devel-Cover-1.31-3.fc30 (FEDORA-2019-a6d2a95095) Code coverage metrics for Perl -------------------------------------------------------------------------------- Update Information: Rebuild against current perl package. -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 31 2019 Tom Callaway <spot(a)fedoraproject.org> - 1.31-3 - rebuild for perl versioning -------------------------------------------------------------------------------- References: [ 1 ] Bug #1767477 - Devel::Cover produces warning about build vs runtime perl mismatch https://bugzilla.redhat.com/show_bug.cgi?id=1767477 -------------------------------------------------------------------------------- ================================================================================ perl-Getopt-Lucid-1.10-1.fc30 (FEDORA-2019-9e66b1077e) Clear, readable syntax for command line processing -------------------------------------------------------------------------------- Update Information: This release corrects misspellings in a documentation. -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 31 2019 Petr Pisar <ppisar(a)redhat.com> - 1.10-1 - 1.10 bump -------------------------------------------------------------------------------- References: [ 1 ] Bug #1765773 - perl-Getopt-Lucid-1.10 is available https://bugzilla.redhat.com/show_bug.cgi?id=1765773 -------------------------------------------------------------------------------- ================================================================================ perl-Net-SSLeay-1.85-11.fc30 (FEDORA-2019-3de21c0da4) Perl extension for using OpenSSL -------------------------------------------------------------------------------- Update Information: This update addresses a problem that the package failed to rebuild from source with the openssl packages in the updates repository, which no longer have a dependency on the zlib-devel package. The Net-SSLeay build scripts assume that OpenSSL is linked against zlib, which is no longer the case, and this caused the failure to build. The update fixes this by checking at build time which libraries need to be linked against for OpenSSL. -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 1 2019 Paul Howarth <paul(a)city-fan.org> - 1.85-11 - Get libraries to link against from pkg-config (#1704785) Adapted from https://github.com/radiator-software/p5-net-ssleay/pull/127 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1704785 - perl-Net-SSLeay-1.85-9.fc29 FTBFS: /usr/bin/ld: cannot find -lz https://bugzilla.redhat.com/show_bug.cgi?id=1704785 -------------------------------------------------------------------------------- ================================================================================ perl-XML-TreeBuilder-5.4-14.fc30 (FEDORA-2019-b8c6a656e4) Parser that builds a tree of XML::Element objects -------------------------------------------------------------------------------- Update Information: Updated the list of dependencies -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 1 2019 Jitka Plesnikova <jplesnik(a)redhat.com> - 5.4-14 - Updated build dependencies (bug #1588542) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1588542 - Useless dependency on perl(Test::Perl::Critic) https://bugzilla.redhat.com/show_bug.cgi?id=1588542 -------------------------------------------------------------------------------- ================================================================================ php-mikey179-vfsstream-1.6.8-1.fc30 (FEDORA-2019-401c1f9850) PHP stream wrapper for a virtual file system -------------------------------------------------------------------------------- Update Information: **Version 1.6.8** (2019-10-30) * Fix `StringBasedFileContent::doRead` to always return a string (#204) -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 31 2019 Remi Collet <remi(a)remirepo.net> - 1.6.8-1 - update to 1.6.8 -------------------------------------------------------------------------------- ================================================================================ php-pecl-xdebug-2.8.0-1.fc30 (FEDORA-2019-f9ba0309d0) PECL package for debugging PHP scripts -------------------------------------------------------------------------------- Update Information: 2019-10-31 �� **Xdebug 2.8.0** ** Fixed bugs** * Fixed bug #1664: Segfault with garbage collection and complex function arguments * Fixed bug #1699: Crash during debugging Phalcon project * Fixed bug #1705: Crash while debugging with ionCube being used * Fixed bug #1708: Crash on evaluating object with properties * Fixed bug #1709: Wrong data type breaks tests on Big Endian build * Fixed bug #1713: INIT_FCALL is not overloaded in code coverage ---- 2019-08-26 �� **Xdebug 2.8.0beta2** ** Fixed bugs** * Fixed bug #1540: Code coverage should not run when turned off in php.ini * Fixed bug #1573: Using an exception_handler creates an extra broken profiler file * Fixed bug #1589: function names used in auto_prepend_file missing from profile file * Fixed bug #1613: Wrong name displayed for Recoverable fatal error * Fixed bug #1652: Problems with detach in debugger init stage * Fixed bug #1676: Xdebug doesn't write trace footer for shutdown functions * Fixed bug #1689: Traces show return values and exit information for functions without entry information * Fixed bug #1691: Code Coverage misses fluent interface function call * Fixed bug #1698: Switch PHP 7.4 Windows builds back to VS17 * Fixed bug #1700: Xdebug abuses possibilty immutable class flags ---- 2019-07-25 �� **Xdebug 2.8.0beta1** ** Fixed bugs** * Fixed bug #1679: Code Coverage misses static property as function argument * Fixed bug #1682: Invalid NULL byte in debugger XML with anonymous classes * Fixed bug #1683: Xdebug does not compile due to changes to ASSIGN_ADD and friends operations in PHP 7.4alpha3 * Fixed bug #1687: Use appropriate process ID for logging and "right process" tracking * Fixed bug #1688: Improve performance by using getpid() only when step debugger is active ---- 2019-06-28 �� **Xdebug 2.8.0alpha1** ** Added features** * Implemented issue #1599: Add support for PHP 7.4 ** Improvements** * Implemented issue #1388: Support 'resolved' flag for breakpoints * Implemented issue #1664: Run breakpoint resolver when after a new breakpoint is added as well ** Fixed bugs** * Fixed bug #1660: Return breakpoints for methods don't break immediately ** Removed features** * Fixed bug #1666: Remove xdebug.extended_info setting -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 31 2019 Remi Collet <remi(a)remirepo.net> - 2.8.0-1 - update to 2.8.0 -------------------------------------------------------------------------------- ================================================================================ pipenv-2018.11.26-12.fc30 (FEDORA-2019-de521ba933) The higher level Python packaging tool -------------------------------------------------------------------------------- Update Information: Fix pipenv for Python 2.7 projects. -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 2018.11.26-12 - Keep pathlib2, scandir, click-completion and backports.* bundled (#1767003) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1767003 - pipenv does not work on Fedora 31 with Python 2.7 https://bugzilla.redhat.com/show_bug.cgi?id=1767003 -------------------------------------------------------------------------------- ================================================================================ python-catkin_lint-1.6.2-1.fc30 (FEDORA-2019-e6b2682983) Check catkin packages for common errors -------------------------------------------------------------------------------- Update Information: Update to 1.6.2 -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 31 2019 Scott K Logan <logans(a)cottsay.net> - 1.6.2-1 - Update to 1.6.2 (rhbz#1767353) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1767353 - python-catkin_lint-1.6.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1767353 -------------------------------------------------------------------------------- ================================================================================ python-colcon-cd-0.1.1-3.fc30 (FEDORA-2019-d25ca68cde) Extension for colcon to change the current working directory -------------------------------------------------------------------------------- Update Information: Initial release of `colcon-cd` -------------------------------------------------------------------------------- References: [ 1 ] Bug #1767216 - Review Request: python-colcon-cd - Extension for colcon to change the current working directory https://bugzilla.redhat.com/show_bug.cgi?id=1767216 -------------------------------------------------------------------------------- ================================================================================ python-colcon-cmake-0.2.16-1.fc30 (FEDORA-2019-3755a1118b) Extension for colcon to support CMake packages -------------------------------------------------------------------------------- Update Information: Update to latest `colcon-*` releases -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.2.16-1 - Update to 0.2.16 (rhbz#1762084) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1763461 - python-colcon-devtools-0.2.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763461 [ 2 ] Bug #1762532 - python-colcon-powershell-0.3.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762532 [ 3 ] Bug #1765938 - python-colcon-package-information-0.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1765938 [ 4 ] Bug #1762084 - python-colcon-cmake-0.2.16 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762084 [ 5 ] Bug #1762548 - python-colcon-core-0.4.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762548 [ 6 ] Bug #1763100 - python-colcon-common-extensions-0.2.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763100 -------------------------------------------------------------------------------- ================================================================================ python-colcon-common-extensions-0.2.1-1.fc30 (FEDORA-2019-3755a1118b) Meta package aggregating colcon-core and common extensions -------------------------------------------------------------------------------- Update Information: Update to latest `colcon-*` releases -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 1 2019 Scott K Logan <logans(a)cottsay.net> - 0.2.1-1 - Update to 0.2.1 (rhbz#1763100) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1763461 - python-colcon-devtools-0.2.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763461 [ 2 ] Bug #1762532 - python-colcon-powershell-0.3.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762532 [ 3 ] Bug #1765938 - python-colcon-package-information-0.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1765938 [ 4 ] Bug #1762084 - python-colcon-cmake-0.2.16 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762084 [ 5 ] Bug #1762548 - python-colcon-core-0.4.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762548 [ 6 ] Bug #1763100 - python-colcon-common-extensions-0.2.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763100 -------------------------------------------------------------------------------- ================================================================================ python-colcon-core-0.4.3-1.fc30 (FEDORA-2019-3755a1118b) Command line tool to build sets of software packages -------------------------------------------------------------------------------- Update Information: Update to latest `colcon-*` releases -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.4.3-1 - Update to 0.4.3 (rhbz#1762548) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1763461 - python-colcon-devtools-0.2.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763461 [ 2 ] Bug #1762532 - python-colcon-powershell-0.3.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762532 [ 3 ] Bug #1765938 - python-colcon-package-information-0.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1765938 [ 4 ] Bug #1762084 - python-colcon-cmake-0.2.16 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762084 [ 5 ] Bug #1762548 - python-colcon-core-0.4.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762548 [ 6 ] Bug #1763100 - python-colcon-common-extensions-0.2.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763100 -------------------------------------------------------------------------------- ================================================================================ python-colcon-devtools-0.2.2-1.fc30 (FEDORA-2019-3755a1118b) Extension for information about colcon extensibility -------------------------------------------------------------------------------- Update Information: Update to latest `colcon-*` releases -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.2.2-1 - Update to 0.2.2 (rhbz#1763461) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1763461 - python-colcon-devtools-0.2.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763461 [ 2 ] Bug #1762532 - python-colcon-powershell-0.3.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762532 [ 3 ] Bug #1765938 - python-colcon-package-information-0.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1765938 [ 4 ] Bug #1762084 - python-colcon-cmake-0.2.16 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762084 [ 5 ] Bug #1762548 - python-colcon-core-0.4.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762548 [ 6 ] Bug #1763100 - python-colcon-common-extensions-0.2.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763100 -------------------------------------------------------------------------------- ================================================================================ python-colcon-package-information-0.3.0-1.fc30 (FEDORA-2019-3755a1118b) Extension for colcon to output package information -------------------------------------------------------------------------------- Update Information: Update to latest `colcon-*` releases -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.3.0-1 - Update to 0.3.0 (rhbz#1765938) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1763461 - python-colcon-devtools-0.2.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763461 [ 2 ] Bug #1762532 - python-colcon-powershell-0.3.