[SECURITY] Fedora 28 Update: python3-3.6.7-2.fc28
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-5ed8fb9efa
2018-11-29 02:25:58.945719
--------------------------------------------------------------------------------
Name : python3
Product : Fedora 28
Version : 3.6.7
Release : 2.fc28
URL : https://www.python.org/
Summary : Interpreter of the Python programming language
Description :
Python is an accessible, high-level, dynamically typed, interpreted programming
language, designed with an emphasis on code readability.
It includes an extensive standard library, and has a vast ecosystem of
third-party libraries.
The python3 package provides the "python3" executable: the reference
interpreter for the Python language, version 3.
The majority of its standard library is provided in the python3-libs package,
which should be installed automatically along with python3.
The remaining parts of the Python standard library are broken out into the
python3-tkinter and python3-test packages, which may need to be installed
separately.
Documentation for Python is provided in the python3-docs package.
Packages containing additional libraries for Python are generally named with
the "python3-" prefix.
--------------------------------------------------------------------------------
Update Information:
Update to 3.6.7 Security fix for CVE-2018-14647
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 23 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 3.6.7-2
- Make sure the entire test.support module is in python3-libs (#1651245)
* Mon Oct 22 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 3.6.7-1
- Update to 3.6.7
* Fri Aug 10 2018 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 3.6.6-3
- Fix wrong requirement on gdbm
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.6.6-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Tue Jul 10 2018 Charalampos Stratakis <cstratak(a)redhat.com> - 3.6.6-1
- Update to Python 3.6.6
* Tue Jul 10 2018 Tomas Orsava <torsava(a)redhat.com> - 3.6.5-2
- Fix %py_byte_compile macro: when invoked with a Python 2 binary it also
mistakenly ran py3_byte_compile
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1631822 - CVE-2018-14647 python: Missing salt initialization in _elementtree.c module
https://bugzilla.redhat.com/show_bug.cgi?id=1631822
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-5ed8fb9efa' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 6 months
Fedora 28 Update: pgadmin3-1.22.2-10.fc28
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-71018fe71a
2018-11-29 02:25:58.945708
--------------------------------------------------------------------------------
Name : pgadmin3
Product : Fedora 28
Version : 1.22.2
Release : 10.fc28
URL : http://www.pgadmin.org/
Summary : Graphical client for PostgreSQL
Description :
pgAdmin III is a powerful administration and development
platform for the PostgreSQL database, free for any use.
It is designed to answer the needs of all users,
from writing simple SQL queries to developing complex
databases. The graphical interface supports all PostgreSQL
features and makes administration easy.
pgAdmin III is designed to answer the needs of all users,
from writing simple SQL queries to developing complex databases.
The graphical interface supports all PostgreSQL features and
makes administration easy. The application also includes a syntax
highlighting SQL editor, a server-side code editor, an
SQL/batch/shell job scheduling agent, support for the Slony-I
replication engine and much more. No additional drivers are
required to communicate with the database server.
--------------------------------------------------------------------------------
Update Information:
Really include the experimental PG10 support promised last release. For f28 and
f29, compile with compat-wxGTK3-gtk2, which might fix some of the wx crashes
(but I don't know which ones as I haven't reproduced any of the reports).
