Fedora 29 Update: fedora-release-29-4
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-952244d7c3
2018-11-30 02:48:37.834072
--------------------------------------------------------------------------------
Name : fedora-release
Product : Fedora 29
Version : 29
Release : 4
URL : https://fedoraproject.org/
Summary : Fedora release files
Description :
Fedora release files such as various /etc/ files that define the release
and systemd preset files that determine which services are enabled by default.
--------------------------------------------------------------------------------
Update Information:
Add IoT config to fix policy around TPM2 requirements
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 27 2018 Peter Robinson <pbrobinson(a)fedoraproject.org> 29-4
- Add IoT config to fix policy around TPM2 requirements
* Thu Nov 1 2018 Jan Pazdziora <jpazdziora(a)redhat.com> - 29-3
- Produce distro-level SWID tag in /usr/lib/swidtag/fedoraproject.org.
- Add edition supplemental .swidtag files, and amend convert-to-edition.lua
to keep symlink to the correct one in sync with os-release.
* Sat Oct 27 2018 Stephen Gallagher <sgallagh(a)redhat.com> - 29-2
- Add ostree-finalize-staged.path preset
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-952244d7c3' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 4 months
Fedora 29 Update: libgphoto2-2.5.20-1.fc29
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-1b6d93d210
2018-11-30 02:48:37.834061
--------------------------------------------------------------------------------
Name : libgphoto2
Product : Fedora 29
Version : 2.5.20
Release : 1.fc29
URL : http://www.gphoto.org/
Summary : Library for accessing digital cameras
Description :
libgphoto2 is a library that can be used by applications to access
various digital cameras. libgphoto2 itself is not a GUI application,
opposed to gphoto. There are GUI frontends for the gphoto2 library,
however, such as gtkam for example.
--------------------------------------------------------------------------------
Update Information:
Update *gphoto2 to 2.5.20
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 27 2018 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 2.5.20-1
- Update to 2.5.20
* Sun Sep 9 2018 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 2.5.19-1
- Update to 2.5.19
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1653063 - libgphoto2 v2.5.18 breaks iOS device access
https://bugzilla.redhat.com/show_bug.cgi?id=1653063
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-1b6d93d210' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 4 months
Fedora 29 Update: gphoto2-2.5.20-1.fc29
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-1b6d93d210
2018-11-30 02:48:37.834061
--------------------------------------------------------------------------------
Name : gphoto2
Product : Fedora 29
Version : 2.5.20
Release : 1.fc29
URL : http://www.gphoto.org/
Summary : Software for accessing digital cameras
Description :
The gPhoto2 project is a universal, free application and library
framework that lets you download images from several different
digital camera models, including the newer models with USB
connections. Note that
a) for some older camera models you must use the old "gphoto" package.
b) for USB mass storage models you must use the driver in the kernel
This package contains the command-line utility gphoto2.
Other (GUI) frontends are available separately.
--------------------------------------------------------------------------------
Update Information:
Update *gphoto2 to 2.5.20
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 27 2018 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 2.5.20-1
- Update to 2.5.20
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1653063 - libgphoto2 v2.5.18 breaks iOS device access
https://bugzilla.redhat.com/show_bug.cgi?id=1653063
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-1b6d93d210' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 4 months
Fedora 29 Update: pygobject3-3.30.3-1.fc29
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-736dbadf6b
2018-11-30 02:48:37.834051
--------------------------------------------------------------------------------
Name : pygobject3
Product : Fedora 29
Version : 3.30.3
Release : 1.fc29
URL : https://wiki.gnome.org/Projects/PyGObject
Summary : Python bindings for GObject Introspection
Description :
The pygobject3 package provides a convenient wrapper for the GObject library
for use in Python programs.