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762532 [ 3 ] Bug #1765938 - python-colcon-package-information-0.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1765938 [ 4 ] Bug #1762084 - python-colcon-cmake-0.2.16 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762084 [ 5 ] Bug #1762548 - python-colcon-core-0.4.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762548 [ 6 ] Bug #1763100 - python-colcon-common-extensions-0.2.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763100 -------------------------------------------------------------------------------- ================================================================================ python-colcon-powershell-0.3.6-1.fc30 (FEDORA-2019-3755a1118b) Extension for colcon to provide PowerShell scripts -------------------------------------------------------------------------------- Update Information: Update to latest `colcon-*` releases -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.3.6-1 - Update to 0.3.6 (rhbz#1762532) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1763461 - python-colcon-devtools-0.2.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763461 [ 2 ] Bug #1762532 - python-colcon-powershell-0.3.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762532 [ 3 ] Bug #1765938 - python-colcon-package-information-0.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1765938 [ 4 ] Bug #1762084 - python-colcon-cmake-0.2.16 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762084 [ 5 ] Bug #1762548 - python-colcon-core-0.4.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762548 [ 6 ] Bug #1763100 - python-colcon-common-extensions-0.2.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763100 -------------------------------------------------------------------------------- ================================================================================ python-pyrsistent-0.15.5-1.fc30 (FEDORA-2019-0195623281) Persistent/Functional/Immutable data structures -------------------------------------------------------------------------------- Update Information: Update to version 0.15.5. Release notes: https://github.com/tobgu/pyrsistent/blob/v0.15.5/CHANGES.txt -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 31 2019 Fabio Valentini <decathorpe(a)gmail.com> - 0.15.5-1 - Update to version 0.15.5. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1765962 - python-pyrsistent-0.15.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=1765962 -------------------------------------------------------------------------------- ================================================================================ python35-3.5.8-2.fc30 (FEDORA-2019-b06ec6159b) Version 3.5 of the Python programming language -------------------------------------------------------------------------------- Update Information: Python 3.5 has now entered "security fixes only" mode, and as such the only changes since Python 3.5.4 are security fixes. https://www.python.org/downloads/release/python-358/ https://docs.python.org/3.5/whatsnew/changelog.html#python-3-5-8 Security fix for CVE-2019-9740, CVE-2019-10160, CVE-2019-16935, CVE-2019-18348 , CVE-2019-16056. -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 3.5.8-2 - Use the correct upstream tarball - https://mail.python.org/archives/list/python-dev@python.org/message/OYNQS2B… * Tue Oct 29 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 3.5.8-1 - Update to 3.5.8 * Sat Oct 12 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 3.5.8~rc2-1 - Update to 3.5.8rc2 * Mon Sep 9 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 3.5.8~rc1-1 - Update to 3.5.8rc1 * Sat Aug 10 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 3.5.7-4 - Build against OpenSSL 1.1.x, not 1.0.x * Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.5.7-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Tue Apr 2 2019 Victor Stinner <vstinner(a)redhat.com> - 3.5.7-2 - Skip test_ssl and test_asyncio tests failing with OpenSSL 1.1.1 (rhbz#1685609) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1749839 - CVE-2019-16056 python: email.utils.parseaddr wrongly parses email addresses https://bugzilla.redhat.com/show_bug.cgi?id=1749839 [ 2 ] Bug #1727276 - CVE-2019-18348 python: CRLF injection via the host part of the url passed to urlopen() https://bugzilla.redhat.com/show_bug.cgi?id=1727276 [ 3 ] Bug #1763229 - CVE-2019-16935 python: XSS vulnerability in the documentation XML-RPC server in server_title field https://bugzilla.redhat.com/show_bug.cgi?id=1763229 [ 4 ] Bug #1718388 - CVE-2019-10160 python: regression of CVE-2019-9636 due to functional fix to allow port numbers in netloc https://bugzilla.redhat.com/show_bug.cgi?id=1718388 [ 5 ] Bug #1688169 - CVE-2019-9740 python: CRLF injection via the query part of the url passed to urlopen() https://bugzilla.redhat.com/show_bug.cgi?id=1688169 -------------------------------------------------------------------------------- ================================================================================ quisk-4.1.47-1.fc30 (FEDORA-2019-a43a4b155e) Software Defined Radio (SDR) software -------------------------------------------------------------------------------- Update Information: This is new version of quisk. ---- This is new version of quisk -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 31 2019 Jaroslav ��karvada <jskarvad(a)redhat.com> - 4.1.47-1 - New version Resolves: rhbz#1767463 * Tue Oct 22 2019 Jaroslav ��karvada <jskarvad(a)redhat.com> - 4.1.46-1 - New version Resolves: rhbz#1764201 * Mon Sep 30 2019 Jaroslav ��karvada <jskarvad(a)redhat.com> - 4.1.45-2 - Fixed CTCSS tone generation - Fixed traceback on systems with unicode pulseaudio device names -------------------------------------------------------------------------------- References: [ 1 ] Bug #1767463 - quisk-4.1.47 is available https://bugzilla.redhat.com/show_bug.cgi?id=1767463 [ 2 ] Bug #1764201 - quisk-4.1.46 is available https://bugzilla.redhat.com/show_bug.cgi?id=1764201 -------------------------------------------------------------------------------- ================================================================================ redhat-rpm-config-132-1.fc30 (FEDORA-2019-b1fbd50304) Red Hat specific rpm configuration files -------------------------------------------------------------------------------- Update Information: Simplify the API of %gpgverify. -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 1 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 132-1 - Fix the simple API of %gpgverify. * Thu Oct 31 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 131-1 - Simplify the API of %gpgverify. -------------------------------------------------------------------------------- ================================================================================ sane-backends-1.0.28-5.fc30 (FEDORA-2019-2daeb1ac37) Scanner access software -------------------------------------------------------------------------------- Update Information: 1761530 - apply upstream patch -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 31 2019 Zdenek Dohnal <zdohnal(a)redhat.com> - 1.0.28-5 - 1761530 - apply upstream patch -------------------------------------------------------------------------------- ================================================================================ switchboard-plug-bluetooth-2.3.0-1.fc30 (FEDORA-2019-93cd176ba4) Switchboard Bluetooth plug -------------------------------------------------------------------------------- Update Information: Update to version 2.3.0. Release notes: https://github.com/elementary/switchboard-plug-bluetooth/releases/tag/2.3.0 -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 1 2019 Fabio Valentini <decathorpe(a)gmail.com> - 2.3.0-1 - Update to version 2.3.0. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1767640 - switchboard-plug-bluetooth-2.3.0-debian is available https://bugzilla.redhat.com/show_bug.cgi?id=1767640 -------------------------------------------------------------------------------- ================================================================================ system-config-printer-1.5.12-3.fc30 (FEDORA-2019-08f824c7d5) A printer administration tool -------------------------------------------------------------------------------- Update Information: whole fix for #1765915 -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 31 2019 Zdenek Dohnal <zdohnal(a)redhat.com> - 1.5.12-3 - whole fix for #1765915 * Tue Oct 29 2019 Zdenek Dohnal <zdohnal(a)redhat.com> - 1.5.12-2 - 1765915 - abrt in udev-configure-printer -------------------------------------------------------------------------------- References: [ 1 ] Bug #1764663 - [abrt] system-config-printer-udev: for_each_matching_queue(): udev-configure-printer killed by SIGABRT https://bugzilla.redhat.com/show_bug.cgi?id=1764663 -------------------------------------------------------------------------------- ================================================================================ timescaledb-1.5.0-1.fc30 (FEDORA-2019-c1863b2dee) Open-source time-series database powered by PostgreSQL -------------------------------------------------------------------------------- Update Information: New upstream release 1.5.0 -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 1 2019 Patrik Novotn�� <panovotn(a)redhat.com> - 1.5.0-1 - New upstream release 1.5.0 -------------------------------------------------------------------------------- ================================================================================ unbound-1.9.4-1.fc30 (FEDORA-2019-e99b716a92) Validating, recursive, and caching DNS(SEC) resolver -------------------------------------------------------------------------------- Update Information: Fix build on rhel/centos systems -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 1 2019 Paul Wouters <pwouters(a)redhat.com> - 1.9.4-1 - Fix build on rhel/centos systems - Resolves: rhbz#1767955 (CVE-2019-16866) uninitialized memory accesses leads to crash via a crafted NOTIFY query -------------------------------------------------------------------------------- References: [ 1 ] Bug #1767955 - CVE-2019-16866 unbound: uninitialized memory accesses leads to crash via a crafted NOTIFY query https://bugzilla.redhat.com/show_bug.cgi?id=1767955 -------------------------------------------------------------------------------- ================================================================================ vacuum-im-1.3.0-0.16.20191014git9f3952b.fc30 (FEDORA-2019-670cfce88f) XMPP/Jabber client -------------------------------------------------------------------------------- Update Information: Update to 1.3.0-0.16.20191014git9f3952b -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 31 2019 Martin Gansser <martinkg(a)fedoraproject.org> - 1.3.0-0.16.20191014git9f3952b - Update to 1.3.0-0.16.20191014git9f3952b * Sat Jul 27 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.0-0.15.20181129git52c2a8c - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ wingpanel-2.2.6-1.fc30 (FEDORA-2019-7b27a5504a) Stylish top panel -------------------------------------------------------------------------------- Update Information: Update to version 2.2.6. Release notes: https://github.com/elementary/wingpanel/releases/tag/2.2.6 -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 1 2019 Fabio Valentini <decathorpe(a)gmail.com> - 2.2.6-1 - Update to version 2.2.6. -------------------------------------------------------------------------------- ================================================================================ wingpanel-indicator-datetime-2.2.0-1.fc30 (FEDORA-2019-8e00e608df) Datetime Indicator for wingpanel -------------------------------------------------------------------------------- Update Information: Update to version 2.2.0. Release notes: https://github.com/elementary/wingpanel-indicator-datetime/releases/tag/2.2… -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 1 2019 Fabio Valentini <decathorpe(a)gmail.com> - 2.2.0-1 - Update to version 2.2.0. -------------------------------------------------------------------------------- ================================================================================ xen-4.11.2-2.fc30 (FEDORA-2019-ec3dc10c7b) Xen is a virtual machine monitor -------------------------------------------------------------------------------- Update Information: VCPUOP_initialise DoS [XSA-296, CVE-2019-18420] missing descriptor table limit checking in x86 PV emulation [XSA-298, CVE-2019-18425] Issues with restartable PV type change operations [XSA-299, CVE-2019-18421] (#1767726) add-to-physmap can be abused to DoS Arm hosts [XSA-301, CVE-2019-18423] passed through PCI devices may corrupt host memory after deassignment [XSA-302, CVE-2019-18424] (#1767731) ARM: Interrupts are unconditionally unmasked in exception handlers [XSA-303, CVE-2019-18422] -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 1 2019 Michael Young <m.a.young(a)durham.ac.uk> - 4.11.2-2 - VCPUOP_initialise DoS [XSA-296, CVE-2019-18420] - missing descriptor table limit checking in x86 PV emulation [XSA-298, CVE-2019-18425] - Issues with restartable PV type change operations [XSA-299, CVE-2019-18421] (#1767726) - add-to-physmap can be abused to DoS Arm hosts [XSA-301, CVE-2019-18423] - passed through PCI devices may corrupt host memory after deassignment [XSA-302, CVE-2019-18424] (#1767731) - ARM: Interrupts are unconditionally unmasked in exception handlers [XSA-303, CVE-2019-18422] -------------------------------------------------------------------------------- References: [ 1 ] Bug #1765043 - CVE-2019-18421 xen: a malicious PV guest administrator may be able to escalate their privilege to that of the host https://bugzilla.redhat.com/show_bug.cgi?id=1765043 -------------------------------------------------------------------------------- ================================================================================ xpra-3.0.1-2.fc30 (FEDORA-2019-eb731a4f33) Remote display server for applications and desktops -------------------------------------------------------------------------------- Update Information: - Create /run/xpra (rhbz#1381005) ---- xpra-3.0.1 is available -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 1 2019 Antonio Trande <sagitter(a)fedoraproject.org> - 3.0.1-2 - Create /run/xpra (rhbz#1381005) * Mon Oct 28 2019 Antonio Trande <sagitter(a)fedoraproject.org> - 3.0.1-1 - Release 3.0.