Fedora 28 Update: libxcrypt-4.4.3-10.fc28
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-457d356f0b
2019-03-01 23:09:34.152462
--------------------------------------------------------------------------------
Name : libxcrypt
Product : Fedora 28
Version : 4.4.3
Release : 10.fc28
URL : https://github.com/besser82/libxcrypt
Summary : Extended crypt library for descrypt, md5crypt, bcrypt, and others
Description :
libxcrypt is a modern library for one-way hashing of passwords. It
supports a wide variety of both modern and historical hashing methods:
yescrypt, gost-yescrypt, scrypt, bcrypt, sha512crypt, sha256crypt,
md5crypt, SunMD5, sha1crypt, NT, bsdicrypt, bigcrypt, and descrypt.
It provides the traditional Unix crypt and crypt_r interfaces, as well
as a set of extended interfaces pioneered by Openwall Linux, crypt_rn,
crypt_ra, crypt_gensalt, crypt_gensalt_rn, and crypt_gensalt_ra.
libxcrypt is intended to be used by login(1), passwd(1), and other
similar programs; that is, to hash a small number of passwords during
an interactive authentication dialogue with a human. It is not suitable
for use in bulk password-cracking applications, or in any other situation
where speed is more important than careful handling of sensitive data.
However, it is intended to be fast and lightweight enough for use in
servers that must field thousands of login attempts per minute.
--------------------------------------------------------------------------------
Update Information:
- Fix conditional in __spec_install_post - Update Obsoletes, Provides, and
Requires to glibc 2.27 - Add Recommends: whois-mkpasswd for Fedora - Optimize
installation of the documentation files - Fix %description - Use an absolute
path for the configure script and srcdir - Add patch to fix the output
formatting of a test - Add a README.static file with information about the
static library
--------------------------------------------------------------------------------
ChangeLog:
* Tue Feb 19 2019 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.3-10
- Fix versioned requirements on glibc
* Tue Feb 19 2019 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.3-9
- Fix conditional in __spec_install_post
* Tue Feb 19 2019 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.3-8
- Update Obsoletes, Provides, and Requires to glibc 2.27
- Add Recommends: whois-mkpasswd for Fedora
- Optimize installation of the documentation files
- Fix %description
- Use an absolute path for the configure script and srcdir
* Tue Feb 19 2019 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.3-7
- Add patch to fix the output formatting of a test
* Wed Feb 6 2019 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.3-6
- Always build all supported hash methods
- Drop distcheck at the end of %check stage
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.4.3-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Wed Jan 30 2019 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.3-4
- Add a README.posix file with information about the stub functions
- Add a README.static file with information about the static library
* Wed Jan 30 2019 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.3-3
- Replace unsafe functions in libxcrypt-compat with stubs (#1670735)
* Thu Jan 24 2019 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.3-2
- Fix and simplify the conditionals for the compat package
- Add an option to replace unsafe functions in the compat lib with a stub
- Add patch to fix another possible format-overflow
* Thu Jan 24 2019 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.3-1
- New upstream release
* Thu Jan 24 2019 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.2-8
- Optimize file removal for compatibility library
* Mon Jan 21 2019 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.2-7
- Add two upstream patches to fix build with GCC 9
* Mon Jan 21 2019 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.2-6
- Add upstream patch to add proper C++-guards in <xcrypt.h>
* Mon Jan 14 2019 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.2-5
- Build the compat package with glibc hashing methods only
- Add an option to disable the compat-package for future use
* Mon Jan 14 2019 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.2-4
- Bump SO-name for Fedora >= 30 and enable compat package (#1666033)
- Add distribution README file
- Update description of the compat package
- Conditionally remove non-built hashing methods from description
* Sun Dec 23 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.2-3
- Remove architecture bits from Recommends
* Sun Dec 23 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.2-2
- Update summary
* Sat Dec 22 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.2-1
- New upstream release
* Thu Dec 6 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.1-1
- New upstream release
* Tue Dec 4 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.0-5
- Sync -fno-plt patch with upstream commit
* Tue Dec 4 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.0-4
- Backport upstream commit to fix a memory leak from a static pointer
* Tue Dec 4 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.0-3
- Backport upstream PR to build with -fno-plt optimization
* Mon Nov 26 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.0-2
- Backport upstream commit to use a safer strcpy for the NT method
- Backport upstream generating base64 encoded output for NT gensalt
- Backport upstream commit to require less rbytes for NT gensalt
- Backport upstream commit to test incremental hmac-sha256 computation
- Add Recommends: mkpasswd for Fedora >= 30