--------------------------------------------------------------------------------
Update Information:
pygobject 3.30.3 release. * GValue: fall back to the custom C marshaller to
support fundamental types. This makes GValue work with GstFraction. * GValue:
Work around wrong annotations for GVariant * Fix GObject attribute access during
instance init which can lead to errors with __getattr__ implementations of
subclasses. This lead to criticals when instantiating Gio.DBusProxy.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 27 2018 Kalev Lember <klember(a)redhat.com> - 3.30.3-1
- Update to 3.30.3
* Mon Nov 12 2018 Kalev Lember <klember(a)redhat.com> - 3.30.2-1
- Update to 3.30.2
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-736dbadf6b' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 4 months
Fedora 29 Update: patch-2.7.6-8.fc29
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-54aecd03ee
2018-11-30 02:48:37.834039
--------------------------------------------------------------------------------
Name : patch
Product : Fedora 29
Version : 2.7.6
Release : 8.fc29
URL : http://www.gnu.org/software/patch/patch.html
Summary : Utility for modifying/upgrading files
Description :
The patch program applies diff files to originals. The diff command
is used to compare an original to a changed file. Diff lists the
changes made to the file. A person who has the original file can then
use the patch command with the diff file to add the changes to their
original file (patching the file).
Patch should be installed because it is a common way of upgrading
applications.
--------------------------------------------------------------------------------
Update Information:
- CVE-2018-17942, gnulib: heap-based buffer overflow - Added virtual provides
for bundled gnulib library
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 26 2018 Than Ngo <than(a)redhat.com> - 2.7.6-8
- Added virtual provides for bundled gnulib library
- Fixed CVE-2018-17942, gnulib: heap-based buffer overflow
* Thu Oct 11 2018 Than Ngo <than(a)redhat.com> - 2.7.6-7
- Fixed #1582675 - Patch can be crashed and coredumped with a trivial wrong command
* Wed Aug 15 2018 Than Ngo <than(a)redhat.com> - 2.7.6-6
- Fixed #1554752 - Double free of memory, CVE-2018-6952
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-54aecd03ee' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 4 months
Fedora 29 Update: python-productmd-1.18-1.fc29
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-3bf567db90
2018-11-30 02:48:37.833989
--------------------------------------------------------------------------------
Name : python-productmd
Product : Fedora 29
Version : 1.18
Release : 1.fc29
URL : https://github.com/release-engineering/productmd
Summary : Library providing parsers for metadata related to OS installation
Description :
Python library providing parsers for metadata related to composes
and installation media.
--------------------------------------------------------------------------------
Update Information:
- Add SecurityFix label - Fix `get_major_version` on inputs with more than two
components
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 23 2018 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 1.18-1
- Add SecurityFix label
- Fix get_major_version on inputs with more than two components
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-3bf567db90' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 4 months
Fedora 29 Update: prosody-0.11.0-1.fc29
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-fe93517450
2018-11-30 02:48:37.833979
--------------------------------------------------------------------------------
Name : prosody
Product : Fedora 29
Version : 0.11.0
Release : 1.fc29
URL : https://prosody.im/
Summary : Flexible communications server for Jabber/XMPP
Description :
Prosody is a flexible communications server for Jabber/XMPP written in Lua.
It aims to be easy to use, and light on resources. For developers it aims
to be easy to extend and give a flexible system on which to rapidly develop
added functionality, or prototype new protocols.
--------------------------------------------------------------------------------
Update Information:
Prosody 0.11.0 ============== See upstream's blog post at
https://blog.prosody.im/prosody-0-11-0-released/ for a full overview of the
release features. This release includes significant improvements to MUC and
Pubsub, adds support for vCard4, mobile battery optimisations and Lua 5.2.
Upgrade notes ------------- There are some changes that users running previous
versions of Prosody should be aware of: Modules added ------------- *
`mod_csi_simple` This is a renamed version of the `mod_csi_pump` community
module. If you are using `mod_csi_pump` or do not yet have a CSI module set up,
we encourage you to use this one. * `mod_muc_mam` This replaces the
community module `mod_mam_muc` (note the name change!). It provides support
for archiving and querying chatroom messages using XEP-0313. It should be added
to `modules_enabled` under your MUC component: ``` Component
"rooms.example.com" "muc" modules_enabled = { "muc_mam"; } ```
* `mod_vcard4`, `mod_vcard_legacy` Prosody now offers support for vCard4 in
`mod_vcard4`. Since most clients today do not yet support this format, if you
use this module you should also enable `mod_vcard_legacy`. These modules
are separate to the old `mod_vcard`, which still exists and works for services
that want to continue just supporting the older vcard-temp protocol. Modules
removed --------------- The following modules were deprecated in previous
releases and have been removed in 0.11: * `mod_storage_sql1` *
`mod_compression` * `mod_privacy` MySQL schema upgrade --------------------
Some limitations were found with the current MySQL schema that prevented it from
working properly with our new pubsub and PEP features. Prosody will refuse to
connect to the database until this is fixed, but this can be done easily with
the following command: ``` prosodyctl mod_storage_sql upgrade ``` Lua 5.2
------- The recommended Lua version for 0.11 is Lua 5.2, while Lua 5.1 is still
supported for the platforms that need it. However the 0.11.x series is the last
series that will still support Lua 5.1 (and by extension, LuaJIT).