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1764347 - xpra-3.0.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1764347 [ 2 ] Bug #1381005 - E: dir-or-file-in-var-run /var/run/xpra https://bugzilla.redhat.com/show_bug.cgi?id=1381005 -------------------------------------------------------------------------------- ================================================================================ xtl-0.6.8-1.fc30 (FEDORA-2019-15d679767a) QuantStack tools library -------------------------------------------------------------------------------- Update Information: Update to latest version -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 31 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.6.8-1 - Update to latest version -------------------------------------------------------------------------------- References: [ 1 ] Bug #1767641 - xtl-0.6.8 is available https://bugzilla.redhat.com/show_bug.cgi?id=1767641 -------------------------------------------------------------------------------- ================================================================================ yp-tools-4.2.3-6.fc30 (FEDORA-2019-4820502b2f) NIS (or YP) client programs -------------------------------------------------------------------------------- Update Information: New patch was added due to possible SIGSEGV in yppasswd.c -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 29 2019 Filip Janu�� <fjanus(a)redhat.com> - 4.2.3-6 - Add yppasswd patch - Bug https://bugzilla.redhat.com/show_bug.cgi?id=1671452 - Pull request https://github.com/thkukuk/yp-tools/pull/7 * Sat Jul 27 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.2.3-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1671452 - [abrt] yp-tools: ypgetpw(): yppasswd killed by SIGSEGV https://bugzilla.redhat.com/show_bug.cgi?id=1671452 --------------------------------------------------------------------------------

1 0

Fedora 31 updates-testing report
by updates＠fedoraproject.org 01 Nov '19

01 Nov '19

The following Fedora 31 Security updates need testing: Age URL 9 https://bodhi.fedoraproject.org/updates/FEDORA-2019-0d3fcae639 python2-2.7.17-1.fc31 python2-docs-2.7.17-1.fc31 5 https://bodhi.fedoraproject.org/updates/FEDORA-2019-0c2f24ce3f t1utils-1.41-1.fc31 5 https://bodhi.fedoraproject.org/updates/FEDORA-2019-e87dd3ca51 java-latest-openjdk-13.0.1.9-2.rolling.fc31 The following Fedora 31 Critical Path updates have yet to be approved: Age URL 9 https://bodhi.fedoraproject.org/updates/FEDORA-2019-2b4d01ce93 glib2-2.62.2-1.fc31 9 https://bodhi.fedoraproject.org/updates/FEDORA-2019-0d3fcae639 python2-2.7.17-1.fc31 python2-docs-2.7.17-1.fc31 7 https://bodhi.fedoraproject.org/updates/FEDORA-2019-78cbff417a lua-lpeg-1.0.2-1.fc31 7 https://bodhi.fedoraproject.org/updates/FEDORA-2019-172e592ff7 linux-firmware-20191022-103.fc31 7 https://bodhi.fedoraproject.org/updates/FEDORA-2019-74bac5f621 pungi-4.1.40-1.fc31 7 https://bodhi.fedoraproject.org/updates/FEDORA-2019-6109842677 librsvg2-2.46.3-1.fc31 7 https://bodhi.fedoraproject.org/updates/FEDORA-2019-98f473a4ec libreport-2.11.2-1.fc31 6 https://bodhi.fedoraproject.org/updates/FEDORA-2019-d3a3762074 perl-Scalar-List-Utils-1.53-439.fc31 6 https://bodhi.fedoraproject.org/updates/FEDORA-2019-437fab2953 lvm2-2.03.06-1.fc31 6 https://bodhi.fedoraproject.org/updates/FEDORA-2019-ec4355a5ba python-blivet-3.1.6-1.fc31 6 https://bodhi.fedoraproject.org/updates/FEDORA-2019-28f59ca120 xkeyboard-config-2.28-1.fc31 5 https://bodhi.fedoraproject.org/updates/FEDORA-2019-225783c80e libedit-3.1-29.20191025cvs.fc31 3 https://bodhi.fedoraproject.org/updates/FEDORA-2019-a387ae43e2 polkit-0.116-4.fc31.1 2 https://bodhi.fedoraproject.org/updates/FEDORA-2019-94b17cab52 crypto-policies-20191002-1.gitc93dc99.fc31 The following builds have been pushed to Fedora 31 updates-testing Cadence-1.0.0-0.6.20191021git0642494.fc31 Carla-2.1-2.beta13322c9f.fc31 R-hms-0.5.2-1.fc31 apricots-0.2.6-27.fc31 bustle-0.7.5-1.fc31 cockpit-206-1.fc31 cockpit-podman-10-1.fc31 collectd-5.9.2-1.fc31 fedora-obsolete-packages-31-37 feh-3.1.3-3.fc31 fmf-0.10-1.fc31 gap-pkg-crypting-0.10-1.fc31 gerbera-1.3.3-1.fc31 ghc-gio-0.13.6.0-1.fc31 ghc-gtk-0.15.2-1.fc31 ghc-gtk3-0.15.1-1.fc31 ghc-gtksourceview2-0.13.3.1-11.fc31 ghc-pango-0.13.6.0-1.fc31 gnome-2048-3.34.3-1.fc31 gnome-epub-thumbnailer-1.6-1.fc31 golang-github-alecthomas-kong-0.2.1-1.fc31 hostapd-2.9-2.fc31 hylafax+-7.0.1-1.fc31 kernel-5.3.8-300.fc31 libfaketime-0.9.8-5.fc31 libssh2-1.9.0-3.fc31 nodejs-12.13.0-5.fc31 osbuild-5-1.fc31 pcre2-10.33-15.fc31 pdns-4.2.0-3.fc31 perl-SNMP-Info-3.70-1.fc31 python-bloom-0.9.0-1.fc31 python-catkin_pkg-0.4.14-1.fc31 python-colcon-cmake-0.2.16-1.fc31 python-colcon-core-0.4.3-1.fc31 python-colcon-devtools-0.2.2-1.fc31 python-colcon-package-information-0.3.0-1.fc31 python-colcon-powershell-0.3.6-1.fc31 python-osrf-pycommon-0.1.9-1.fc31 python-pyspf-2.0.13-1.fc31 python-rosdep-0.17.1-1.fc31 python-rosinstall_generator-0.1.18-1.fc31 python-tinydb-3.15.1-1.fc31 python-vcstool-0.2.4-1.fc31 raceintospace-1.1.0-2.fc31 rssh-2.3.4-15.fc31 rubygem-asciidoctor-pdf-1.5.0-0.12.beta.6.fc31 rubygem-prawn-icon-2.5.0-1.fc31 rubygem-rouge-3.12.0-1.fc31 samba-4.11.2-0.fc31 stalonetray-0.8.3-11.fc31 thunderbird-68.2.0-1.fc31 variety-0.8.0-0.6.gite81db6b.fc31 vim-8.1.2234-1.fc31 wireshark-3.0.5-1.fc31 wpa_supplicant-2.9-2.fc31 Details about builds: ================================================================================ Cadence-1.0.0-0.6.20191021git0642494.fc31 (FEDORA-2019-0257fc6e95) A set of tools useful for audio production -------------------------------------------------------------------------------- Update Information: Update to 1.0.0-0.6.20191021git0642494 -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Martin Gansser <martinkg(a)fedoraproject.org> - 1.0.0-0.6.20191021git0642494 - Update to 1.0.0-0.6.20191021git0642494 -------------------------------------------------------------------------------- ================================================================================ Carla-2.1-2.beta13322c9f.fc31 (FEDORA-2019-de060e16e6) Audio plugin host -------------------------------------------------------------------------------- Update Information: - Update to 2.1-2.beta1.git3322c9f - Dropped BR non-ntk-fluid - Dropped BR pkgconfig(ntk) -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Martin Gansser <martinkg(a)fedoraproject.org> - 2.1-2.beta1.git3322c9f - Update to 2.1-2.beta1.git3322c9f - Dropped BR non-ntk-fluid - Dropped BR pkgconfig(ntk) * Wed Oct 30 2019 Martin Gansser <martinkg(a)fedoraproject.org> - 2.1-1.beta1.git3322c9f - Update to 2.1-1.beta1.git3322c9f -------------------------------------------------------------------------------- ================================================================================ R-hms-0.5.2-1.fc31 (FEDORA-2019-fe420b9c12) Pretty Time of Day -------------------------------------------------------------------------------- Update Information: Update to latest version -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.5.2-1 - Update to latest version -------------------------------------------------------------------------------- References: [ 1 ] Bug #1766926 - R-hms-0.5.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1766926 -------------------------------------------------------------------------------- ================================================================================ apricots-0.2.6-27.fc31 (FEDORA-2019-6a1020511f) 2D air combat game -------------------------------------------------------------------------------- Update Information: Fix config file bug. -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Gwyn Ciesla <gwync(a)protonmail.com> - 0.2.6-27 - Fix AP_PATH. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1766804 - Apricots does not start as of Fedora 31 https://bugzilla.redhat.com/show_bug.cgi?id=1766804 -------------------------------------------------------------------------------- ================================================================================ bustle-0.7.5-1.fc31 (FEDORA-2019-11cd426c6a) Draw sequence diagrams of D-Bus traffic -------------------------------------------------------------------------------- Update Information: bustle and gtk2hs updates built with ghc-8.6.5 -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 8 2019 Jens Petersen <petersen(a)redhat.com> - 0.7.5-1 - update to 0.7.5 - exclude ppc64le because of #1737587 -------------------------------------------------------------------------------- ================================================================================ cockpit-206-1.fc31 (FEDORA-2019-0667dd1786) Web Console for Linux servers -------------------------------------------------------------------------------- Update Information: - Machines: Network interface deletion - login: Enable administration mode by default - Firewall: Prevent accidental deletion -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Sanne Raymaekers <sanne.raymaekers(a)gmail.com> - 206-1 - Machines: Network interface deletion - login: Enable administration mode by default - Firewall: Prevent accidental deletion -------------------------------------------------------------------------------- ================================================================================ cockpit-podman-10-1.fc31 (FEDORA-2019-f72585793e) Cockpit component for Podman containers -------------------------------------------------------------------------------- Update Information: - Support for user containers -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Sanne Raymaekers <sanne.raymaekers(a)gmail.com> - 10-1 - Support for user containers -------------------------------------------------------------------------------- ================================================================================ collectd-5.9.2-1.fc31 (FEDORA-2019-7ce5f383ab) Statistics collection daemon for filling RRD files -------------------------------------------------------------------------------- Update Information: This update provides collectd 5.9.2, which is a bug fix release fixing several bugs, including one that prevented configuration for many plugins from being read properly in 5.9.0 and could prevent the daemon from starting at all. -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 17 2019 Matthias Runge <mrunge(a)redhat.com> - 5.9.2-1 - rebase to 5.9.2 - move write_syslog to own subpackage * Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 5.9.0-4 - Rebuilt for Python 3.8 * Thu Aug 15 2019 Ruben Kerkhof <ruben(a)rubenkerkhof.com> - 5.9.0-3 - Remove lvm2 plugin, liblvm2 is gone from the distro -------------------------------------------------------------------------------- ================================================================================ fedora-obsolete-packages-31-37 (FEDORA-2019-9e971b3d14) A package to obsolete retired packages -------------------------------------------------------------------------------- Update Information: This updates the obsoletes of several FreeIPA-related Python 2 packages, as the versions of these packages in Fedora 29 had got higher than the versions obsoleted by this package, causing problems on upgrades from Fedora 29. ---- Obsolete system-config-users-docs and zanata-platform. -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Adam Williamson <awilliam(a)redhat.com> - 31-37 - Bump versions on Python 2 FreeIPA package obsoletes * Sat Oct 26 2019 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 31-36 - Obsolete zanata-platform * Wed Oct 23 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 31-35 - Obsolete system-config-users-docs (#1751252) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1751252 - system-config-users-docs should be retired and obsoleted https://bugzilla.redhat.com/show_bug.cgi?id=1751252 -------------------------------------------------------------------------------- ================================================================================ feh-3.1.3-3.fc31 (FEDORA-2019-1fd166beb2) Fast command line image viewer using Imlib2 -------------------------------------------------------------------------------- Update Information: Fix crash when modifying (rotating or blurring) large images. -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 29 2019 Ben Boeckel <mathstuf(a)gmail.com> - 3.1.3-3 - Add patch to fix rhbz#1440503 (crash when editing with large images) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1440503 - [abrt] feh: feh_edit_inplace(): feh killed by SIGSEGV https://bugzilla.redhat.com/show_bug.cgi?id=1440503 -------------------------------------------------------------------------------- ================================================================================ fmf-0.10-1.fc31 (FEDORA-2019-184d4ae9d3) Flexible Metadata Format -------------------------------------------------------------------------------- Update Information: * Mock is not needed for docs, fix missing new line * Provide a public static method Tree.init() * Support custom conjunction like 'or' in listed() * Update smoke testset to the latest L2 spec * Fix build conditional default for englocale * Use raw strings for regular expression patterns * Update the list of supported Python versions -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Petr ��pl��chal <psplicha(a)redhat.com> - 0.10-1 - Mock is not needed for docs, fix missing new line - Provide a public static method Tree.init() * Wed Oct 9 2019 Petr ��pl��chal <psplicha(a)redhat.com> - 0.9-1 - Support custom conjunction like 'or' in listed() - Update smoke testset to the latest L2 spec - Fix build conditional default for englocale - Use raw strings for regular expression patterns -------------------------------------------------------------------------------- ================================================================================ gap-pkg-crypting-0.10-1.fc31 (FEDORA-2019-6ee6bf7bbb) Hashes and Crypto in GAP -------------------------------------------------------------------------------- Update Information: This update fixes some broken documentation references, and updates the PackageInfo.g file with new maintainer information and license information. -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 29 2019 Jerry James <loganjerry(a)gmail.com> - 0.10-1 - New upstream version - Drop upstreamed -ref and -sha256 patches -------------------------------------------------------------------------------- References: [ 1 ] Bug #1766761 - gap-pkg-crypting-0.10 is available https://bugzilla.redhat.com/show_bug.cgi?id=1766761 -------------------------------------------------------------------------------- ================================================================================ gerbera-1.3.3-1.fc31 (FEDORA-2019-b759f9caa5) UPnP Media Server -------------------------------------------------------------------------------- Update Information: 1.3.3 -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Gwyn Ciesla <gwync(a)protonmail.com> - 1.3.3-1 - 1.3.3 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1766908 - gerbera-1.3.