[SECURITY] Fedora 29 Update: rpm-4.14.2.1-1.fc29
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-89a3999673
2018-10-30 17:13:37.322464
--------------------------------------------------------------------------------
Name : rpm
Product : Fedora 29
Version : 4.14.2.1
Release : 1.fc29
URL : http://www.rpm.org/
Summary : The RPM package management system
Description :
The RPM Package Manager (RPM) is a powerful command line driven
package management system capable of installing, uninstalling,
verifying, querying, and updating software packages. Each software
package consists of an archive of files along with information about
the package like its version, a description, etc.
--------------------------------------------------------------------------------
Update Information:
An unfortunate regression in rpm 4.14.2 causes --setperms to behave incorrectly
on symbolic links: file and directory permissions become world writable and
executable on symlink targets. A similar flaw exists in --setugids, but it is
less exploitable. If you have used --setperms (or --setugids,
or --restore) with rpm 4.14.2, you should ensure system integrity with rpm
--verify before proceeding to correct any mixed up permissions and ownerships to
avoid possibly giving suid capabilities to a modified binary. Further details
of the --setperms bug available upstream: http://rpm.org/wiki/Releases/4.14.2.1
**Note that this update can not automatically fix possible damage done by using
���setperms, ���setugids or ���restore with rpm 4.14.2, it merely fixes the
functionlity itself. Any damage needs to be investigated and fixed manually,
such as using ���verify and ���restore or reinstalling packages.**
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 22 2018 Panu Matilainen <pmatilai(a)redhat.com> - 4.14.2.1-1
- Update to rpm 4.14.2.1 (http://rpm.org/wiki/Releases/4.14.2.1)
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-89a3999673' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 6 months
Fedora 29 Update: pcb-rnd-2.0.1-1.fc29
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-49c32f3811
2018-10-30 17:13:37.322451
--------------------------------------------------------------------------------
Name : pcb-rnd
Product : Fedora 29
Version : 2.0.1
Release : 1.fc29
URL : http://repo.hu/projects/pcb-rnd/index.html
Summary : Modular Printed Circuit Board layout tool
Description :
pcb-rnd is a highly modular PCB (Printed Circuit Board) layout tool
with a rich set of plugins for communicating with various external
design tools and other EDA/CAD packages.
--------------------------------------------------------------------------------
Update Information:
First attempt at packaging pcb-rnd
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-49c32f3811' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 6 months
Fedora 29 Update: cairo-1.16.0-1.fc29
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-8838c72162
2018-10-30 17:13:37.322423
--------------------------------------------------------------------------------
Name : cairo
Product : Fedora 29
Version : 1.16.0
Release : 1.fc29
URL : http://cairographics.org
Summary : A 2D graphics library
Description :
Cairo is a 2D graphics library designed to provide high-quality display
and print output. Currently supported output targets include the X Window
System, in-memory image buffers, and image files (PDF, PostScript, and SVG).
Cairo is designed to produce consistent output on all output media while
taking advantage of display hardware acceleration when available.
--------------------------------------------------------------------------------
Update Information:
cairo 1.16.0 stable release with only minor changes compared to the 1.15.14
development snapshot that Fedora 29 shipped with. For details, see
https://www.cairographics.org/news/cairo-1.16.0/
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 22 2018 Kalev Lember <klember(a)redhat.com> - 1.16.0-1
- Update to 1.16.0
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-8838c72162' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 6 months
Fedora 29 Update: lollypop-0.9.607-1.fc29
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-87907eb75d
2018-10-30 17:13:37.322410
--------------------------------------------------------------------------------
Name : lollypop
Product : Fedora 29
Version : 0.9.607
Release : 1.fc29
URL : https://gitlab.gnome.org/World/lollypop
Summary : Music player for GNOME
Description :
Lollypop is a new GNOME music playing application.
