--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-41093fcfb6
2018-08-04 21:45:12.206400
--------------------------------------------------------------------------------
Name : libxcrypt
Product : Fedora 28
Version : 4.1.1
Release : 1.fc28
URL : https://github.com/besser82/libxcrypt
Summary : Extended crypt library for DES, MD5, Blowfish and others
Description :
libxcrypt is a modern library for one-way hashing of passwords. It
supports DES, MD5, SHA-2-256, SHA-2-512, and bcrypt-based password
hashes, and provides the traditional Unix 'crypt' and 'crypt_r'
interfaces, as well as a set of extended interfaces pioneered by
Openwall Linux, 'crypt_rn', 'crypt_ra', 'crypt_gensalt',
'crypt_gensalt_rn', and 'crypt_gensalt_ra'.
libxcrypt is intended to be used by login(1), passwd(1), and other
similar programs; that is, to hash a small number of passwords during
an interactive authentication dialogue with a human. It is not
suitable for use in bulk password-cracking applications, or in any
other situation where speed is more important than careful handling of
sensitive data. However, it *is* intended to be fast and lightweight
enough for use in servers that must field thousands of login attempts
per minute.
On Linux-based systems, by default libxcrypt will be binary backward
compatible with the libcrypt.so.1 shipped as part of the GNU C Library.
This means that all existing binary executables linked against glibc's
libcrypt should work unmodified with this library's libcrypt.so.1. We
have taken pains to provide exactly the same "symbol versions" as were
used by glibc on various CPU architectures, and to account for the
variety of ways in which the Openwall extensions were patched into
glibc's libcrypt by some Linux distributions. (For instance,
compatibility symlinks for SuSE's "libowcrypt" are provided.)
However, the converse is not true: programs linked against libxcrypt
will not work with glibc's libcrypt. Also, programs that use certain
legacy APIs supplied by glibc's libcrypt ('encrypt', 'encrypt_r',
'setkey', 'setkey_r', and 'fcrypt') cannot be compiled against libxcrypt.
--------------------------------------------------------------------------------
Update Information:
#Version 4.1.1 * Predictable behavior when arguments to crypt() are NULL or
invalid. * Hash formats $5, $6, and $md5 once again allow an explicit rounds
parameter specifying the default number of rounds. * The library no longer uses
swapcontext(), for ease of debugging and better compatibility with hardening
mechanisms like Intel CET. * crypt_gensalt_ra no longer leaks memory on failure.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 1 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.1.1-1
- New upstream release
* Fri Jul 13 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.1.0-1
- New upstream release
* Fri Jul 13 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.0.1-6
- Make testsuite fail on error again
- Update patch0 with more upstream fixes
* Fri Jul 13 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.0.1-5
- Add patch to update to recent development branch
- Re-enable SUNMD5 support as it is BSD licensed now
- Build compatibility symbols for glibc only
- Skip failing testsuite once
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.0.1-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Fri Jun 29 2018 Florian Weimer <fweimer(a)redhat.com> - 4.0.1-3
- Remove CDDL from license list (#1592445)
* Fri Jun 29 2018 Florian Weimer <fweimer(a)redhat.com> - 4.0.1-2
- Remove SUNMD5 support (#1592445)
* Wed May 16 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.0.1-1
- New upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1608285 - libxcrypt: Remove use of <ucontext.h>
https://bugzilla.redhat.com/show_bug.cgi?id=1608285
[ 2 ] Bug #1608283 - libxcrypt: Fix memory leak in crypt_gensalt_ra
https://bugzilla.redhat.com/show_bug.cgi?id=1608283
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-41093fcfb6' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-816b63ad38
2018-08-04 21:45:12.206387
--------------------------------------------------------------------------------
Name : libao
Product : Fedora 28
Version : 1.2.0
Release : 13.fc28
URL : http://xiph.org/ao/
Summary : Cross Platform Audio Output Library
Description :
Libao is a cross-platform audio library that allows programs to output audio
using a simple API on a wide variety of platforms.