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1766908 -------------------------------------------------------------------------------- ================================================================================ ghc-gio-0.13.6.0-1.fc31 (FEDORA-2019-11cd426c6a) Binding to GIO -------------------------------------------------------------------------------- Update Information: bustle and gtk2hs updates built with ghc-8.6.5 -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ ghc-gtk-0.15.2-1.fc31 (FEDORA-2019-11cd426c6a) Binding to the Gtk+ graphical user interface library -------------------------------------------------------------------------------- Update Information: bustle and gtk2hs updates built with ghc-8.6.5 -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ ghc-gtk3-0.15.1-1.fc31 (FEDORA-2019-11cd426c6a) Binding to the Gtk+ 3 graphical user interface library -------------------------------------------------------------------------------- Update Information: bustle and gtk2hs updates built with ghc-8.6.5 -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 8 2019 Jens Petersen <petersen(a)redhat.com> - 0.15.1-1 - update to 0.15.1 - exclude ppc64le because of #1737587 - move demo/ to new doc subpkg -------------------------------------------------------------------------------- ================================================================================ ghc-gtksourceview2-0.13.3.1-11.fc31 (FEDORA-2019-11cd426c6a) Binding to the GtkSourceView library -------------------------------------------------------------------------------- Update Information: bustle and gtk2hs updates built with ghc-8.6.5 -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 8 2019 Jens Petersen <petersen(a)redhat.com> - 0.13.3.1-11 - add doc and prof subpackages (cabal-rpm-1.0.0) - exclude ppc64le because of #1737587 - move demo to doc subpkg -------------------------------------------------------------------------------- ================================================================================ ghc-pango-0.13.6.0-1.fc31 (FEDORA-2019-11cd426c6a) Binding to the Pango text rendering engine -------------------------------------------------------------------------------- Update Information: bustle and gtk2hs updates built with ghc-8.6.5 -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 8 2019 Jens Petersen <petersen(a)redhat.com> - 0.13.6.0-1 - update to 0.13.6.0 - exclude ppc64le because of #1737587 - move demo to doc subpkg -------------------------------------------------------------------------------- ================================================================================ gnome-2048-3.34.3-1.fc31 (FEDORA-2019-b0b79a19ac) A 2048 clone for GNOME -------------------------------------------------------------------------------- Update Information: Update to 3.34.3 -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Yanko Kaneti <yaneti(a)declera.com> - 3.34.3-1 - Update to 3.34.3 -------------------------------------------------------------------------------- ================================================================================ gnome-epub-thumbnailer-1.6-1.fc31 (FEDORA-2019-4ba6f133b4) Thumbnailers for EPub and MOBI books -------------------------------------------------------------------------------- Update Information: Update to 1.6 Adds support for SVG covers in ePub 3.0 files Adds support for Kindle Format 8 MOBI files -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Yanko Kaneti <yaneti(a)declera.com> - 1.6-1 - Update to 1.6 - Adds support for SVG covers in ePub 3.0 files - Adds support for Kindle Format 8 MOBI files -------------------------------------------------------------------------------- ================================================================================ golang-github-alecthomas-kong-0.2.1-1.fc31 (FEDORA-2019-e490ca2b65) Command-line parser for Go -------------------------------------------------------------------------------- Update Information: Update to latest version -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.2.1-1 - Update to latest version -------------------------------------------------------------------------------- References: [ 1 ] Bug #1766878 - golang-github-alecthomas-kong-0.2.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1766878 -------------------------------------------------------------------------------- ================================================================================ hostapd-2.9-2.fc31 (FEDORA-2019-740834c559) IEEE 802.11 AP, IEEE 802.1X/WPA/WPA2/EAP/RADIUS Authenticator -------------------------------------------------------------------------------- Update Information: Security fix CVE-2019-16275 (AP mode PMF disconnection protection bypass) -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 John W. Linville <linville(a)redhat.com> - 2.9-2 - Fix CVE-2019-16275 (AP mode PMF disconnection protection bypass) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1767023 - CVE-2019-16275 wpa_supplicant: AP mode PMF disconnection protection bypass https://bugzilla.redhat.com/show_bug.cgi?id=1767023 -------------------------------------------------------------------------------- ================================================================================ hylafax+-7.0.1-1.fc31 (FEDORA-2019-c701a9c6be) An enterprise-strength fax server -------------------------------------------------------------------------------- Update Information: update to 7.0.1 -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Lee Howard <faxguy(a)howardsilvan.com> - 7.0.1-1 - update to 7.0.1 -------------------------------------------------------------------------------- ================================================================================ kernel-5.3.8-300.fc31 (FEDORA-2019-228f3ee0b6) The Linux kernel -------------------------------------------------------------------------------- Update Information: The 5.3.8 update contains a number of important fixes across the tree -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 29 2019 Laura Abbott <labbott(a)redhat.com> - 5.3.8-300 - Linux v5.3.8 -------------------------------------------------------------------------------- ================================================================================ libfaketime-0.9.8-5.fc31 (FEDORA-2019-966c03ee44) Manipulate system time per process for testing purposes -------------------------------------------------------------------------------- Update Information: Resolves: rhbz#1766749 libfaketime rfe: please add Provides:faketime -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 29 2019 Paul Wouters <pwouters(a)redhat.com> - 0.9.8-5 - Resolves: rhbz#1766749 libfaketime rfe: please add Provides:faketime - Use license tag, remove duplicate README entry, update make test target -------------------------------------------------------------------------------- References: [ 1 ] Bug #1766749 - libfaketime rfe: please add Provides:faketime https://bugzilla.redhat.com/show_bug.cgi?id=1766749 -------------------------------------------------------------------------------- ================================================================================ libssh2-1.9.0-3.fc31 (FEDORA-2019-91529f19e4) A library implementing the SSH2 protocol -------------------------------------------------------------------------------- Update Information: - fix integer overflow in SSH_MSG_DISCONNECT logic (CVE-2019-17498) -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Kamil Dudka <kdudka(a)redhat.com> - 1.9.0-3 - fix integer overflow in SSH_MSG_DISCONNECT logic (CVE-2019-17498) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1766903 - CVE-2019-17498 libssh2: integer overflow in SSH_MSG_DISCONNECT logic in packet.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1766903 -------------------------------------------------------------------------------- ================================================================================ nodejs-12.13.0-5.fc31 (FEDORA-2019-8726f58026) JavaScript runtime -------------------------------------------------------------------------------- Update Information: Update to Node.js 12.13.0 Fixes `npm install -g` to install into `/usr/local` instead of `/usr` to play better with distro-installed NPMs. -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 29 2019 Stephen Gallagher <sgallagh(a)redhat.com> - 1:12.13.0-5 - Fix issue with NPM docs being replaced with a symlink * Mon Oct 28 2019 Stephen Gallagher <sgallagh(a)redhat.com> - 1:12.13.0-2 - Simplify npmrc default configuration * Mon Oct 28 2019 Stephen Gallagher <sgallagh(a)redhat.com> - 1:12.13.0-1 - Update to 12.13.0 (LTS) - https://github.com/nodejs/node/blob/v12.13.0/doc/changelogs/CHANGELOG_V12.md - NPM no longer clobbers RPM-installed Node.js modules - Drop no-longer needed patch to suppress `npm update -g npm` message -------------------------------------------------------------------------------- ================================================================================ osbuild-5-1.fc31 (FEDORA-2019-ec9ffdd4aa) A build system for OS images -------------------------------------------------------------------------------- Update Information: New upstream release: 5 -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Lars Karlitski <lars(a)karlitski.net> - 5-1 - new upstream release: 5 -------------------------------------------------------------------------------- ================================================================================ pcre2-10.33-15.fc31 (FEDORA-2019-321ad03041) Perl-compatible regular expression library -------------------------------------------------------------------------------- Update Information: This release fixes a use after free when JIT memory allocator fails. It also corrects thread-safeness in regexec() function. -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 29 2019 Petr Pisar <ppisar(a)redhat.com> - 10.33-15 - Fix a use after free when freeing JIT memory (upstream bug #2453) - Fix thread-safeness in regexec() (upstream bug #2447) -------------------------------------------------------------------------------- ================================================================================ pdns-4.2.0-3.fc31 (FEDORA-2019-556f4e83ea) A modern, advanced and high performance authoritative-only nameserver -------------------------------------------------------------------------------- Update Information: - Drop support for backend lua and mydns Note: https://blog.powerdns.com/2019/10/17/backend-removals-in-the-upcoming- authoritative-server-release/ -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Morten Stevens <mstevens(a)fedoraproject.org> - 4.2.0-3 - Drop support for backend lua and mydns * Fri Oct 18 2019 Richard Shaw <hobbes1069(a)gmail.com> - 4.2.0-2 - Rebuild for yaml-cpp 0.6.3. -------------------------------------------------------------------------------- ================================================================================ perl-SNMP-Info-3.70-1.fc31 (FEDORA-2019-b2c87b59f7) Object Oriented Perl5 Interface to Network devices and MIBs through SNMP -------------------------------------------------------------------------------- Update Information: Updated to the latest version -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Jitka Plesnikova <jplesnik(a)redhat.com> - 3.70-1 - 3.70 bump -------------------------------------------------------------------------------- References: [ 1 ] Bug #1761981 - perl-SNMP-Info-3.70 is available https://bugzilla.redhat.com/show_bug.cgi?id=1761981 -------------------------------------------------------------------------------- ================================================================================ python-bloom-0.9.0-1.fc31 (FEDORA-2019-d3587f2e82) Bloom is a release automation tool -------------------------------------------------------------------------------- Update Information: Update to 0.9.0 -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.9.0-1 - Update to 0.9.0 (rhbz#1763368) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1763368 - python-bloom-0.9.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763368 -------------------------------------------------------------------------------- ================================================================================ python-catkin_pkg-0.4.14-1.fc31 (FEDORA-2019-cb9cf573fe) Library for retrieving information about catkin packages -------------------------------------------------------------------------------- Update Information: Update to 0.4.14 -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.4.14-1 - Update to 0.4.14 (rhbz#1762232) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1762232 - python-catkin_pkg-0.4.14 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762232 -------------------------------------------------------------------------------- ================================================================================ python-colcon-cmake-0.2.16-1.fc31 (FEDORA-2019-88ab4fa753) Extension for colcon to support CMake packages -------------------------------------------------------------------------------- Update Information: Update to latest `colcon-*` releases -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.2.16-1 - Update to 0.2.16 (rhbz#1762084) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1763461 - python-colcon-devtools-0.2.