--------------------------------------------------------------------------------
Update Information:
Update to 0.9.607 ---- Update to 0.9.605
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 22 2018 Martin Gansser <martinkg(a)fedoraproject.org> - 0.9.607-1
- Update to 0.9.607
* Fri Oct 19 2018 Martin Gansser <martinkg(a)fedoraproject.org> - 0.9.605-1
- Update to 0.9.605
* Mon Oct 8 2018 Martin Gansser <martinkg(a)fedoraproject.org> - 0.9.604-1
- Update to 0.9.604
* Sun Oct 7 2018 Martin Gansser <martinkg(a)fedoraproject.org> - 0.9.602-1
- Update to 0.9.602
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1641370 - [abrt] lollypop: _on_populated(): view.py:272:_on_populated:AttributeError: 'RadioWidget' object has no attribute 'is_populated'
https://bugzilla.redhat.com/show_bug.cgi?id=1641370
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-87907eb75d' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 6 months
Fedora 29 Update: webkit2gtk3-2.22.2-2.fc29
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-5114f491b2
2018-10-30 17:13:37.322396
--------------------------------------------------------------------------------
Name : webkit2gtk3
Product : Fedora 29
Version : 2.22.2
Release : 2.fc29
URL : http://www.webkitgtk.org/
Summary : GTK+ Web content engine library
Description :
WebKitGTK+ is the port of the portable web rendering engine WebKit to the
GTK+ platform.
This package contains WebKit2 based WebKitGTK+ for GTK+ 3.
--------------------------------------------------------------------------------
Update Information:
This update fixes a crash which occurs while printing the content of the Web
page.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 19 2018 Tomas Popela <tpopela(a)redhat.com> - 2.22.2-2
- Fix WebProcess crash while printing
- Resolves: rhbz#1639754
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1639754 - Tab crashes when trying to print page from lenovo shop
https://bugzilla.redhat.com/show_bug.cgi?id=1639754
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-5114f491b2' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 6 months
Fedora 29 Update: libqxt-qt5-0.7.0-0.14.20130718giteaf6872f6ad4.fc29
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-f18ad5b758
2018-10-30 17:13:37.322383
--------------------------------------------------------------------------------
Name : libqxt-qt5
Product : Fedora 29
Version : 0.7.0
Release : 0.14.20130718giteaf6872f6ad4.fc29
URL : https://bitbucket.org/libqxt/libqxt/wiki/Home
Summary : Extended version of the original Qt extension library
Description :
LibQxt, an extension library for Qt5, provides a suite of cross-platform
utility classes to add functionality not readily available in the Qt toolkit.
--------------------------------------------------------------------------------
Update Information:
Fix pkgconfig files install dependencies, avoid pulling Qt4 libraries
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 21 2018 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.7.0-0.14.20130718giteaf6872f6ad4
- Fix pkgconfig files install dependencies, avoid pulling Qt4 libraries
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-f18ad5b758' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 6 months
Fedora 29 Update: caddy-0.11.0-3.fc29
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-3f9079e7b8
2018-10-30 17:13:37.322369
--------------------------------------------------------------------------------
Name : caddy
Product : Fedora 29
Version : 0.11.0
Release : 3.fc29
URL : https://caddyserver.com
Summary : HTTP/2 web server with automatic HTTPS
Description :
Caddy is the HTTP/2 web server with automatic HTTPS. Official Caddy builds
with customized plugins can be downloaded from https://caddyserver.com. This
package is an unofficial build with the following plugins:
http.geoip
http.realip
tls.dns.azure
tls.dns.cloudflare
tls.dns.digitalocean
tls.dns.dyn
tls.dns.gandi
tls.dns.googlecloud
tls.dns.namecheap
tls.dns.powerdns
tls.dns.rackspace
tls.dns.rfc2136
tls.dns.route53
--------------------------------------------------------------------------------
Update Information:
- Enable httpd_can_network_connect selinux boolean to connect to ACME endpoint
rhbz#1641158 - Define UDP 80/443 as selinux http_port_t for QUIC rhbz#1608548 -
Define TCP 5033 as selinux http_port_t for HTTP challenge rhbz#1641160
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 19 2018 Carl George <carl(a)george.computer> - 0.11.0-3
- Enable httpd_can_network_connect selinux boolean to connect to ACME endpoint rhbz#1641158