--------------------------------------------------------------------------------
Update Information:
Backport fix for CVE 2017-11548
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 31 2018 Adam Jackson <ajax(a)redhat.com> - 1.2.0-13
- Backport fix for CVE 2017-11548
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.0-12
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Fri Apr 6 2018 Adam Jackson <ajax(a)redhat.com> - 1.2.0-11
- Update description
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1478950 - CVE-2017-11548 libao: Invalid memory allocation in _tokenize_matrix function in audio_out.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1478950
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-816b63ad38' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-3210cc23f4
2018-08-04 21:45:12.206373
--------------------------------------------------------------------------------
Name : flatpak-module-tools
Product : Fedora 28
Version : 0.6
Release : 1.fc28
URL : https://pagure.io/flatpak-module-tools
Summary : Tools for maintaining Flatpak applications and runtimes as Fedora modules
Description :
flatpak-module-tools is a set of command line tools (all accessed via a single
'flatpak-module' executable) for operations related to maintaining Flatpak
applications and runtimes as Fedora modules.
--------------------------------------------------------------------------------
Update Information:
* Version 0.6 of flatpak-module-tools adds support for a number of keys in the
`flatpak:` section of `container.yaml` such as rename-icon and * pythonN-
module-tools subpackages are split out to use as a library from atomic-reactor.
---- Version 0.4 (fix container builds from Koji) ---- Version 0.3 (minor
fixes) ---- Initial package of tools for maintaining Flatpak applications and
runtimes as Fedora modules
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1581865 - Review Request: flatpak-module-tools - Tools for maintaining Flatpak applications and runtimes as Fedora modules
https://bugzilla.redhat.com/show_bug.cgi?id=1581865
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-3210cc23f4' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-dc734c9eab
2018-08-04 21:45:12.206359
--------------------------------------------------------------------------------
Name : python-nbxmpp
Product : Fedora 28
Version : 0.6.6
Release : 1.fc28
URL : https://dev.gajim.org/gajim/python-nbxmpp/
Summary : Python library for non-blocking use of Jabber/XMPP
Description :
python-nbxmpp is a Python library that provides a way for Python applications
to use Jabber/XMPP networks in a non-blocking way.
Features:
- Asynchronous
- ANONYMOUS, EXTERNAL, GSSAPI, SCRAM-SHA-1, DIGEST-MD5, PLAIN, and
X-MESSENGER-OAUTH2 authentication mechanisms.
- Connection via proxies
- TLS
- BOSH (XEP-0124)
- Stream Management (XEP-0198)
--------------------------------------------------------------------------------
Update Information:
This is a major update of Gajim to the 1.0.x version series. For a list of
changes since 0.16.9 see
https://dev.gajim.org/gajim/gajim/blob/gajim-1.0.3/ChangeLog
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 21 2018 Michal Schmidt <mschmidt(a)redhat.com> - 0.6.6-1
- Upstream release 0.6.6.
* Mon Mar 19 2018 Michal Schmidt <mschmidt(a)redhat.com> - 0.6.4-1
- Upstream release 0.6.4.
* Wed Mar 7 2018 Michal Schmidt <mschmidt(a)redhat.com> - 0.6.3-1
- Upstream release 0.6.3.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1580034 - AppStream metadata for Gajim package are missing
https://bugzilla.redhat.com/show_bug.cgi?id=1580034
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-dc734c9eab' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-dc734c9eab
2018-08-04 21:45:12.206359
--------------------------------------------------------------------------------
Name : gajim
Product : Fedora 28
Version : 1.0.3
Release : 3.fc28.1
URL : https://gajim.org/
Summary : Jabber client written in PyGTK
Description :
Gajim is a Jabber client written in PyGTK. The goal of Gajim's developers is
to provide a full featured and easy to use xmpp client for the GTK+ users.
Gajim does not require GNOME to run, even though it exists with it nicely.