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763461 [ 2 ] Bug #1762532 - python-colcon-powershell-0.3.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762532 [ 3 ] Bug #1765938 - python-colcon-package-information-0.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1765938 [ 4 ] Bug #1762084 - python-colcon-cmake-0.2.16 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762084 [ 5 ] Bug #1762548 - python-colcon-core-0.4.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762548 -------------------------------------------------------------------------------- ================================================================================ python-colcon-core-0.4.3-1.fc31 (FEDORA-2019-88ab4fa753) Command line tool to build sets of software packages -------------------------------------------------------------------------------- Update Information: Update to latest `colcon-*` releases -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.4.3-1 - Update to 0.4.3 (rhbz#1762548) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1763461 - python-colcon-devtools-0.2.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763461 [ 2 ] Bug #1762532 - python-colcon-powershell-0.3.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762532 [ 3 ] Bug #1765938 - python-colcon-package-information-0.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1765938 [ 4 ] Bug #1762084 - python-colcon-cmake-0.2.16 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762084 [ 5 ] Bug #1762548 - python-colcon-core-0.4.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762548 -------------------------------------------------------------------------------- ================================================================================ python-colcon-devtools-0.2.2-1.fc31 (FEDORA-2019-88ab4fa753) Extension for information about colcon extensibility -------------------------------------------------------------------------------- Update Information: Update to latest `colcon-*` releases -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.2.2-1 - Update to 0.2.2 (rhbz#1763461) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1763461 - python-colcon-devtools-0.2.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763461 [ 2 ] Bug #1762532 - python-colcon-powershell-0.3.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762532 [ 3 ] Bug #1765938 - python-colcon-package-information-0.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1765938 [ 4 ] Bug #1762084 - python-colcon-cmake-0.2.16 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762084 [ 5 ] Bug #1762548 - python-colcon-core-0.4.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762548 -------------------------------------------------------------------------------- ================================================================================ python-colcon-package-information-0.3.0-1.fc31 (FEDORA-2019-88ab4fa753) Extension for colcon to output package information -------------------------------------------------------------------------------- Update Information: Update to latest `colcon-*` releases -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.3.0-1 - Update to 0.3.0 (rhbz#1765938) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1763461 - python-colcon-devtools-0.2.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763461 [ 2 ] Bug #1762532 - python-colcon-powershell-0.3.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762532 [ 3 ] Bug #1765938 - python-colcon-package-information-0.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1765938 [ 4 ] Bug #1762084 - python-colcon-cmake-0.2.16 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762084 [ 5 ] Bug #1762548 - python-colcon-core-0.4.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762548 -------------------------------------------------------------------------------- ================================================================================ python-colcon-powershell-0.3.6-1.fc31 (FEDORA-2019-88ab4fa753) Extension for colcon to provide PowerShell scripts -------------------------------------------------------------------------------- Update Information: Update to latest `colcon-*` releases -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.3.6-1 - Update to 0.3.6 (rhbz#1762532) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1763461 - python-colcon-devtools-0.2.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763461 [ 2 ] Bug #1762532 - python-colcon-powershell-0.3.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762532 [ 3 ] Bug #1765938 - python-colcon-package-information-0.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1765938 [ 4 ] Bug #1762084 - python-colcon-cmake-0.2.16 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762084 [ 5 ] Bug #1762548 - python-colcon-core-0.4.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762548 -------------------------------------------------------------------------------- ================================================================================ python-osrf-pycommon-0.1.9-1.fc31 (FEDORA-2019-634ad41e60) Commonly needed Python modules used by software developed at OSRF -------------------------------------------------------------------------------- Update Information: Update to 0.1.9 -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.1.9-1 - Update to 0.1.9 (rhbz#1762208) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1762208 - python-osrf-pycommon-0.1.9 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762208 -------------------------------------------------------------------------------- ================================================================================ python-pyspf-2.0.13-1.fc31 (FEDORA-2019-8b92f9ead0) Python module and programs for SPF (Sender Policy Framework) -------------------------------------------------------------------------------- Update Information: Update to 2.0.13 -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Paul Wouters <pwouters(a)redhat.com> - 2.0.13-1 - Update to 2.0.13 * Thu Oct 3 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 2.0.12-13 - Rebuilt for Python 3.8.0rc1 (#1748018) * Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 2.0.12-12 - Rebuilt for Python 3.8 -------------------------------------------------------------------------------- ================================================================================ python-rosdep-0.17.1-1.fc31 (FEDORA-2019-25b8b72f5b) ROS System Dependency Installer -------------------------------------------------------------------------------- Update Information: Update to 0.17.1 -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.17.1-1 - Update to 0.17.1 (rhbz#1763367) - Add a weak pip dependency -------------------------------------------------------------------------------- References: [ 1 ] Bug #1763367 - python-rosdep-0.17.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763367 -------------------------------------------------------------------------------- ================================================================================ python-rosinstall_generator-0.1.18-1.fc31 (FEDORA-2019-a132048e9c) Generates rosinstall files -------------------------------------------------------------------------------- Update Information: Update to 0.1.18 -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.1.18-1 - Update to 0.1.18 (rhbz#1742963) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1742963 - python-rosinstall_generator-0.1.18 is available https://bugzilla.redhat.com/show_bug.cgi?id=1742963 -------------------------------------------------------------------------------- ================================================================================ python-tinydb-3.15.1-1.fc31 (FEDORA-2019-0096231e9b) TinyDB is a tiny, document oriented database -------------------------------------------------------------------------------- Update Information: Update to latest version 3.15.1 -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Sundeep Anand <suanand(a)redhat.com> - 3.15.1-1 - Update to latest version 3.15.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1765842 - python-tinydb-3.15.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1765842 -------------------------------------------------------------------------------- ================================================================================ python-vcstool-0.2.4-1.fc31 (FEDORA-2019-83e87d4e09) Tool to invoke vcs commands on multiple repositories -------------------------------------------------------------------------------- Update Information: Update to 0.2.4 -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.2.4-1 - Update to 0.2.4 (rhbz#1764143) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1764143 - python-vcstool-0.2.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1764143 -------------------------------------------------------------------------------- ================================================================================ raceintospace-1.1.0-2.fc31 (FEDORA-2019-c8226e4931) Race into Space game -------------------------------------------------------------------------------- Update Information: [Race into Space](http://raceintospace.org) game -------------------------------------------------------------------------------- References: [ 1 ] Bug #1759354 - Review Request: raceintospace - Race into Space game https://bugzilla.redhat.com/show_bug.cgi?id=1759354 -------------------------------------------------------------------------------- ================================================================================ rssh-2.3.4-15.fc31 (FEDORA-2019-e47add6b2b) Restricted shell for use with OpenSSH, allowing only scp and/or sftp -------------------------------------------------------------------------------- Update Information: Fix CVE-2019-3463, CVE-2019-3464 and CVE-2019-1000018. -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Xavier Bachelot <xavier(a)bachelot.org> - 2.3.4-15 - Clean up specfile. - Add patches for CVE-2019-3463, CVE-2019-3464 and CVE-2019-1000018. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1672381 - CVE-2019-3463 rssh: rsync bypass resulting in arbitrary code execution [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1672381 [ 2 ] Bug #1672383 - CVE-2019-3464 rssh: rsync bypass resulting in arbitrary code execution when built with popt [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1672383 [ 3 ] Bug #1672380 - CVE-2019-3463 rssh: rsync bypass resulting in arbitrary code execution [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1672380 [ 4 ] Bug #1671295 - CVE-2019-1000018 rssh: Possible allowscp bypass resulting in arbitrary code execution [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1671295 -------------------------------------------------------------------------------- ================================================================================ rubygem-asciidoctor-pdf-1.5.0-0.12.beta.6.fc31 (FEDORA-2019-7a9c851071) Converts AsciiDoc documents to PDF using Prawn -------------------------------------------------------------------------------- Update Information: Relax Concurrent dependency. -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Christopher Brown <chris.brown(a)redhat.com> - 1.5.0-0.12.beta.6 - Relax Concurrent dependency. * Tue Oct 29 2019 V��t Ondruch <vondruch(a)redhat.com> - 1.5.0-0.12.beta.6 - Disable network depending tests. - Relax Treetop dependency. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1752745 - rubygem-asciidoctor-pdf-1.5.0-0.10.alpha.18.fc31 is not installable https://bugzilla.redhat.com/show_bug.cgi?id=1752745 -------------------------------------------------------------------------------- ================================================================================ rubygem-prawn-icon-2.5.0-1.fc31 (FEDORA-2019-3e2d9ed943) Provides icon fonts for PrawnPDF -------------------------------------------------------------------------------- Update Information: Update to 2.5.0 -------------------------------------------------------------------------------- ChangeLog: * Sun Oct 20 2019 Christopher Brown <chris.brown(a)redhat.com> - 2.5.0-1 - Update to 2.5.0 -------------------------------------------------------------------------------- ================================================================================ rubygem-rouge-3.12.0-1.fc31 (FEDORA-2019-e87511539a) Pure-ruby colorizer based on pygments -------------------------------------------------------------------------------- Update Information: Update to version 3.12.0. Release notes: https://github.com/rouge- ruby/rouge/blob/v3.12.0/CHANGELOG.md -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Fabio Valentini <decathorpe(a)gmail.com> - 3.12.0-1 - Update to version 3.12.0. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1761949 - rubygem-rouge-3.12.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1761949 -------------------------------------------------------------------------------- ================================================================================ samba-4.11.2-0.fc31 (FEDORA-2019-534b7929b7) Server and Client software to interoperate with Windows machines -------------------------------------------------------------------------------- Update Information: Update to Samba 4.11.2 - Security fixes for CVE-2019-10218, CVE-2019-14833 ---- Since MIT Kerberos deprecated use of DES encryption type, restore Samba AD domain controller functionality by not using DES encryption keys. Only AES and RC4 keys would work. -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 29 2019 Guenther Deschner <gdeschner(a)redhat.com> - 4.11.2-0 - Update to Samba 4.11.2 - resolves: #1763137, #1766558 - Security fixes for CVE-2019-10218 - resolves: #1764126, #1766559 - Security fixes for CVE-2019-14833 * Sun Oct 27 2019 Alexander Bokovoy <abokovoy(a)redhat.com> - 4.11.1-1 - resolves: #1757071 - Deploy new samba DC fails * Fri Oct 18 2019 Guenther Deschner <gdeschner(a)redhat.com> - 4.11.1-0 - Update to Samba 4.11.