* Tue Nov 20 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.0-1
- New upstream release
* Wed Nov 14 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.3.4-1
- New upstream release
* Wed Nov 14 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.3.3-4
- Bump release for proper obsoletion of former common sub-package
* Wed Nov 14 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.3.3-3
- Add two upstream patches with minor fixes
- Add HMAC checksum file for the static library
- Drop the common sub-package
- Some spec-file optimizations
* Tue Nov 13 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.3.3-2
- Add a patch to define crypt_gensalt_r as macro, so applications
link the identical crypt_gensalt_rn directly
* Sun Nov 11 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.3.3-1
- New upstream release
* Sun Nov 11 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.3.2-1
- New upstream release
* Sun Nov 11 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.3.1-2
- Backport two patches from upstream fixing the gensalt function for
NT to properly terminate its returned output
* Sat Nov 10 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.3.1-1
- New upstream release
* Sat Nov 10 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.3.0-1
- New upstream release
* Fri Oct 26 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.2.3-1
- New upstream release
* Thu Oct 25 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.2.2-2
- Add patch updating to recent development version
- Run valgrind-memcheck
- Use bootstrap script
* Thu Oct 18 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.2.2-1
- New upstream release
* Mon Oct 1 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.2.1-3
- Drop compat-devel package
- Set configure options from globals
* Sun Sep 30 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.2.1-2
- Build out-of-tree
- Split off noarch-bits into common sub-package
- Update %description
- Prepare to remove legacy API from library and to provide a compatibilty
package for the legacy API
* Sat Sep 29 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.2.1-1
- New upstream release
- Add new manpages
* Sat Sep 29 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.2.0-1
- New upstream release
* Fri Aug 24 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.1.2-1
- New upstream release
* Wed Aug 8 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.1.1-4
- Move *.3 manpages to devel subpackage (#1613762)
- Add needed Conflicts: man-pages < 4.15-3
* Wed Aug 8 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.1.1-3
- Make crypt{,_r} return NULL on failure (#1611784)
* Sat Aug 4 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.1.1-2
- Add manpages for crypt{,_r,_ra}.3 (#1610307)
* Wed Aug 1 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.1.1-1
- New upstream release
* Fri Jul 13 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.1.0-1
- New upstream release
* Fri Jul 13 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.0.1-6
- Make testsuite fail on error again
- Update patch0 with more upstream fixes
* Fri Jul 13 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.0.1-5
- Add patch to update to recent development branch
- Re-enable SUNMD5 support as it is BSD licensed now
- Build compatibility symbols for glibc only
- Skip failing testsuite once
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.0.1-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Fri Jun 29 2018 Florian Weimer <fweimer(a)redhat.com> - 4.0.1-3
- Remove CDDL from license list (#1592445)
* Fri Jun 29 2018 Florian Weimer <fweimer(a)redhat.com> - 4.0.1-2
- Remove SUNMD5 support (#1592445)
* Wed May 16 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.0.1-1
- New upstream release
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-457d356f0b' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 2 months
Fedora 28 Update: gsoap-2.8.60-6.fc28
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-aa62ca3119
2019-03-01 23:09:34.152452
--------------------------------------------------------------------------------
Name : gsoap
Product : Fedora 28
Version : 2.8.60
Release : 6.fc28
URL : http://gsoap2.sourceforge.net/
Summary : Generator Tools for Coding SOAP/XML Web Services in C and C++
Description :
The gSOAP Web services development toolkit offers an XML to C/C++
language binding to ease the development of SOAP/XML Web services in C
and C/C++.
--------------------------------------------------------------------------------
Update Information:
Improved patch for CVE-2019-7659.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Feb 19 2019 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 2.8.60-6
- Use ssize_t instead of int in patch for CVE-2019-7659
* Fri Jan 18 2019 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 2.8.60-5
- Apply fix for advisory regarding abort with cookies enabled (CVE-2019-7659)
- Adjust gsoap-size-aname.patch to corresponf to upstream's fix
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.8.60-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-aa62ca3119' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 2 months
Fedora 28 Update: stlink-1.5.1-0.2.20190216git1165cf7.fc28
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-d7d02f1378
2019-03-01 23:09:34.152441
--------------------------------------------------------------------------------
Name : stlink
Product : Fedora 28
Version : 1.5.1
Release : 0.2.20190216git1165cf7.fc28
URL : https://github.com/texane/stlink
Summary : STM32 discovery line Linux programmer
Description :
STLINK v1/v2 JTAG/SWD debugging/flashing tool for STM32 microcontrollers.