--------------------------------------------------------------------------------
Update Information:
This is a major update of Gajim to the 1.0.x version series. For a list of
changes since 0.16.9 see
https://dev.gajim.org/gajim/gajim/blob/gajim-1.0.3/ChangeLog
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 27 2018 Michal Schmidt <mschmidt(a)redhat.com> - 1.0.3-3.fc28.1
- Do not use app global menu in F28, F27.
* Thu Jul 26 2018 Michal Schmidt <mschmidt(a)redhat.com> - 1.0.3-3
- Apply upstream patch for getting idle time from Mutter (no X11 needed).
* Thu Jul 26 2018 Michal Schmidt <mschmidt(a)redhat.com> - 1.0.3-2
- Prefer x11 backend for working status icon and idle detection.
* Mon Jul 23 2018 Michal Schmidt <mschmidt(a)redhat.com> - 1.0.3-1
- Upstream release 1.0.3.
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.1-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 1.0.1-2
- Rebuilt for Python 3.7
* Tue Apr 3 2018 Michal Schmidt <mschmidt(a)redhat.com> - 1.0.1-1
- Upstream release 1.0.1.
- Add patch from upstream to fix py3_install.
* Mon Mar 19 2018 Michal Schmidt <mschmidt(a)redhat.com> - 1.0.0-1
- Upstream release 1.0.0
- now using Python3, GTK3.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1580034 - AppStream metadata for Gajim package are missing
https://bugzilla.redhat.com/show_bug.cgi?id=1580034
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-dc734c9eab' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-fcde578c75
2018-08-04 21:45:12.206346
--------------------------------------------------------------------------------
Name : grive2
Product : Fedora 28
Version : 0.5.0
Release : 13.20171122git84c57c1.fc28.1
URL : http://yourcmc.ru/wiki/Grive2
Summary : Google Drive client
Description :
The purpose of this project is to provide an independent open source
implementation of Google Drive client for GNU/Linux. It uses Google Drive
REST API to talk to Google Drive service.
--------------------------------------------------------------------------------
Update Information:
Fix 1608665. As the previous version failed to remove the systemd user units,
so users should manually disable the systemd services if they do not need it
``` systemctl --user disable grive-changes@.service systemctl --user disable
grive-timer@.service systemctl --user disable grive-timer@.timer ``` Effectively
from this build, these service won't run by default and will be removed
correctly during uninstall.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 26 2018 Zamir SUN <sztsian(a)gmail.com> - 0.5.0-13.20171122git84c57c1.fc28.1
- Fix RHBZ 1608667
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1608667 - guidelines violation: There should be no automatic run as such one requires manual configuration
https://bugzilla.redhat.com/show_bug.cgi?id=1608667
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-fcde578c75' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-cce6f4f53d
2018-08-04 21:45:12.206332
--------------------------------------------------------------------------------
Name : oci-systemd-hook
Product : Fedora 28
Version : 0.1.17
Release : 3.gitbd86a79.fc28
URL : https://github.com/projectatomic/oci-systemd-hook
Summary : OCI systemd hook for docker
Description :
OCI systemd hooks enable running systemd in a OCI runc/docker container.