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 19 2018 Robert Scheck <robert(a)fedoraproject.org> 0.11.0-1
- Upgrade to 0.11.0
* Sun Aug 19 2018 Robert Scheck <robert(a)fedoraproject.org> 0.10.2-3
- Don't attempt to reload during logrotate if prosody is stopped
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-fe93517450' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 4 months
Fedora 29 Update: libxc-4.2.3-1.fc29
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-30a6062ce1
2018-11-30 02:48:37.833969
--------------------------------------------------------------------------------
Name : libxc
Product : Fedora 29
Version : 4.2.3
Release : 1.fc29
URL : http://www.tddft.org/programs/octopus/wiki/index.php/Libxc
Summary : Library of exchange and correlation functionals for density-functional theory
Description :
libxc is a library of exchange and correlation functionals. Its purpose is to
be used in codes that implement density-functional theory. For the moment, the
library includes most of the local density approximations (LDAs), generalized
density approximation (GGAs), and meta-GGAs. The library provides values for
the energy density and its 1st, 2nd, and (for the LDAs) 3rd derivatives.
--------------------------------------------------------------------------------
Update Information:
Update to 4.2.3, no functional changes.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 21 2018 Susi Lehtola <jussilehtola(a)fedoraproject.org> - 4.2.3-1
- Remove python2 subpackage from rawhide.
- Update to 4.2.3.
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-30a6062ce1' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 4 months
Fedora 29 Update: libxmlb-0.1.5-1.fc29
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-6ece138384
2018-11-30 02:48:37.833945
--------------------------------------------------------------------------------
Name : libxmlb
Product : Fedora 29
Version : 0.1.5
Release : 1.fc29
URL : https://github.com/hughsie/libxmlb
Summary : Library for querying compressed XML metadata
Description :
XML is slow to parse and strings inside the document cannot be memory mapped as
they do not have a trailing NUL char. The libxmlb library takes XML source, and
converts it to a structured binary representation with a deduplicated string
table -- where the strings have the NULs included.
This allows an application to mmap the binary XML file, do an XPath query and
return some strings without actually parsing the entire document. This is all
done using (almost) zero allocations and no actual copying of the binary data.
--------------------------------------------------------------------------------
Update Information:
- New upstream release - Add xb_builder_node_export() for gnome-software -
Ignore calls to xb_silo_query_build_index() with no results - Lazy load the
stemmer when required
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-6ece138384' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 4 months
[SECURITY] Fedora 29 Update: python-notebook-5.7.2-1.fc29
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-b792d607fd
2018-11-30 02:48:37.833918
--------------------------------------------------------------------------------
Name : python-notebook
Product : Fedora 29
Version : 5.7.2
Release : 1.fc29
URL : http://jupyter.org
Summary : A web-based notebook environment for interactive computing
Description :
The Jupyter Notebook is a web application that allows you to create and
share documents that contain live code, equations, visualizations, and
explanatory text. The Notebook has support for multiple programming
languages, sharing, and interactive widgets.
--------------------------------------------------------------------------------
Update Information:
Update to 5.7.2, fix CVE-2018-19351, CVE-2018-19352
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 21 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 5.7.2-1
- Update to 5.7.2, fix CVE-2018-19351, CVE-2018-19352 (#1651976)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1651973 - CVE-2018-19351 python-notebook: XSS via an untrusted notebook
https://bugzilla.redhat.com/show_bug.cgi?id=1651973
[ 2 ] Bug #1651975 - CVE-2018-19352 python-notebook: XSS via an crafted directory
https://bugzilla.redhat.com/show_bug.cgi?id=1651975
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-b792d607fd' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 4 months