--------------------------------------------------------------------------------
Update Information:
Update to latest git.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Feb 19 2019 Vasiliy N. Glazov <vascom2(a)gmail.com> - 1.5.1-0.2.20190216git1165cf7
- Update to latest git
* Sun Feb 3 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5.1-0.2.20190103git7651d21
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Fri Jan 11 2019 Vasiliy N. Glazov <vascom2(a)gmail.com> - 1.5.1-0.1.20190103git7651d21
- Update to latest git
* Tue Aug 7 2018 Vasiliy N. Glazov <vascom2(a)gmail.com> - 1.5.1-0.1.20180802gitae717b9
- Update to latest git
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-d7d02f1378' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 2 months
Fedora 28 Update: mariadb-10.2.22-1.fc28
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-b06bace86c
2019-03-01 23:09:34.152431
--------------------------------------------------------------------------------
Name : mariadb
Product : Fedora 28
Version : 10.2.22
Release : 1.fc28
URL : http://mariadb.org
Summary : A community developed branch of MySQL
Description :
MariaDB is a community developed branch of MySQL.
MariaDB is a multi-user, multi-threaded SQL database server.
It is a client/server implementation consisting of a server daemon (mysqld)
and many different client programs and libraries. The base package
contains the standard MariaDB/MySQL client programs and generic MySQL files.
--------------------------------------------------------------------------------
Update Information:
** MariaDB 10.2.22 ** Release notes:
https://mariadb.com/kb/en/library/mariadb-10222-release-notes/ CVEs fixed:
CVE-2019-2510 CVE-2019-2537
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 18 2019 Michal Schorm <mschorm(a)redhat.com> - 3:10.2.22-1
- Rebase to 10.2.22
- CVEs fixed:
CVE-2019-2510 CVE-2019-2537
* Mon Feb 11 2019 Michal Schorm <mschorm(a)redhat.com> - 3:10.2.21-3
- Remove PPC64 optimizatation; Add debug build optimization
- Fix gssapi plugin typo
- Tweak the testsuite execution, speed up the testsuite on rebuilds
- Change weak dependency of RocksDB and TokuDB storage engines from Recommends to Suggests
- Add "Suggests" weak dependencies to more storage engines
- Fix TokuDB Jemalloc ld_preload; #1668375 #1671962
- Tweak macros usage
* Thu Jan 3 2019 Michal Schorm <mschorm(a)redhat.com> - 3:10.2.21-2
- Rebase to 10.2.21
- Disable building of the caching_sha2_password plugin, it is provided
by 'mariadb-connector-c'
Resolves: #1663478
* Mon Dec 10 2018 Michal Schorm <mschorm(a)redhat.com> - 3:10.2.19-2
- Move libmariadb packageconfig file, it should be in 'mariadb-connector-c'
* Wed Nov 14 2018 Michal Schorm <mschorm(a)redhat.com> - 3:10.2.19-1
- Rebase to 10.2.19
- CVEs fixed:
CVE-2018-3282 CVE-2016-9843 CVE-2018-3174 CVE-2018-3143 CVE-2018-3156
CVE-2018-3251 CVE-2018-3185 CVE-2018-3277 CVE-2018-3162 CVE-2018-3173
CVE-2018-3200 CVE-2018-3284
* Fri Oct 19 2018 Michal Schorm <mschorm(a)redhat.com> - 3:10.2.18-2
- Fix parallel installability for x86_64 and i686 devel packages on F<=27
* Wed Sep 26 2018 Michal Schorm <mschorm(a)redhat.com> - 3:10.2.18-1
- Rebase to 10.2.18
* Tue Sep 4 2018 Michal Schorm <mschorm(a)redhat.com> - 3:10.2.17-2
- Fix parallel installability of x86_64 and i686 devel packages
* Mon Aug 20 2018 Michal Schorm <mschorm(a)redhat.com> - 3:10.2.17-1
- Rebase to 10.2.17
- CVEs fixed: #1602428
CVE-2018-3060 CVE-2018-3064 CVE-2018-3063 CVE-2018-3058 CVE-2018-3066
- CVEs fixed: #1564966
CVE-2018-2767
- CVEs fixed: #1616261
CVE-2018-3081
* Sat Jun 30 2018 Michal Schorm <mschorm(a)redhat.com> - 3:10.2.16-1
- Rebase to 10.2.16
MyRocks is now Stable (GA)
* Tue Jun 5 2018 Honza Horak <hhorak(a)redhat.com> - 3:10.2.15-2
- Use mysqladmin for checking the socket
- Jemalloc dependency moved to the TokuDB subpackage.