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 8 2018 Scott Talbert <swt(a)techie.net> - 1.22.2-10
- Restore missing patch for PG10
- Build with wxWidgets 3.0 on F30+ only
- Build with wxWidgets 3.0 and gtk2 compatibility on F27-F29
* Wed Nov 7 2018 Scott Talbert <swt(a)techie.net> - 1.22.2-9
- Rebuild with wxWidgets 3.0
* Tue Nov 6 2018 Scott Talbert <swt(a)techie.net> - 1.22.2-8
- Adjust BRs to fix FTBFS
* Tue Nov 6 2018 Stuart Gathman <stuart(a)gathman.org> - 1.22.2-7
- Build against compat-openssl10 Sandro Mani <manisandro(a)gmail.com>
- Fix failure to use EVP_CIPHER_CTX_new()
- Fix broken pgadmin3-nullthis.patch
- Add patch for PG10 support
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.22.2-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.22.2-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Thu Aug 3 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.22.2-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Thu Jul 27 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.22.2-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Sat Feb 11 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.22.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
* Fri Nov 11 2016 Devrim G��nd��z <devrim(a)gunduz.org> 1.22.2-1
- Update to 1.22.2 -- the final release of pgadmin3
- Update patch3
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-71018fe71a' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 6 months
Fedora 28 Update: cjdns-20.2-5.fc28
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-b2c6011205
2018-11-29 02:25:58.945697
--------------------------------------------------------------------------------
Name : cjdns
Product : Fedora 28
Version : 20.2
Release : 5.fc28
URL : http://hyperboria.net/
Summary : The privacy-friendly network without borders
Description :
Cjdns implements an encrypted IPv6 network using public-key cryptography for
address allocation and a distributed hash table for routing. This provides
near-zero-configuration networking, and prevents many of the security and
scalability issues that plague existing networks.
--------------------------------------------------------------------------------
Update Information:
Fix nodejs deprecation warning on F29 for Buffer ctor. Put cjdnsadmin in python
site-packages for use by other python packages for cjdns.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 8 2018 Stuart Gathman <stuart(a)gathman.org> - 20.2-5
- Install cjdnsadmin python module in site-packages
- Work around missing python2-networkx Provides in python-networkx bz#1647987
- Fix deprecated Buffer ctor in nodejs tools except on el6
* Wed Jul 18 2018 Stuart Gathman <stuart(a)gathman.org> - 20.2-4
- cjdns-20.2 bundles libuv-0.11.19
- disable CPU specific optimization
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 20.2-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Thu May 31 2018 Stuart Gathman <stuart(a)gathman.org> - 20.2-2
- Add cnacl s390x support BZ#1584480
* Tue May 22 2018 Stuart Gathman <stuart(a)gathman.org> - 20.2-1
- New upstream release BZ#1464671
* Wed Mar 14 2018 Stuart Gathman <stuart(a)gathman.org> - 20.1-4
- Explicit python version in Requires
- Fix possible unterminated interface name in ifreq
* Tue Mar 13 2018 Iryna Shcherbina <ishcherb(a)redhat.com> - 20.1-3
- Update Python 2 dependency declarations to new packaging standards
(See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)
* Tue Mar 6 2018 Stuart Gathman <stuart(a)gathman.org> - 20.1-2
- selinux: Allow map access to cjdns_exec_t
- disable subnode by default
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-b2c6011205' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 6 months
Fedora 28 Update: mosquitto-1.5.4-1.fc28
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-f85d40acf2
2018-11-29 02:25:58.945685
--------------------------------------------------------------------------------
Name : mosquitto
Product : Fedora 28
Version : 1.5.4
Release : 1.fc28
URL : http://mosquitto.org/
Summary : An Open Source MQTT v3.1/v3.1.1 Broker
Description :
Mosquitto is an open source message broker that implements the MQ Telemetry
Transport protocol version 3.1 and 3.1.1 MQTT provides a lightweight method
of carrying out messaging using a publish/subscribe model. This makes it
suitable for "machine to machine" messaging such as with low power sensors
or mobile devices such as phones, embedded computers or micro-controllers
like the Arduino.