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1763137 - CVE-2019-10218 samba: smb client vulnerable to filenames containing path separators https://bugzilla.redhat.com/show_bug.cgi?id=1763137 [ 2 ] Bug #1764126 - CVE-2019-14833 samba: AD DC check password script does not receive full password when non-ASCII characters are used https://bugzilla.redhat.com/show_bug.cgi?id=1764126 -------------------------------------------------------------------------------- ================================================================================ stalonetray-0.8.3-11.fc31 (FEDORA-2019-d925c01e01) A stand alone notification area -------------------------------------------------------------------------------- Update Information: Install a sample /etc/stalonetrayrc file. -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 29 2019 Ben Boeckel <mathstuf(a)gmail.com> - 0.8.3-11 - Fix install like to use %{_sysconfdir} * Tue Oct 29 2019 Ben Boeckel <mathstuf(a)gmail.com> - 0.8.3-10 - Install /etc/stalonetrayrc (rhbz#1511145) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1511145 - stalonetrayrc https://bugzilla.redhat.com/show_bug.cgi?id=1511145 -------------------------------------------------------------------------------- ================================================================================ thunderbird-68.2.0-1.fc31 (FEDORA-2019-9b4ebc2973) Mozilla Thunderbird mail/newsgroup client -------------------------------------------------------------------------------- Update Information: Update to latest upstream version. -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 29 2019 Jan Horak <jhorak(a)redhat.com> - 68.2.0-1 - Update to 68.2.0 * Wed Oct 23 2019 Jan Horak <jhorak(a)redhat.com> - 68.1.1-4 - Added symbolic icon * Thu Oct 3 2019 Jan Horak <jhorak(a)redhat.com> - 68.1.1-3 - Allow downgrades of the profile because after distro upgrade there is a chance that the the downgrade refusal dialog is shown. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1487664 - no symbolic icon https://bugzilla.redhat.com/show_bug.cgi?id=1487664 [ 2 ] Bug #1760491 - thunderbird-68.2.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1760491 -------------------------------------------------------------------------------- ================================================================================ variety-0.8.0-0.6.gite81db6b.fc31 (FEDORA-2019-4593320b92) Wallpaper changer that automatically downloads wallpapers -------------------------------------------------------------------------------- Update Information: Update to variety-0.8.0-0.6.gite81db6b -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Martin Gansser <martinkg(a)fedoraproject.org> - 0.8.0-0.6.gite81db6b - Update to 0.8.0-0.6.gite81db6b -------------------------------------------------------------------------------- ================================================================================ vim-8.1.2234-1.fc31 (FEDORA-2019-1e23456d54) The VIM editor -------------------------------------------------------------------------------- Update Information: patchlevel 2234 -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Zdenek Dohnal <zdohnal(a)redhat.com> - 2:8.1.2234-1 - patchlevel 2234 -------------------------------------------------------------------------------- ================================================================================ wireshark-3.0.5-1.fc31 (FEDORA-2019-0ee512cea1) Network traffic analyzer -------------------------------------------------------------------------------- Update Information: New version 3.0.5 -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Michal Ruprich <mruprich(a)redhat.com> - 1:3.0.5-1 - New version 3.0.5 -------------------------------------------------------------------------------- ================================================================================ wpa_supplicant-2.9-2.fc31 (FEDORA-2019-0e0b28001d) WPA/WPA2/IEEE 802.1X Supplicant -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2019-16275 -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Davide Caratti <dcaratti(a)redhat.com> - 1:2.9-2 - fix AP mode PMF disconnection protection bypass (CVE-2019-16275, rh #1767026) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1767023 - CVE-2019-16275 wpa_supplicant: AP mode PMF disconnection protection bypass https://bugzilla.redhat.com/show_bug.cgi?id=1767023 --------------------------------------------------------------------------------

1 0

Fedora 30 updates-testing report
by updates＠fedoraproject.org 01 Nov '19

01 Nov '19

The following Fedora 30 Security updates need testing: Age URL 6 https://bodhi.fedoraproject.org/updates/FEDORA-2019-74ba24605e python2-2.7.17-1.fc30 python2-docs-2.7.17-1.fc30 6 https://bodhi.fedoraproject.org/updates/FEDORA-2019-a2110fa094 varnish-6.3.1-1.fc30 6 https://bodhi.fedoraproject.org/updates/FEDORA-2019-7bb07c3b02 php-7.3.11-1.fc30 6 https://bodhi.fedoraproject.org/updates/FEDORA-2019-d3221d69e0 mingw-libidn2-2.2.0-1.fc30 6 https://bodhi.fedoraproject.org/updates/FEDORA-2019-73919e71f8 aspell-0.60.8-1.fc30 5 https://bodhi.fedoraproject.org/updates/FEDORA-2019-b2156dcba6 t1utils-1.41-1.fc30 5 https://bodhi.fedoraproject.org/updates/FEDORA-2019-119312dbfc java-latest-openjdk-13.0.1.9-2.rolling.fc30 The following Fedora 30 Critical Path updates have yet to be approved: Age URL 113 https://bodhi.fedoraproject.org/updates/FEDORA-2019-c05e4425d1 dash-0.5.10.2-3.fc30 6 https://bodhi.fedoraproject.org/updates/FEDORA-2019-bb9ea29ef2 linux-firmware-20191022-103.fc30 6 https://bodhi.fedoraproject.org/updates/FEDORA-2019-a07ea39a27 pungi-4.1.40-1.fc30 6 https://bodhi.fedoraproject.org/updates/FEDORA-2019-751c65ba68 librsvg2-2.46.3-1.fc30 6 https://bodhi.fedoraproject.org/updates/FEDORA-2019-40dba3d36e plymouth-0.9.4-11.20191022git32c097c.fc30 6 https://bodhi.fedoraproject.org/updates/FEDORA-2019-1b16b0e9ae sssd-2.2.2-3.fc30 6 https://bodhi.fedoraproject.org/updates/FEDORA-2019-25ba44eac2 fedora-release-30-6 6 https://bodhi.fedoraproject.org/updates/FEDORA-2019-74ba24605e python2-2.7.17-1.fc30 python2-docs-2.7.17-1.fc30 6 https://bodhi.fedoraproject.org/updates/FEDORA-2019-7b32145751 initial-setup-0.3.69-2.fc30 5 https://bodhi.fedoraproject.org/updates/FEDORA-2019-af5e9f72a8 libedit-3.1-29.20191025cvs.fc30 5 https://bodhi.fedoraproject.org/updates/FEDORA-2019-f83217e2bf selinux-policy-3.14.3-51.fc30 3 https://bodhi.fedoraproject.org/updates/FEDORA-2019-6ca9241892 glusterfs-6.6-1.fc30 3 https://bodhi.fedoraproject.org/updates/FEDORA-2019-e42a5ed21e polkit-0.116-2.fc30.2 The following builds have been pushed to Fedora 30 updates-testing Cadence-1.0.0-0.6.20191021git0642494.fc30 Carla-2.1-2.beta13322c9f.fc30 cockpit-206-1.fc30 cockpit-podman-10-1.fc30 fedora-obsolete-packages-30-46 feh-3.1.3-3.fc30 fmf-0.10-1.fc30 gap-pkg-crypting-0.10-1.fc30 gerbera-1.3.3-1.fc30 git-annex-7.20191024-1.fc30 gnutls-3.6.10-1.fc30 golang-1.12.12-1.fc30 golang-github-alecthomas-kong-0.2.1-1.fc30 hostapd-2.9-2.fc30 hylafax+-7.0.1-1.fc30 kernel-5.3.8-200.fc30 libfaketime-0.9.8-5.fc30 libssh2-1.9.0-3.fc30 osbuild-5-1.fc30 pcre2-10.33-15.fc30 python-bloom-0.9.0-1.fc30 python-catkin_pkg-0.4.14-1.fc30 python-colcon-cmake-0.2.16-1.fc30 python-colcon-core-0.4.3-1.fc30 python-colcon-devtools-0.2.2-1.fc30 python-colcon-package-information-0.3.0-1.fc30 python-colcon-powershell-0.3.6-1.fc30 python-osrf-pycommon-0.1.9-1.fc30 python-pyspf-2.0.13-1.fc30 python-rosdep-0.17.1-1.fc30 python-rosinstall_generator-0.1.18-1.fc30 python-tinydb-3.15.1-1.fc30 python-vcstool-0.2.4-1.fc30 raceintospace-1.1.0-2.fc30 rssh-2.3.4-15.fc30 ruby-2.6.5-124.fc30 rubygem-rouge-3.12.0-1.fc30 samba-4.10.10-0.fc30 stalonetray-0.8.3-11.fc30 thunderbird-68.2.0-1.fc30 variety-0.8.0-0.6.gite81db6b.fc30 wireshark-3.0.5-1.fc30 wpa_supplicant-2.8-3.fc30 xterm-349-2.fc30 Details about builds: ================================================================================ Cadence-1.0.0-0.6.20191021git0642494.fc30 (FEDORA-2019-95a73eb31e) A set of tools useful for audio production -------------------------------------------------------------------------------- Update Information: Update to 1.0.0-0.6.20191021git0642494 -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Martin Gansser <martinkg(a)fedoraproject.org> - 1.0.0-0.6.20191021git0642494 - Update to 1.0.0-0.6.20191021git0642494 * Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.0-0.5.20180827git4a5f5b4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ Carla-2.1-2.beta13322c9f.fc30 (FEDORA-2019-b0e40567de) Audio plugin host -------------------------------------------------------------------------------- Update Information: - Update to 2.1-2.beta1.git3322c9f - Dropped BR non-ntk-fluid - Dropped BR pkgconfig(ntk) -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Martin Gansser <martinkg(a)fedoraproject.org> - 2.1-2.beta1.git3322c9f - Update to 2.1-2.beta1.git3322c9f - Dropped BR non-ntk-fluid - Dropped BR pkgconfig(ntk) * Wed Oct 30 2019 Martin Gansser <martinkg(a)fedoraproject.org> - 2.1-1.beta1.git3322c9f - Update to 2.1-1.beta1.git3322c9f * Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.0-0.11.20190501git41f81a8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ cockpit-206-1.fc30 (FEDORA-2019-a460236814) Web Console for Linux servers -------------------------------------------------------------------------------- Update Information: - Machines: Network interface deletion - login: Enable administration mode by default - Firewall: Prevent accidental deletion -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Sanne Raymaekers <sanne.raymaekers(a)gmail.com> - 206-1 - Machines: Network interface deletion - login: Enable administration mode by default - Firewall: Prevent accidental deletion -------------------------------------------------------------------------------- ================================================================================ cockpit-podman-10-1.fc30 (FEDORA-2019-77aeecbdbf) Cockpit component for Podman containers -------------------------------------------------------------------------------- Update Information: - Support for user containers -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Sanne Raymaekers <sanne.raymaekers(a)gmail.com> - 10-1 - Support for user containers -------------------------------------------------------------------------------- ================================================================================ fedora-obsolete-packages-30-46 (FEDORA-2019-44e4f5d303) A package to obsolete retired packages -------------------------------------------------------------------------------- Update Information: This updates the obsoletes of several FreeIPA-related Python 2 packages, as the versions of these packages in Fedora 29 had got higher than the versions obsoleted by this package, causing problems on upgrades from Fedora 29. -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Adam Williamson <awilliam(a)redhat.com> - 30-46 - Bump versions on Python 2 FreeIPA package obsoletes -------------------------------------------------------------------------------- ================================================================================ feh-3.1.3-3.fc30 (FEDORA-2019-4d38548c1c) Fast command line image viewer using Imlib2 -------------------------------------------------------------------------------- Update Information: Fix crash when modifying (rotating or blurring) large images. -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 29 2019 Ben Boeckel <mathstuf(a)gmail.com> - 3.1.3-3 - Add patch to fix rhbz#1440503 (crash when editing with large images) * Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.1.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1440503 - [abrt] feh: feh_edit_inplace(): feh killed by SIGSEGV https://bugzilla.redhat.com/show_bug.cgi?id=1440503 -------------------------------------------------------------------------------- ================================================================================ fmf-0.10-1.fc30 (FEDORA-2019-cc075964c2) Flexible Metadata Format -------------------------------------------------------------------------------- Update Information: * Mock is not needed for docs, fix missing new line * Provide a public static method Tree.init() * Support custom conjunction like 'or' in listed() * Update smoke testset to the latest L2 spec * Fix build conditional default for englocale * Use raw strings for regular expression patterns * Update the list of supported Python versions -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Petr ��pl��chal <psplicha(a)redhat.com> - 0.10-1 - Mock is not needed for docs, fix missing new line - Provide a public static method Tree.init() * Wed Oct 9 2019 Petr ��pl��chal <psplicha(a)redhat.com> - 0.9-1 - Support custom conjunction like 'or' in listed() - Update smoke testset to the latest L2 spec - Fix build conditional default for englocale - Use raw strings for regular expression patterns -------------------------------------------------------------------------------- ================================================================================ gap-pkg-crypting-0.10-1.fc30 (FEDORA-2019-556be975b0) Hashes and Crypto in GAP -------------------------------------------------------------------------------- Update Information: This update fixes some broken documentation references, and updates the PackageInfo.g file with new maintainer information and license information. -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 29 2019 Jerry James <loganjerry(a)gmail.com> - 0.10-1 - New upstream version - Drop upstreamed -ref and -sha256 patches * Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1766761 - gap-pkg-crypting-0.10 is available https://bugzilla.redhat.com/show_bug.cgi?id=1766761 -------------------------------------------------------------------------------- ================================================================================ gerbera-1.3.3-1.fc30 (FEDORA-2019-d5a230c38e) UPnP Media Server -------------------------------------------------------------------------------- Update Information: 1.3.3 -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Gwyn Ciesla <gwync(a)protonmail.com> - 1.3.3-1 - 1.3.3 * Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1766908 - gerbera-1.3.