CMake jemalloc option removed, not used anymore.
The server doesn't need jemalloc since 10.2: https://jira.mariadb.org/browse/MDEV-11059
- Build MariaDB with TokuDB without Jemalloc.
* Wed May 23 2018 Michal Schorm <mschorm(a)redhat.com> - 3:10.2.15-1
- Rebase to 10.2.15
- CVEs fixed: #1568962
CVE-2018-2755 CVE-2018-2761 CVE-2018-2766 CVE-2018-2771 CVE-2018-2781
CVE-2018-2782 CVE-2018-2784 CVE-2018-2787 CVE-2018-2813 CVE-2018-2817
CVE-2018-2819 CVE-2018-2786 CVE-2018-2759 CVE-2018-2777 CVE-2018-2810
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-b06bace86c' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 2 months
Fedora 28 Update: phan-1.2.4-1.fc28
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-6d99ebca3e
2019-03-01 23:09:34.152421
--------------------------------------------------------------------------------
Name : phan
Product : Fedora 28
Version : 1.2.4
Release : 1.fc28
URL : https://github.com/phan/phan
Summary : A static analyzer for PHP
Description :
Phan is a static analyzer that looks for common issues and will verify type
compatibility on various operations when type information is available or can
be deduced. Phan does not make any serious attempt to understand flow control
and narrow types based on conditionals.
--------------------------------------------------------------------------------
Update Information:
18 Feb 2019, **Phan 1.2.4** **New features (Analysis):** + Inherit more
specific phpdoc template types even when there are real types in the signature.
(#2447) e.g. inherit `@param MyClass<T>` and `@return MyClass<U>` from the
ancestor class of `function someMethod(MyClass $x) : MyClass {}`. This is only
done when each phpdoc type is compatible with the real signature type. + Warn
about `@var Type` without a variable name in doc comments of function-likes
(#2445) + Infer side effects of `array_push` and `array_unshift` on complex
expressions such as properties. (#2365) + Warn when a non-string is used as a
property name for a dynamic property access (#1402) + Don't emit
`PhanAccessMethodProtected` for `if ($this instanceof OtherClasslike) {
$this->protectedMethod(); }` (#2372) (This only applies to uses of the
variable `$this`, e.g. in closures or when checking interfaces) **Plugins:** +
Warn about unspecialized array types of elements in UnknownElementTypePlugin.
`mixed[]` can be used when absolutely nothing is known about the array's key or
value types. + Warn about failing to use the return value of `var_export($value,
true)` (and `print_r`) in `UseReturnValuePlugin` (#2391) + Fix plugin causing
`InvalidVariableIssetPlugin` to go into an infinite loop for
`isset(self::CONST['offset'])` (#2446) **Maintenance** + Limit frames of stack
traces in crash reports to 1000 bytes of encoded data. (#2444) + Support
analysis of the upcoming php 7.4 `??=` operator (#2369) **Bug fixes:** + Fix a
crash seen when parsing return typehint for `Closure` in a different case (e.g.
`closure`) (#2438) + Fix an issue loading the autoloader multiple times when the
`vendor` folder is not lowercase on case-sensitive filesystems (#2440) + Fix bug
causing template types on methods to not work properly when inherited from a
trait method. + Catch and warn when declaring a constant that would conflict
with built in keywords (true/false/null) and prevent it from affecting
inferences. (#1642)
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-6d99ebca3e' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 2 months
[SECURITY] Fedora 28 Update: community-mysql-5.7.25-1.fc28
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-21b76d179e
2019-03-01 23:09:34.152411
--------------------------------------------------------------------------------
Name : community-mysql
Product : Fedora 28
Version : 5.7.25
Release : 1.fc28
URL : http://www.mysql.com
Summary : MySQL client programs and shared libraries
Description :
MySQL is a multi-user, multi-threaded SQL database server. MySQL is a
client/server implementation consisting of a server daemon (mysqld)
and many different client programs and libraries. The base package
contains the standard MySQL client programs and generic MySQL files.