- Define UDP 80/443 as selinux http_port_t for QUIC rhbz#1608548
- Define TCP 5033 as selinux http_port_t for HTTP challenge rhbz#1641160
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1641160 - caddy: alternate HTTP port
https://bugzilla.redhat.com/show_bug.cgi?id=1641160
[ 2 ] Bug #1641158 - caddy: enable httpd_can_network_connect
https://bugzilla.redhat.com/show_bug.cgi?id=1641158
[ 3 ] Bug #1608548 - caddy: selinux blocking QUIC
https://bugzilla.redhat.com/show_bug.cgi?id=1608548
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-3f9079e7b8' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 6 months
Fedora 29 Update: julia-1.0.1-4.fc29
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-241ca4fdb9
2018-10-30 17:13:37.322356
--------------------------------------------------------------------------------
Name : julia
Product : Fedora 29
Version : 1.0.1
Release : 4.fc29
URL : http://julialang.org/
Summary : High-level, high-performance dynamic language for technical computing
Description :
Julia is a high-level, high-performance dynamic programming language
for technical computing, with syntax that is familiar to users of
other technical computing environments. It provides a sophisticated
compiler, distributed parallel execution, numerical accuracy, and an
extensive mathematical function library. The library, largely written
in Julia itself, also integrates mature, best-of-breed C and Fortran
libraries for linear algebra, random number generation, signal processing,
and string processing.
This package only contains the essential parts of the Julia environment:
the julia executable and the standard library.
--------------------------------------------------------------------------------
Update Information:
Use ILP64 BLAS and bundle SuiteSparse until system packages support it.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 20 2018 Milan Bouchet-Valat <nalimilan(a)club.fr> - 1.0.1-4
- Use ILP64 BLAS and bundle SuiteSparse until system packages support it.
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-241ca4fdb9' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 6 months
Fedora 29 Update: python2-astropy-2.0.9-1.fc29
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-868abc3566
2018-10-30 17:13:37.322342
--------------------------------------------------------------------------------
Name : python2-astropy
Product : Fedora 29
Version : 2.0.9
Release : 1.fc29
URL : http://astropy.org
Summary : A Community Python Library for Astronomy
Description :
The Astropy project is a common effort to develop a single core package
for Astronomy. Major packages such as PyFITS, PyWCS, vo, and asciitable
already merged in, and many more components being worked on. In
particular, we are developing imaging, photometric, and spectroscopic
functionality, as well as frameworks for cosmology, unit handling, and
coordinate transformations.
--------------------------------------------------------------------------------
Update Information:
Bugfix release 2.0.9, check
https://github.com/astropy/astropy/blob/v2.0.x/CHANGES.rst#209-2018-10-14
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 21 2018 Christian Dersch <lupinix(a)mailbox.org> - 2.0.9-1
- new version
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-868abc3566' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 6 months
Fedora 29 Update: python-astropy-3.0.5-1.fc29
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-b75c89488c
2018-10-30 17:13:37.322329
--------------------------------------------------------------------------------
Name : python-astropy
Product : Fedora 29
Version : 3.0.5
Release : 1.fc29
URL : http://astropy.org
Summary : A Community Python Library for Astronomy
Description :
The Astropy project is a common effort to develop a single core package
for Astronomy. Major packages such as PyFITS, PyWCS, vo, and asciitable
already merged in, and many more components being worked on. In
particular, we are developing imaging, photometric, and spectroscopic
functionality, as well as frameworks for cosmology, unit handling, and
coordinate transformations.
--------------------------------------------------------------------------------
Update Information:
Bugfix release 3.0.5, check
https://github.com/astropy/astropy/blob/v3.0.x/CHANGES.rst#305-2018-10-14
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 21 2018 Christian Dersch <lupinix(a)mailbox.org> - 3.0.5-1
- new version
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-b75c89488c' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 6 months