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1766908 -------------------------------------------------------------------------------- ================================================================================ git-annex-7.20191024-1.fc30 (FEDORA-2019-bff66b9b68) Manage files with git, without checking their contents into git -------------------------------------------------------------------------------- Update Information: update to 7.20191024 -------------------------------------------------------------------------------- ChangeLog: * Sat Oct 26 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 7.20191024-1 - update to 7.20191024 * Fri Oct 18 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 7.20191017-1 - update to 7.20191017 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1765681 - git-annex-7.20191024 is available https://bugzilla.redhat.com/show_bug.cgi?id=1765681 -------------------------------------------------------------------------------- ================================================================================ gnutls-3.6.10-1.fc30 (FEDORA-2019-bd6f08f65c) A TLS protocol implementation -------------------------------------------------------------------------------- Update Information: - Update to upstream 3.6.10 release -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Nikos Mavrogiannopoulos <nmav(a)redhat.com> - 3.6.10-1 - Update to upstream 3.6.10 release * Mon Sep 16 2019 Nikos Mavrogiannopoulos <nmav(a)gnutls.org> - 3.6.9-1 - Update to upstream 3.6.9 release -------------------------------------------------------------------------------- ================================================================================ golang-1.12.12-1.fc30 (FEDORA-2019-6057a71211) The Go Programming Language -------------------------------------------------------------------------------- Update Information: * Rebase to 1.12.12 * Security fix for CVE-2019-17596 -------------------------------------------------------------------------------- ChangeLog: * Sun Oct 20 2019 Jakub ��ajka <jcajka(a)redhat.com> - 1.12.12-1 - Rebase to 1.12.12 - Fix for CVE-2019-17596 - Resolves: BZ#1763312 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1763310 - CVE-2019-17596 golang: invalid public key causes panic in dsa.Verify https://bugzilla.redhat.com/show_bug.cgi?id=1763310 -------------------------------------------------------------------------------- ================================================================================ golang-github-alecthomas-kong-0.2.1-1.fc30 (FEDORA-2019-ad93ff0f81) Kong is a command-line parser for Go -------------------------------------------------------------------------------- Update Information: Update to latest version -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.2.1-1 - Update to latest version -------------------------------------------------------------------------------- References: [ 1 ] Bug #1766878 - golang-github-alecthomas-kong-0.2.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1766878 -------------------------------------------------------------------------------- ================================================================================ hostapd-2.9-2.fc30 (FEDORA-2019-2265b5ae86) IEEE 802.11 AP, IEEE 802.1X/WPA/WPA2/EAP/RADIUS Authenticator -------------------------------------------------------------------------------- Update Information: Security fix CVE-2019-16275 (AP mode PMF disconnection protection bypass) -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 John W. Linville <linville(a)redhat.com> - 2.9-2 - Fix CVE-2019-16275 (AP mode PMF disconnection protection bypass) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1767023 - CVE-2019-16275 wpa_supplicant: AP mode PMF disconnection protection bypass https://bugzilla.redhat.com/show_bug.cgi?id=1767023 -------------------------------------------------------------------------------- ================================================================================ hylafax+-7.0.1-1.fc30 (FEDORA-2019-cd95cd26f1) An enterprise-strength fax server -------------------------------------------------------------------------------- Update Information: update to 7.0.1 -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Lee Howard <faxguy(a)howardsilvan.com> - 7.0.1-1 - update to 7.0.1 * Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 7.0.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ kernel-5.3.8-200.fc30 (FEDORA-2019-0e85bbd15b) The Linux kernel -------------------------------------------------------------------------------- Update Information: The 5.3.8 update contains a number of important fixes across the tree -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 29 2019 Laura Abbott <labbott(a)redhat.com> - 5.3.8-200 - Linux v5.3.8 - Fix CVE-2019-17666 (rhbz 1763692) -------------------------------------------------------------------------------- ================================================================================ libfaketime-0.9.8-5.fc30 (FEDORA-2019-7b7db60efd) Manipulate system time per process for testing purposes -------------------------------------------------------------------------------- Update Information: Resolves: rhbz#1766749 libfaketime rfe: please add Provides:faketime -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 29 2019 Paul Wouters <pwouters(a)redhat.com> - 0.9.8-5 - Resolves: rhbz#1766749 libfaketime rfe: please add Provides:faketime - Use license tag, remove duplicate README entry, update make test target -------------------------------------------------------------------------------- References: [ 1 ] Bug #1766749 - libfaketime rfe: please add Provides:faketime https://bugzilla.redhat.com/show_bug.cgi?id=1766749 -------------------------------------------------------------------------------- ================================================================================ libssh2-1.9.0-3.fc30 (FEDORA-2019-ec04c34768) A library implementing the SSH2 protocol -------------------------------------------------------------------------------- Update Information: - fix integer overflow in SSH_MSG_DISCONNECT logic (CVE-2019-17498) -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Kamil Dudka <kdudka(a)redhat.com> - 1.9.0-3 - fix integer overflow in SSH_MSG_DISCONNECT logic (CVE-2019-17498) * Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.9.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1766903 - CVE-2019-17498 libssh2: integer overflow in SSH_MSG_DISCONNECT logic in packet.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1766903 -------------------------------------------------------------------------------- ================================================================================ osbuild-5-1.fc30 (FEDORA-2019-fbc27ce485) A build system for OS images -------------------------------------------------------------------------------- Update Information: New upstream release: 5 -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Lars Karlitski <lars(a)karlitski.net> - 5-1 - new upstream release: 5 -------------------------------------------------------------------------------- ================================================================================ pcre2-10.33-15.fc30 (FEDORA-2019-79048fc832) Perl-compatible regular expression library -------------------------------------------------------------------------------- Update Information: This release fixes a use after free when JIT memory allocator fails. It also corrects thread-safeness in regexec() function. -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 29 2019 Petr Pisar <ppisar(a)redhat.com> - 10.33-15 - Fix a use after free when freeing JIT memory (upstream bug #2453) - Fix thread-safeness in regexec() (upstream bug #2447) -------------------------------------------------------------------------------- ================================================================================ python-bloom-0.9.0-1.fc30 (FEDORA-2019-c472e00ab6) Bloom is a release automation tool -------------------------------------------------------------------------------- Update Information: Update to 0.9.0 -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.9.0-1 - Update to 0.9.0 (rhbz#1763368) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1763368 - python-bloom-0.9.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763368 -------------------------------------------------------------------------------- ================================================================================ python-catkin_pkg-0.4.14-1.fc30 (FEDORA-2019-ac52d575f8) Library for retrieving information about catkin packages -------------------------------------------------------------------------------- Update Information: Update to 0.4.14 -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.4.14-1 - Update to 0.4.14 (rhbz#1762232) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1762232 - python-catkin_pkg-0.4.14 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762232 -------------------------------------------------------------------------------- ================================================================================ python-colcon-cmake-0.2.16-1.fc30 (FEDORA-2019-3755a1118b) Extension for colcon to support CMake packages -------------------------------------------------------------------------------- Update Information: Update to latest `colcon-*` releases -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.2.16-1 - Update to 0.2.16 (rhbz#1762084) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1763461 - python-colcon-devtools-0.2.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763461 [ 2 ] Bug #1762532 - python-colcon-powershell-0.3.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762532 [ 3 ] Bug #1765938 - python-colcon-package-information-0.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1765938 [ 4 ] Bug #1762084 - python-colcon-cmake-0.2.16 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762084 [ 5 ] Bug #1762548 - python-colcon-core-0.4.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762548 -------------------------------------------------------------------------------- ================================================================================ python-colcon-core-0.4.3-1.fc30 (FEDORA-2019-3755a1118b) Command line tool to build sets of software packages -------------------------------------------------------------------------------- Update Information: Update to latest `colcon-*` releases -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.4.3-1 - Update to 0.4.3 (rhbz#1762548) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1763461 - python-colcon-devtools-0.2.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763461 [ 2 ] Bug #1762532 - python-colcon-powershell-0.3.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762532 [ 3 ] Bug #1765938 - python-colcon-package-information-0.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1765938 [ 4 ] Bug #1762084 - python-colcon-cmake-0.2.16 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762084 [ 5 ] Bug #1762548 - python-colcon-core-0.4.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762548 -------------------------------------------------------------------------------- ================================================================================ python-colcon-devtools-0.2.2-1.fc30 (FEDORA-2019-3755a1118b) Extension for information about colcon extensibility -------------------------------------------------------------------------------- Update Information: Update to latest `colcon-*` releases -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.2.2-1 - Update to 0.2.2 (rhbz#1763461) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1763461 - python-colcon-devtools-0.2.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763461 [ 2 ] Bug #1762532 - python-colcon-powershell-0.3.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762532 [ 3 ] Bug #1765938 - python-colcon-package-information-0.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1765938 [ 4 ] Bug #1762084 - python-colcon-cmake-0.2.16 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762084 [ 5 ] Bug #1762548 - python-colcon-core-0.4.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762548 -------------------------------------------------------------------------------- ================================================================================ python-colcon-package-information-0.3.0-1.fc30 (FEDORA-2019-3755a1118b) Extension for colcon to output package information -------------------------------------------------------------------------------- Update Information: Update to latest `colcon-*` releases -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.3.0-1 - Update to 0.3.0 (rhbz#1765938) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1763461 - python-colcon-devtools-0.2.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763461 [ 2 ] Bug #1762532 - python-colcon-powershell-0.3.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762532 [ 3 ] Bug #1765938 - python-colcon-package-information-0.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1765938 [ 4 ] Bug #1762084 - python-colcon-cmake-0.2.16 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762084 [ 5 ] Bug #1762548 - python-colcon-core-0.4.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762548 -------------------------------------------------------------------------------- ================================================================================ python-colcon-powershell-0.3.6-1.fc30 (FEDORA-2019-3755a1118b) Extension for colcon to provide PowerShell scripts -------------------------------------------------------------------------------- Update Information: Update to latest `colcon-*` releases -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.3.6-1 - Update to 0.3.6 (rhbz#1762532) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1763461 - python-colcon-devtools-0.2.