--------------------------------------------------------------------------------
Update Information:
** MySQL 5.7.25 ** Release notes:
https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-25.html CVEs fixed:
CVE-2019-2420 CVE-2019-2434 CVE-2019-2455 CVE-2019-2481 CVE-2019-2482
CVE-2019-2486 CVE-2019-2503 CVE-2019-2507 CVE-2019-2510 CVE-2019-2528
CVE-2019-2529 CVE-2019-2531 CVE-2019-2532 CVE-2019-2534 CVE-2019-2537
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 18 2019 Michal Schorm <mschorm(a)redhat.com> - 5.7.25-1
- Rebase to 5.7.25
- CVE fixes: #1666776
CVE-2019-2420 CVE-2019-2434 CVE-2019-2455 CVE-2019-2481 CVE-2019-2482
CVE-2019-2486 CVE-2019-2503 CVE-2019-2507 CVE-2019-2510 CVE-2019-2528
CVE-2019-2529 CVE-2019-2531 CVE-2019-2532 CVE-2019-2534 CVE-2019-2537
* Wed Nov 14 2018 Michal Schorm <mschorm(a)redhat.com> - 5.7.24-1
- Rebase to 5.7.24 version
- CVE fixes: #1640559
CVE-2018-3276 CVE-2018-3200 CVE-2018-3284 CVE-2018-3173 CVE-2018-3162
CVE-2018-3247 CVE-2018-3156 CVE-2018-3161 CVE-2018-3278 CVE-2018-3282
CVE-2018-3187 CVE-2018-3277 CVE-2018-3144 CVE-2018-3133 CVE-2018-3143
CVE-2018-3283 CVE-2018-3171 CVE-2018-3251 CVE-2018-3185 CVE-2018-3155
* Thu Aug 23 2018 Michal Schorm <mschorm(a)redhat.com> - 5.7.23-1
- Rebase to 5.7.23 version
- OpenSSL 1.1 patch removed; fixed by upstream
- CVE fixes: #1564967
CVE-2018-2767
- CVE fixes: #1602383
CVE-2018-3056 CVE-2018-3058 CVE-2018-3060 CVE-2018-3061 CVE-2018-3062
CVE-2018-3064 CVE-2018-3065 CVE-2018-3066 CVE-2018-3070 CVE-2018-3071
CVE-2018-3077 CVE-2018-3081
* Thu Apr 19 2018 Michal Schorm <mschorm(a)redhat.com> - 5.7.22-1
- Rebase to 5.7.22 version
- CVE fixes: #1568963
CVE-2018-2755 CVE-2018-2758 CVE-2018-2759 CVE-2018-2761 CVE-2018-2762
CVE-2018-2766 CVE-2018-2769 CVE-2018-2771 CVE-2018-2773 CVE-2018-2775
CVE-2018-2776 CVE-2018-2777 CVE-2018-2778 CVE-2018-2779 CVE-2018-2780
CVE-2018-2781 CVE-2018-2782 CVE-2018-2784 CVE-2018-2786 CVE-2018-2787
CVE-2018-2810 CVE-2018-2812 CVE-2018-2813 CVE-2018-2816 CVE-2018-2817
CVE-2018-2818 CVE-2018-2819 CVE-2018-2839 CVE-2018-2846
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1666776 - CVE-2019-2420 CVE-2019-2434 CVE-2019-2455 CVE-2019-2481 CVE-2019-2482 CVE-2019-2486 CVE-2019-2503 CVE-2019-2507 CVE-2019-2510 CVE-2019-2528 CVE-2019-2529 CVE-2019-2531 CVE-2019-2532 CVE-2019-2534 CVE-2019-2537 community-mysql: various flaws [fedora-28]
https://bugzilla.redhat.com/show_bug.cgi?id=1666776
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-21b76d179e' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 2 months
Fedora 28 Update: osinfo-db-20190218-1.fc28
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-37a7efe938
2019-03-01 23:09:34.152386
--------------------------------------------------------------------------------
Name : osinfo-db
Product : Fedora 28
Version : 20190218
Release : 1.fc28
URL : http://libosinfo.org/
Summary : osinfo database files
Description :
The osinfo database provides information about operating systems and
hypervisor platforms to facilitate the automated configuration and
provisioning of new virtual machines
--------------------------------------------------------------------------------
Update Information:
Update to new release ---- Update to new release ---- Update to new release
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 18 2019 Fabiano Fid��ncio <fidencio(a)redhat.org> - 20190218-1
- Update to new release
* Sun Jan 20 2019 Fabiano Fid��ncio <fidencio(a)redhat.org> - 20190120-1
- Update to new release
* Fri Dec 14 2018 Fabiano Fid��ncio <fidencio(a)redhat.org> - 20181214-1
- Update to new release
* Mon Dec 3 2018 Fabiano Fid��ncio <fidencio(a)redhat.org> - 20181203-1
- Update to new release
* Mon Nov 19 2018 Fabiano Fid��ncio <fidencio(a)redhat.org> - 20181116-1