--------------------------------------------------------------------------------
Update Information:
Update to new upstream version 1.5.4
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 9 2018 Fabian Affolter <mail(a)fabian-affolter.ch> - 1.5.4-2
- Update to new upstream version 1.5.4
* Sun Oct 14 2018 Peter Robinson <pbrobinson(a)fedoraproject.org> 1.5.3-1
- 1.5.3 release
* Thu Sep 20 2018 Fabian Affolter <mail(a)fabian-affolter.ch> - 1.5.2-2
- Use WITH_BUNDLED_DEPS=no
* Thu Sep 20 2018 Fabian Affolter <mail(a)fabian-affolter.ch> - 1.5.2-1
- Update to new upstream version 1.5.2
* Mon Aug 20 2018 Peter Robinson <pbrobinson(a)fedoraproject.org> 1.5.1-1
- 1.5.1 release
* Fri Jul 20 2018 John W. Linville <linville(a)redhat.com> - 1.5-5
- Add previously unnecessary BuildRequires for gcc-c++
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Sat May 26 2018 Rich Mattes <richmattes(a)gmail.com> - 1.5-3
- Add network-online.target and documentation to unitfile
* Sat May 26 2018 Rich Mattes <richmattes(a)gmail.com> - 1.5-2
- Use upstream systemd service and enable systemd notification support
(rhbz#1410654)
* Sun May 20 2018 Fabian Affolter <mail(a)fabian-affolter.ch> - 1.5-2
- Update to new upstream version 1.5 (rhbz#1580115)
* Sat May 5 2018 Fabian Affolter <mail(a)fabian-affolter.ch> - 1.4.15-2
- Update systemd unit file (rhbz#1564733)
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-f85d40acf2' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 6 months
Fedora 28 Update: pdfposter-0.7.post1-1.fc28
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-01b7d856dc
2018-11-29 02:25:58.945674
--------------------------------------------------------------------------------
Name : pdfposter
Product : Fedora 28
Version : 0.7.post1
Release : 1.fc28
URL : https://pdfposter.readthedocs.io
Summary : Scale and tile PDF images/pages to print on multiple pages
Description :
Pdfposter can be used to create a large poster by building it from multple
pages and/or printing it on large media. It expects as input a PDF file,
normally printing on a single page. The output is again a PDF file, maybe
containing multiple pages together building the poster. The input page
will be scaled to obtain the desired size.
--------------------------------------------------------------------------------
Update Information:
Updated to new upstream version 0.7.post1 (rhbz#1645691)
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 3 2018 Fabian Affolter <mail(a)fabian-affolter.ch> - 0.7.post-1
- Updated to new upstream version 0.7.post1 (rhbz#1645691)
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.0-11
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Fri Apr 6 2018 Iryna Shcherbina <ishcherb(a)redhat.com> - 0.6.0-10
- Update Python 2 dependency declarations to new packaging standards
(See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1645691 - Update pdfposter to 0.7 as upstream has fixed some nasty bug
https://bugzilla.redhat.com/show_bug.cgi?id=1645691
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-01b7d856dc' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 6 months
Fedora 28 Update: pysnmp-4.4.6-1.fc28
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-cf211a0c39
2018-11-29 02:25:58.945662
--------------------------------------------------------------------------------
Name : pysnmp
Product : Fedora 28
Version : 4.4.6
Release : 1.fc28
URL : http://pysnmp.sourceforge.net/
Summary : An SNMP engine written in Python
Description :
This is a Python implementation of SNMP v.1/v.2c engine. It's
general functionality is to assemble/disassemble SNMP messages
from/into given SNMP Object IDs along with associated values.
PySNMP also provides a few transport methods specific to TCP/IP
networking.
--------------------------------------------------------------------------------
Update Information:
Updated to new upstream version 4.4.6
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 1 2018 Fabian Affolter <mail(a)fabian-affolter.ch> - 4.4.6-1
- Updated to new upstream version 4.4.6
* Mon Aug 6 2018 Fabian Affolter <mail(a)fabian-affolter.ch> - 4.4.5-1
- Updated to new upstream version 4.4.5
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.4.4-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 4.4.4-3
- Rebuilt for Python 3.7
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-cf211a0c39' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 6 months
Fedora 28 Update: python-astral-1.7.1-1.fc28
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-f4a856c06c
2018-11-29 02:25:58.945639
--------------------------------------------------------------------------------
Name : python-astral
Product : Fedora 28
Version : 1.7.1
Release : 1.fc28
URL : http://astral.readthedocs.io
Summary : Calculations for the position of the sun and moon
Description :
astral is a Python module which calculates including:
- Times for various positions of the sun: dawn, sunrise, solar noon,
sunset, dusk, solar elevation, solar azimuth and rahukaalam.