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763461 [ 2 ] Bug #1762532 - python-colcon-powershell-0.3.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762532 [ 3 ] Bug #1765938 - python-colcon-package-information-0.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1765938 [ 4 ] Bug #1762084 - python-colcon-cmake-0.2.16 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762084 [ 5 ] Bug #1762548 - python-colcon-core-0.4.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762548 -------------------------------------------------------------------------------- ================================================================================ python-osrf-pycommon-0.1.9-1.fc30 (FEDORA-2019-f0f12c5f7a) Commonly needed Python modules used by software developed at OSRF -------------------------------------------------------------------------------- Update Information: Update to 0.1.9 -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.1.9-1 - Update to 0.1.9 (rhbz#1762208) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1762208 - python-osrf-pycommon-0.1.9 is available https://bugzilla.redhat.com/show_bug.cgi?id=1762208 -------------------------------------------------------------------------------- ================================================================================ python-pyspf-2.0.13-1.fc30 (FEDORA-2019-92cb3c41f8) Python module and programs for SPF (Sender Policy Framework) -------------------------------------------------------------------------------- Update Information: Update to 2.0.13 -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Paul Wouters <pwouters(a)redhat.com> - 2.0.13-1 - Update to 2.0.13 * Thu Oct 3 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 2.0.12-13 - Rebuilt for Python 3.8.0rc1 (#1748018) * Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 2.0.12-12 - Rebuilt for Python 3.8 * Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.12-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ python-rosdep-0.17.1-1.fc30 (FEDORA-2019-029ba61b78) ROS System Dependency Installer -------------------------------------------------------------------------------- Update Information: Update to 0.17.1 -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.17.1-1 - Update to 0.17.1 (rhbz#1763367) - Add a weak pip dependency -------------------------------------------------------------------------------- References: [ 1 ] Bug #1763367 - python-rosdep-0.17.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1763367 -------------------------------------------------------------------------------- ================================================================================ python-rosinstall_generator-0.1.18-1.fc30 (FEDORA-2019-1543aadc43) Generates rosinstall files -------------------------------------------------------------------------------- Update Information: Update to 0.1.18 -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.1.18-1 - Update to 0.1.18 (rhbz#1742963) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1742963 - python-rosinstall_generator-0.1.18 is available https://bugzilla.redhat.com/show_bug.cgi?id=1742963 -------------------------------------------------------------------------------- ================================================================================ python-tinydb-3.15.1-1.fc30 (FEDORA-2019-1b4c90a97f) TinyDB is a tiny, document oriented database -------------------------------------------------------------------------------- Update Information: Update to latest version 3.15.1 -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Sundeep Anand <suanand(a)redhat.com> - 3.15.1-1 - Update to latest version 3.15.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1765842 - python-tinydb-3.15.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1765842 -------------------------------------------------------------------------------- ================================================================================ python-vcstool-0.2.4-1.fc30 (FEDORA-2019-2b0ff0af66) Tool to invoke vcs commands on multiple repositories -------------------------------------------------------------------------------- Update Information: Update to 0.2.4 -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.2.4-1 - Update to 0.2.4 (rhbz#1764143) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1764143 - python-vcstool-0.2.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1764143 -------------------------------------------------------------------------------- ================================================================================ raceintospace-1.1.0-2.fc30 (FEDORA-2019-d2a8e7bf87) Race into Space game -------------------------------------------------------------------------------- Update Information: [Race into Space](http://raceintospace.org) game -------------------------------------------------------------------------------- References: [ 1 ] Bug #1759354 - Review Request: raceintospace - Race into Space game https://bugzilla.redhat.com/show_bug.cgi?id=1759354 -------------------------------------------------------------------------------- ================================================================================ rssh-2.3.4-15.fc30 (FEDORA-2019-d1487c13ac) Restricted shell for use with OpenSSH, allowing only scp and/or sftp -------------------------------------------------------------------------------- Update Information: Fix CVE-2019-3463, CVE-2019-3464 and CVE-2019-1000018. -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Xavier Bachelot <xavier(a)bachelot.org> - 2.3.4-15 - Clean up specfile. - Add patches for CVE-2019-3463, CVE-2019-3464 and CVE-2019-1000018. * Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.3.4-14 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1672381 - CVE-2019-3463 rssh: rsync bypass resulting in arbitrary code execution [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1672381 [ 2 ] Bug #1672383 - CVE-2019-3464 rssh: rsync bypass resulting in arbitrary code execution when built with popt [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1672383 [ 3 ] Bug #1672380 - CVE-2019-3463 rssh: rsync bypass resulting in arbitrary code execution [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1672380 [ 4 ] Bug #1671295 - CVE-2019-1000018 rssh: Possible allowscp bypass resulting in arbitrary code execution [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1671295 -------------------------------------------------------------------------------- ================================================================================ ruby-2.6.5-124.fc30 (FEDORA-2019-16f931672e) An interpreter of object-oriented scripting language -------------------------------------------------------------------------------- Update Information: Update to Ruby 2.6.5. -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 9 2019 Pavel Valena <pvalena(a)redhat.com> - 2.6.5-124 - Update to Ruby 2.6.5. -------------------------------------------------------------------------------- ================================================================================ rubygem-rouge-3.12.0-1.fc30 (FEDORA-2019-d18e930936) Pure-ruby colorizer based on pygments -------------------------------------------------------------------------------- Update Information: Update to version 3.12.0. Release notes: https://github.com/rouge- ruby/rouge/blob/v3.12.0/CHANGELOG.md -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Fabio Valentini <decathorpe(a)gmail.com> - 3.12.0-1 - Update to version 3.12.0. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1761949 - rubygem-rouge-3.12.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1761949 -------------------------------------------------------------------------------- ================================================================================ samba-4.10.10-0.fc30 (FEDORA-2019-460ad648e7) Server and Client software to interoperate with Windows machines -------------------------------------------------------------------------------- Update Information: Update to Samba 4.10.10 - Security fixes for CVE-2019-10218, CVE-2019-14833, CVE-2019-14847 -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 29 2019 Guenther Deschner <gdeschner(a)redhat.com> - 4.10.10-0 - Update to Samba 4.10.10 - resolves: #1763137, #1766558 - Security fixes for CVE-2019-10218 - resolves: #1764126, #1766559 - Security fixes for CVE-2019-14833 - resolves: #1764142, #1766847 - Security fixes for CVE-2019-14847 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1763137 - CVE-2019-10218 samba: smb client vulnerable to filenames containing path separators https://bugzilla.redhat.com/show_bug.cgi?id=1763137 [ 2 ] Bug #1764126 - CVE-2019-14833 samba: AD DC check password script does not receive full password when non-ASCII characters are used https://bugzilla.redhat.com/show_bug.cgi?id=1764126 [ 3 ] Bug #1764142 - CVE-2019-14847 samba: samba AD DC LDAP denial of service via dirsync https://bugzilla.redhat.com/show_bug.cgi?id=1764142 -------------------------------------------------------------------------------- ================================================================================ stalonetray-0.8.3-11.fc30 (FEDORA-2019-dfee12d038) A stand alone notification area -------------------------------------------------------------------------------- Update Information: Install a sample /etc/stalonetrayrc file. -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 29 2019 Ben Boeckel <mathstuf(a)gmail.com> - 0.8.3-11 - Fix install like to use %{_sysconfdir} * Tue Oct 29 2019 Ben Boeckel <mathstuf(a)gmail.com> - 0.8.3-10 - Install /etc/stalonetrayrc (rhbz#1511145) * Sat Jul 27 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.8.3-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1511145 - stalonetrayrc https://bugzilla.redhat.com/show_bug.cgi?id=1511145 -------------------------------------------------------------------------------- ================================================================================ thunderbird-68.2.0-1.fc30 (FEDORA-2019-0bf2749723) Mozilla Thunderbird mail/newsgroup client -------------------------------------------------------------------------------- Update Information: Update to latest upstream version. -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 29 2019 Jan Horak <jhorak(a)redhat.com> - 68.2.0-1 - Update to 68.2.0 * Wed Oct 23 2019 Jan Horak <jhorak(a)redhat.com> - 68.1.1-4 - Added symbolic icon * Thu Oct 3 2019 Jan Horak <jhorak(a)redhat.com> - 68.1.1-3 - Allow downgrades of the profile because after distro upgrade there is a chance that the the downgrade refusal dialog is shown. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1487664 - no symbolic icon https://bugzilla.redhat.com/show_bug.cgi?id=1487664 [ 2 ] Bug #1760491 - thunderbird-68.2.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1760491 -------------------------------------------------------------------------------- ================================================================================ variety-0.8.0-0.6.gite81db6b.fc30 (FEDORA-2019-2d8f31b20d) Wallpaper changer that automatically downloads wallpapers -------------------------------------------------------------------------------- Update Information: Update to variety-0.8.0-0.6.gite81db6b -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Martin Gansser <martinkg(a)fedoraproject.org> - 0.8.0-0.6.gite81db6b - Update to 0.8.0-0.6.gite81db6b -------------------------------------------------------------------------------- ================================================================================ wireshark-3.0.5-1.fc30 (FEDORA-2019-6a99a2389e) Network traffic analyzer -------------------------------------------------------------------------------- Update Information: New version 3.0.5 -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Michal Ruprich <mruprich(a)redhat.com> - 1:3.0.5-1 - New version 3.0.5 -------------------------------------------------------------------------------- ================================================================================ wpa_supplicant-2.8-3.fc30 (FEDORA-2019-2bdcccee3c) WPA/WPA2/IEEE 802.1X Supplicant -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2019-16275 -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2019 Davide Caratti <dcaratti(a)redhat.com> - 1:2.8-3 - fix AP mode PMF disconnection protection bypass (CVE-2019-16275, rh #1767026) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1767023 - CVE-2019-16275 wpa_supplicant: AP mode PMF disconnection protection bypass https://bugzilla.redhat.com/show_bug.cgi?id=1767023 -------------------------------------------------------------------------------- ================================================================================ xterm-349-2.fc30 (FEDORA-2019-74d049b8e1) Terminal emulator for the X Window System -------------------------------------------------------------------------------- Update Information: update xterm to version 349 (#1766767) -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 29 2019 Tomas Korbar <tkorbar(a)redhat.com> - 349-2 - enable sixel graphics (#1763712) * Tue Sep 24 2019 Tomas Korbar <tkorbar(a)redhat.com> - 349-1 - update to 349 * Mon Aug 26 2019 Tomas Korbar <tkorbar(a)redhat.com> - 348-1 - update to 348 * Sat Jul 27 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 346-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Tue May 28 2019 Miroslav Lichvar <mlichvar(a)redhat.com> 346-1 - update to 346 * Tue May 14 2019 Miroslav Lichvar <mlichvar(a)redhat.com> 345-1 - update to 345 * Tue Feb 26 2019 Miroslav Lichvar <mlichvar(a)redhat.com> 344-1 - update to 344 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1766767 - xterm is critically outdated on Fedora 30 https://bugzilla.redhat.com/show_bug.cgi?id=1766767 --------------------------------------------------------------------------------

1 0

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

test November 2019