--------------------------------------------------------------------------------
Update Information:
Fixes SELInux labeling being attempted when SELinux is disabled.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 26 2018 Dan Walsh <dwalsh(a)redhat.name> - 1:0.1.17-3.git87fb61e
- Don't attempt to set SELinux labels, if it is disabled
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:0.1.17-2.git87fb61e
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Mon Jun 18 2018 Dan Walsh <dwalsh(a)redhat.name> - 1:0.1.17-1.git87fb61e
- Don't attempt to set SELinux labels, if they are ""
* Tue May 1 2018 Dan Walsh <dwalsh(a)redhat.name> - 1:0.1.16-1.git05bd9a0
- Merge pull request #90 from brahim-raddahi/master
- fix invalid /etc/machine-id
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:0.1.15-2.git2d0b8a3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1575198 - /tmp mount PROPAGATION=shared prevents oci-systemd-hook moving mounts from /tmp/ocitmp.XXXXXX to /var/lib/containers/..../merged/run
https://bugzilla.redhat.com/show_bug.cgi?id=1575198
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-cce6f4f53d' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-7b97e553ff
2018-08-04 21:45:12.206318
--------------------------------------------------------------------------------
Name : mingw-xerces-c
Product : Fedora 28
Version : 3.2.1
Release : 1.fc28
URL : http://xml.apache.org/xerces-c/
Summary : MingGW Windows validating XML parser
Description :
Xerces-C is a validating XML parser written in a portable subset of
C++. Xerces-C makes it easy to give your application the ability to
read and write XML data. A shared library is provided for parsing,
generating, manipulating, and validating XML documents. Xerces-C is
faithful to the XML 1.0 recommendation and associated standards (DOM
1.0, DOM 2.0. SAX 1.0, SAX 2.0, Namespaces).
--------------------------------------------------------------------------------
Update Information:
Update to 3.2.1 (CVE-2017-12627)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 24 2018 Pete Walter <pwalter(a)fedoraproject.org> - 3.2.1-1
- Update to 3.2.1 (CVE-2017-12627)
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.1.4-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.1.4-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1551525 - CVE-2017-12627 xerces-c: Null pointer dereference while processing the path to DTD allows denial of service
https://bugzilla.redhat.com/show_bug.cgi?id=1551525
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-7b97e553ff' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-7b97e553ff
2018-08-04 21:45:12.206318
--------------------------------------------------------------------------------
Name : mingw-gdal
Product : Fedora 28
Version : 2.2.4
Release : 5.fc28
URL : http://www.gdal.org
Summary : MinGW Windows GDAL library
Description :
MinGW Windows GDAL library.
--------------------------------------------------------------------------------
Update Information:
Update to 3.2.1 (CVE-2017-12627)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 24 2018 Pete Walter <pwalter(a)fedoraproject.org> - 2.2.4-5
- Rebuild for xerces-c 3.2
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.2.4-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Wed Jun 13 2018 Sandro Mani <manisandro(a)gmail.com> - 2.2.4-3
- Rebuild for libkml ABI change
* Wed Apr 11 2018 Sandro Mani <manisandro(a)gmail.com> - 2.2.4-2
- Rebuild (poppler)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1551525 - CVE-2017-12627 xerces-c: Null pointer dereference while processing the path to DTD allows denial of service
https://bugzilla.redhat.com/show_bug.cgi?id=1551525
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-7b97e553ff' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-2925df64f9
2018-08-04 21:45:12.206304
--------------------------------------------------------------------------------
Name : findbugs-contrib
Product : Fedora 28
Version : 7.4.3
Release : 1.fc28
URL : http://fb-contrib.sourceforge.net/
Summary : Extra findbugs detectors
Description :
This is an extra detector plugin to be used with the static bug finder
FindBugs. See the documentation for descriptions of the detectors.
--------------------------------------------------------------------------------
Update Information:
Update to 7.4.3
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 23 2018 Richard Fearn <richardfearn(a)gmail.com> - 7.4.3-1
- Update to 7.4.3 (bug #1607098)
* Sat Jun 2 2018 Richard Fearn <richardfearn(a)gmail.com> - 7.4.2-1
- Update to 7.4.2 (bug #1580171)
* Sat Jun 2 2018 Richard Fearn <richardfearn(a)gmail.com> - 7.4.1-1
- Update to 7.4.1 (bug #1580171)
* Sun May 13 2018 Richard Fearn <richardfearn(a)gmail.com> - 7.4.0-1
- Update to 7.4.0 (bug #1577489)
* Sat Apr 28 2018 Richard Fearn <richardfearn(a)gmail.com> - 7.2.1-2
- Update to build with ASM 6.1.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1607098 - findbugs-contrib-7.4.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1607098
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-2925df64f9' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------