- The phase of the moon.
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release 1.7.1
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 1 2018 Fabian Affolter <mail(a)fabian-affolter.ch> - 1.7.1-1
- Update to latest upstream release 1.7.1
* Wed Oct 17 2018 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 1.6.1-4
- Subpackage python2-astral has been removed
See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6.1-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 1.6.1-2
- Rebuilt for Python 3.7
* Fri May 4 2018 Fabian Affolter <mail(a)fabian-affolter.ch> - 1.6.1-1
- Update to latest upstream release 1.6.1 (rhbz#1574748)
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-f4a856c06c' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 6 months
Fedora 28 Update: xfig-3.2.7a-1.fc28
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-009f178c43
2018-11-29 02:25:58.945625
--------------------------------------------------------------------------------
Name : xfig
Product : Fedora 28
Version : 3.2.7a
Release : 1.fc28
URL : https://en.wikipedia.org/wiki/Xfig
Summary : An X Window System tool for drawing basic vector graphics
Description :
Xfig is an X Window System tool for creating basic vector graphics,
including bezier curves, lines, rulers and more. The resulting
graphics can be saved, printed on PostScript printers or converted to
a variety of other formats (e.g., X11 bitmaps, Encapsulated
PostScript, LaTeX).
You should install xfig if you need a simple program to create vector
graphics.
--------------------------------------------------------------------------------
Update Information:
- New upstream release 3.2.7a - Add Requires: transfig to make sure esp export
works (rhbz#1642033) - Switch back to URW fonts so that Bookman, New Century
Schoolbook and Palatino work again. This uses the old version of the URW fonts
which are now packaged as urw-base35-fonts-legacy (rhbz#1523624, rhbz#1551219)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 29 2018 Hans de Goede <hdegoede(a)redhat.com> - 3.2.7a-1
- New upstream release 3.2.7a
- Add Requires: transfig to make sure esp export works (rhbz#1642033)
- Switch back to URW fonts so that Bookman, New Century Schoolbook and
Palatino work again. This uses the old version of the URW fonts which are
now packaged as urw-base35-fonts-legacy (rhbz#1523624, rhbz#1551219)
- Trim the changelog
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.2.6a-8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1523624 - xfig does not display X11 fonts -- fedora 27 / 32-bit / x11
https://bugzilla.redhat.com/show_bug.cgi?id=1523624
[ 2 ] Bug #1642033 - xfig missing dependency on transfig
https://bugzilla.redhat.com/show_bug.cgi?id=1642033
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-009f178c43' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 6 months
Fedora 28 Update: python-fiat-1.6.0-12.fc28
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-23de00d7f7
2018-11-29 02:25:58.945548
--------------------------------------------------------------------------------
Name : python-fiat
Product : Fedora 28
Version : 1.6.0
Release : 12.fc28
URL : http://www.fenicsproject.org
Summary : Generation of arbitrary order instances of the Lagrange elements
Description :
The FInite element Automatic Tabulator FIAT supports generation of
arbitrary order instances of the Lagrange elements on lines, triangles,
and tetrahedra.
It is also capable of generating arbitrary order instances of Jacobi-
type quadrature rules on the same element shapes. Upcoming versions
will also support Hermite and nonconforming elements as well as H(div)
and H(curl) elements such as Raviart-Thomas and Nedelec are supported
on triangles and tetrahedra.