- Update to new release
* Thu Nov 1 2018 Fabiano Fid��ncio <fabiano(a)fidencio.org> - 20181101-1
- Update to new release
* Thu Oct 11 2018 Fabiano Fid��ncio <fabiano(a)fidencio.org> - 20181011-1
- Update to new release
* Thu Sep 20 2018 Fabiano Fid��ncio <fabiano(a)fidencio.org> - 20180920-1
- Update to new release
* Mon Sep 3 2018 Fabiano Fid��ncio <fabiano(a)fidencio.org> - 20180903-1
- Update to new release
* Fri Jul 20 2018 Fabiano Fid��ncio <fabiano(a)fidencio.org> - 20180720-1
- Update to new release
* Tue Jun 12 2018 Fabiano Fid��ncio <fabiano(a)fidencio.org> - 20180612-1
- Update to new release
* Thu May 31 2018 Fabiano Fid��ncio <fabiano(a)fidencio.org> - 20180531-1
- Update to new release
* Mon May 14 2018 Fabiano Fid��ncio <fabiano(a)fidencio.org> - 20180514-1
- Update to new release
* Wed May 2 2018 Fabiano Fid��ncio <fabiano(a)fidencio.org> - 20180502-1
- Update to new release
* Mon Apr 16 2018 Fabiano Fid��ncio <fabiano(a)fidencio.org> - 20180416-1
- Update to new release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1666320 - Fedora Silverblue 29 default quick install via GNOME Boxes in Fedora Workstation 29 fails with: error occurred during reading the kickstart file single argument is expected for the keyboard command
https://bugzilla.redhat.com/show_bug.cgi?id=1666320
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-37a7efe938' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 2 months
Fedora 28 Update: mariadb-connector-c-3.0.9-1.fc28
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-1db25f6286
2019-03-01 23:09:34.152376
--------------------------------------------------------------------------------
Name : mariadb-connector-c
Product : Fedora 28
Version : 3.0.9
Release : 1.fc28
URL : http://mariadb.org/
Summary : The MariaDB Native Client library (C driver)
Description :
The MariaDB Native Client library (C driver) is used to connect applications
developed in C/C++ to MariaDB and MySQL databases.
--------------------------------------------------------------------------------
Update Information:
**MariaDB Connector C / C++ 3.0.9 ** Release notes:
https://mariadb.com/kb/en/library/mariadb-connector-c-309-release-notes/
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 18 2019 Michal Schorm <mschorm(a)redhat.com> - 3.0.9-1
- Rebase to 3.0.9
* Wed Jan 2 2019 Michal Schorm <mschorm(a)redhat.com> - 3.0.8-1
- Rebase to 3.0.8
* Mon Nov 19 2018 Michal Schorm <mschorm(a)redhat.com> - 3.0.7-1
- Rebase to 3.0.7
* Tue Sep 4 2018 Michal Schorm <mschorm(a)redhat.com> - 3.0.6-2
- Fix parallel installability of x86_64 and i686 devel package
* Fri Aug 3 2018 Michal Schorm <mschorm(a)redhat.com> - 3.0.6-1
- Rebase to 3.0.6
* Fri Jun 8 2018 Michal Schorm <mschorm(a)redhat.com> - 3.0.5-1
- Rebase to 3.0.5
* Thu Apr 26 2018 Michal Schorm <mschorm(a)redhat.com> - 3.0.4-1
- Rebase to 3.0.4
* Mon Apr 23 2018 Michal Schorm <mschorm(a)redhat.com> - 3.0.3-4
- Further fix of the '--plugindir' output from the config binary
Realted: #1569159
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1675073 - mariadb-connector-c-3.0.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1675073
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-1db25f6286' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 2 months
Fedora 28 Update: sigil-0.9.12-1.fc28
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-fd8986cc53
2019-03-01 23:09:34.152366
--------------------------------------------------------------------------------
Name : sigil
Product : Fedora 28
Version : 0.9.12
Release : 1.fc28
URL : https://sigil-ebook.com/
Summary : WYSIWYG ebook editor
Description :
Sigil is a multi-platform WYSIWYG ebook editor. It is designed to edit books
in ePub format.
Now what does it have to offer...