--------------------------------------------------------------------------------
Update Information:
Fix missing Python 3 version of executables (rhbz#1436805)
--------------------------------------------------------------------------------
ChangeLog:
* Sun Sep 9 2018 Jan Beran <jberan(a)redhat.com> - 1.6.0-12
- Fix missing Python 3 version of executables (rhbz#1436805)
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6.0-11
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 1.6.0-10
- Rebuilt for Python 3.7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1436805 - python-fiat: python3-fiat is missing Python 3 version of executables
https://bugzilla.redhat.com/show_bug.cgi?id=1436805
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-23de00d7f7' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 6 months
[SECURITY] Fedora 28 Update: git-2.17.2-2.fc28
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-29afefd172
2018-11-28 02:44:22.549756
--------------------------------------------------------------------------------
Name : git
Product : Fedora 28
Version : 2.17.2
Release : 2.fc28
URL : https://git-scm.com/
Summary : Fast Version Control System
Description :
Git is a fast, scalable, distributed revision control system with an
unusually rich command set that provides both high-level operations
and full access to internals.
The git rpm installs common set of tools which are usually using with
small amount of dependencies. To install all git packages, including
tools for integrating with other SCMs, install the git-all meta-package.
--------------------------------------------------------------------------------
Update Information:
Upstream security update. Refer to upstream commit
[321fd82389](https://github.com/git/git/commit/321fd82389) for details on
CVE-2018-19486.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 26 2018 Todd Zullinger <tmz(a)pobox.com> - 2.17.2-2
- apply upstream run-command PATH fix (CVE-2018-19486)
* Fri Oct 5 2018 Todd Zullinger <tmz(a)pobox.com> - 2.17.2-1
- Update to 2.17.2 (CVE-2018-17456)
* Thu Jun 14 2018 Todd Zullinger <tmz(a)pobox.com> - 2.17.1-3
- Apply upstream zlib buffer handling patch (#1582555)
* Wed May 30 2018 Todd Zullinger <tmz(a)pobox.com>
- Disable jgit tests on s390x, they're unreliable
- Use %make_build and %make_install
- add -p: fix counting empty context lines in edited patches
* Tue May 29 2018 Todd Zullinger <tmz(a)pobox.com> - 2.17.1-2
- packfile: Correct zlib buffer handling (#1582555)
* Tue May 29 2018 Todd Zullinger <tmz(a)pobox.com> - 2.17.1-1
- Update to 2.17.1 (CVE-2018-11233, CVE-2018-11235)
* Thu May 24 2018 Todd Zullinger <tmz(a)pobox.com> - 2.17.0-4
- Fix segfault in rev-parse with invalid input (#1581678)
- Move TEST_SHELL_PATH setting to config.mak
* Mon Apr 16 2018 Todd Zullinger <tmz(a)pobox.com> - 2.17.0-3
- Move linkcheck macro to existing fedora/rhel > 7 block
- Re-enable t5000-tar-tree.sh test on f28
* Fri Apr 13 2018 Pavel Cahyna <pcahyna(a)redhat.com>
- Use BuildRequires: perl-interpreter per the packaging guidelines
- Update conditions for future RHEL
* Tue Apr 10 2018 Todd Zullinger <tmz(a)pobox.com> - 2.17.0-2
- Require perl-generators on EL > 7
* Mon Apr 9 2018 Todd Zullinger <tmz(a)pobox.com>
- daemon: use --log-destination=stderr with systemd
- daemon: fix condition for redirecting stderr
- git-svn: avoid uninitialized value warning
* Sun Apr 8 2018 Todd Zullinger <tmz(a)pobox.com>
- Clean up redundant and unneeded Requires
* Sat Apr 7 2018 Todd Zullinger <tmz(a)pobox.com>
- Remove Git::LoadCPAN to ensure we use only system perl modules
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1653143 - CVE-2018-19486 git: Improper handling of PATH allows for commands to executed from current directory
https://bugzilla.redhat.com/show_bug.cgi?id=1653143
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-29afefd172' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 6 months