* Full Unicode support: everything you see in Sigil is in UTF-16
* Full EPUB spec support
* WYSIWYG editing
* Multiple Views: Book View, Code View and Split View
* Metadata editor with full support for all possible metadata entries with
full descriptions for each
* Table Of Contents editor
* Multi-level TOC support
* Book View fully supports the display of any XHTML document possible under
the OPS spec
* SVG support
* Basic XPGT support
* Advanced automatic conversion of all imported documents to Unicode
* Currently imports TXT, HTML and EPUB files; more will be added with time
* Embedded HTML Tidy; all imported documents are thoroughly cleaned;
changing views cleans the document so no matter how much you screw up
your code, it will fix it (usually)
--------------------------------------------------------------------------------
Update Information:
- updated to 0.9.11 - https://github.com/Sigil-Ebook/Sigil/releases/tag/0.9.11
--------------------------------------------------------------------------------
ChangeLog:
* Tue Feb 19 2019 Dan Hor��k <dan[at]danny.cz> - 0.9.12-1
- New upstream release 0.9.12 (#1678503)
* Sun Feb 17 2019 Dan Hor��k <dan[at]danny.cz> - 0.9.11-1
- New upstream release 0.9.11 (#1677953)
* Sat Feb 2 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.10-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Tue Nov 13 2018 Caol��n McNamara <caolanm(a)redhat.com> - 0.9.10-3
- rebuild for hunspell 1.7.0
* Tue Aug 28 2018 Patrik Novotn�� <panovotn(a)redhat.com> - 0.9.10-2
- change requires to minizip-compat(-devel), rhbz#1609830, rhbz#1615381
* Tue Jul 31 2018 Dan Hor��k <dan[at]danny.cz> - 0.9.10-1
- New upstream release 0.9.10 (#1608388)
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.9-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 0.9.9-3
- Rebuilt for Python 3.7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1677953 - sigil-0.9.11 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1677953
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-fd8986cc53' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 2 months
Fedora 28 Update: root-6.16.00-3.fc28
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-28fe03887c
2019-03-01 23:09:34.152356
--------------------------------------------------------------------------------
Name : root
Product : Fedora 28
Version : 6.16.00
Release : 3.fc28
URL : https://root.cern/
Summary : Numerical data analysis framework
Description :
The ROOT system provides a set of object oriented frameworks with all
the functionality needed to handle and analyze large amounts of data
in a very efficient way. Having the data defined as a set of objects,
specialized storage methods are used to get direct access to the
separate attributes of the selected objects, without having to touch
the bulk of the data. Included are histogramming methods in an
arbitrary number of dimensions, curve fitting, function evaluation,
minimization, graphics and visualization classes to allow the easy
setup of an analysis system that can query and process the data
interactively or in batch mode, as well as a general parallel
processing framework, PROOF, that can considerably speed up an
analysis.
Thanks to the built-in C++ interpreter cling, the command, the
scripting and the programming language are all C++. The interpreter
allows for fast prototyping of the macros since it removes the, time
consuming, compile/link cycle. It also provides a good environment to
learn C++. If more performance is needed the interactively developed
macros can be compiled using a C++ compiler via a machine independent
transparent compiler interface called ACliC.
The system has been designed in such a way that it can query its
databases in parallel on clusters of workstations or many-core
machines. ROOT is an open system that can be dynamically extended by
linking external libraries. This makes ROOT a premier platform on
which to build data acquisition, simulation and data analysis systems.
--------------------------------------------------------------------------------
Update Information:
ROOT 6.16.00 https://root.cern/content/release-61600
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 18 2019 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 6.16.00-3
- Fix typo in patch (missing space)
* Sun Feb 17 2019 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 6.16.00-2
- Rebuild for readline 8.0
* Mon Feb 11 2019 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 6.16.00-1
- Update to 6.16.00
- Drop patches accepted upstream:
- root-adjust-allowed-test-difference-for-32-bit-ix86.patch
- root-crypto.patch
- root-js-syntax.patch
- root-missing-header.patch
- root-set-cache-file-dir.patch
- root-stressgraphics-ref.patch
- root-test-compilation-epel7.patch
- root-test-subdirs.patch
- root-unique-filenames.patch
- Dropped subpackages:
- root-rootd (obsolete - use xrootd)
- root-proofd (obsolete - use root-xproofd)
- root-proof-pq2
- New ROOT 7 subpackage:
- root-graf3d-eve7
- root-gui-webgui6
- Make tutorial/v7/line.cxx run in batch mode
* Mon Feb 4 2019 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 6.14.08-4
- Remove obsolete /sbin/ldconfig scriptlets
- The root-core package installs a file in /etc/ld.so.conf.d, so it should
always call /sbin/ldconfig and not use the macros
* Sat Feb 2 2019 Fedora Release Engineering <releng(a)fedoraproject.org>
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Mon Jan 14 2019 Bj��rn Esser <besser82(a)fedoraproject.org> - 6.14.08-2
- Rebuilt for libcrypt.so.2 (#1666033)
* Fri Nov 23 2018 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 6.14.08-1
- Update to 6.14.08
- Make tutorial filenames unique to avoid overwrites
* Tue Nov 6 2018 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 6.14.06-1
- Update to 6.14.06
- Let clang ignore some gcc options it hasn't implemented
- Don't build python2-jupyroot/jsmva packages for Fedora >= 29
- Drop previously backported patch root-TGHtmlBrowser-crash.patch
* Thu Oct 25 2018 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 6.14.04-3
- Fix crash in TBrowser when root-gui-html is not installed
- Use empty .egg-info files instead of empty .dist-info files to make
virtualenv happy
- Add Requires on root-mathmore to root-mathcore (for default integrator)
* Sat Oct 13 2018 Jerry James <loganjerry(a)gmail.com> - 6.14.04-2
- Rebuild for tbb 2019_U1
* Fri Aug 24 2018 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 6.14.04-1
- Update to 6.14.04
- Drop patch accepted upstream: root-python-3.7.patch
* Thu Aug 23 2018 Nicolas Chauvet <kwizart(a)gmail.com> - 6.14.02-2
- Rebuilt for glew 2.1.0
* Mon Aug 6 2018 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 6.14.02-1
- Update to 6.14.02
- Make python3 the preferred python for Fedora 29+:
- Give python3 libPyROOT higher priority than python2 libPyROOT
- The python scripts in root-cli use python3-root
- Let root-tmva-python use python3-numpy
- Fix build issue with undefined symbols in libSrvAuth
- Make ROOTConfig-targets.cmake not error on missing files to work better with
subpackages
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.14.00-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Thu Jul 12 2018 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 6.14.00-2
- Add Python 3.6 packages for EPEL 7
* Sun Jul 1 2018 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 6.14.00-1
- Update to 6.14.00
- Drop patches previously backported:
- root-doxygen-makefile.patch
- root-crash-fix.patch
- root-test-stress-32bit.patch
- Drop patches accepted upstream:
- root-test-subdirs.patch
- root-test-fixes.patch
- root-out-of-bounds.patch
- root-doxygen-tilde.patch
- root-noinst.patch
- Drop patches for issues fixed upstream:
- root-dont-link-jvm.patch
- root-system-pythia.patch
- Drop patch root-urw-otf-hack.patch - broken font file no longer present
- Drop Google Droid Sans Fallback font from EPEL 7 root-fonts package
(the font is now available in EPEL 7)
- Use two more patches from Fedora's llvm5.0 package
- New root-test-subdirs.patch patch for more instances of the same issue
- Fix a test not setting cache file directory so that it works offline
- Fix a compatibility issue with the EPEL 7 gtest version
- Fix a missing include
- Workaround optimization problems in the Geom library
- New subpackages due to library splits
- root-tree-dataframe and root-vecops from root-tree-player
- root-net-httpsniff from root-net-http
- New subpackages due to package splits
- root-gui-html from root-gui
- root-gui-qtgsi from root-gui-qt
- root-io-xmlparser from root-io-xml
- root-proof-player from root-proof
- New ROOT 7 subpackages
- root-graf-gpadv7
- root-graf-primitives
- root-gui-fitpanelv7
- root-gui-qt5webdisplay
- Rename root-guibuilder package to root-gui-builder
- Create empty .dist-info files so that rpm auto-generates provides
* Sat Jun 30 2018 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 6.12.06-5
- Adjust Vavilov test for Fedora 29 ix86
- Adapt to python 3.7
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 6.12.06-4
- Rebuilt for Python 3.7
* Sat May 26 2018 Christian Dersch <lupinix(a)mailbox.org> - 6.12.06-3
- rebuilt for cfitsio 3.450
- Adjust allowed deviation for PDF file sizes in stressGraphics test (aarch64)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1678129 - Typo in root-config
https://bugzilla.redhat.com/show_bug.cgi?id=1678129
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-28fe03887c' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 2 months