[SECURITY] Fedora 30 Update: libtiff-4.0.10-5.fc30
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-fa3e40f00a
2019-06-28 16:33:11.414054
--------------------------------------------------------------------------------
Name : libtiff
Product : Fedora 30
Version : 4.0.10
Release : 5.fc30
URL : http://www.simplesystems.org/libtiff/
Summary : Library of functions for manipulating TIFF format image files
Description :
The libtiff package contains a library of functions for manipulating
TIFF (Tagged Image File Format) image format files. TIFF is a widely
used file format for bitmapped images. TIFF files usually end in the
.tif extension and they are often quite large.
The libtiff package should be installed if you need to manipulate TIFF
format image files.
--------------------------------------------------------------------------------
Update Information:
Fix for **CVE-2018-19210**.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 12 2019 Nikola Forr�� <nforro(a)redhat.com> - 4.0.10-5
- Fix CVE-2018-19210 (#1649387)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1649387 - CVE-2018-19210 libtiff: NULL pointer dereference in TIFFWriteDirectorySec function in tif_dirwrite.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1649387
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-fa3e40f00a' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 10 months
Fedora 30 Update: libblockdev-2.22-1.fc30
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-292a7fc61f
2019-06-28 16:33:11.414042
--------------------------------------------------------------------------------
Name : libblockdev
Product : Fedora 30
Version : 2.22
Release : 1.fc30
URL : https://github.com/storaged-project/libblockdev
Summary : A library for low-level manipulation with block devices
Description :
The libblockdev is a C library with GObject introspection support that can be
used for doing low-level operations with block devices like setting up LVM,
BTRFS, LUKS or MD RAID. The library uses plugins (LVM, BTRFS,...) and serves as
a thin wrapper around its plugins' functionality. All the plugins, however, can
be used as standalone libraries. One of the core principles of libblockdev is
that it is stateless from the storage configuration's perspective (e.g. it has
no information about VGs when creating an LV).
--------------------------------------------------------------------------------
Update Information:
New upstream release 2.22 containing mostly bugfixes and memory leaks fixes.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 12 2019 Vojtech Trefny <vtrefny(a)redhat.com> - 2.22-1
- tests: Fix Debian testing "version" for skipping (vtrefny)
- module: Fix libkmod related leak (tbzatek)
- btrfs: Fix number of memory leaks (tbzatek)
- mdraid: Fix leaking BDMDExamineData.metadata (tbzatek)
- mdraid: Fix leaking error (tbzatek)
- part: Fix leaking string in args (tbzatek)
- ext: Fix leaking string (tbzatek)
- part: Fix leaking objects (tbzatek)
- kbd: Fix g_match_info_fetch() leaks (tbzatek)
- ext: Fix g_match_info_fetch() leaks (tbzatek)
- ext: Fix g_strsplit() leaks (tbzatek)
- s390: Fix g_strsplit() leaks (tbzatek)
- mdraid: Fix g_strsplit() leaks (tbzatek)
- exec: Fix some memory leaks (tbzatek)
- lvm: Fix leaking BDLVMPVdata.vg_uuid (tbzatek)
- lvm: Use g_ptr_array_free() for creating lists (tbzatek)
- lvm: Fix some obvious memory leaks (tbzatek)
- Remove device-mapper-multipath dependency from fs and part plugins (vtrefny)
- bd_fs_xfs_get_info: Allow passing error == NULL (tbzatek)
- tests: Fix removing targetcli lun (vtrefny)
- Use existing cryptsetup API for changing keyslot passphrase (vtrefny)
- New function to get supported sector sizes for NVDIMM namespaces (vtrefny)
- Allow skiping tests only based on architecture (vtrefny)
- Sync spec file with python2 obsoletion added downstream (awilliam)
- Sync spec with downstream (vtrefny)
* Tue Apr 16 2019 Vojtech Trefny <vtrefny(a)redhat.com> - 2.21-3
- Remove device-mapper-multipath dependency from fs and part plugins
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-292a7fc61f' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 10 months
Fedora 30 Update: perl-Regexp-Pattern-0.2.9-1.fc30
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-e1d260b112
2019-06-28 16:33:11.414031
--------------------------------------------------------------------------------
Name : perl-Regexp-Pattern
Product : Fedora 30
Version : 0.2.9
Release : 1.fc30
URL : https://metacpan.org/release/Regexp-Pattern
Summary : Collection of regexp patterns
Description :
Regexp::Pattern is a convention for organizing reusable regexp patterns in modules.
--------------------------------------------------------------------------------
Update Information:
Update to perl-Regexp-Pattern-0.2.9, see
https://metacpan.org/changes/distribution/Regexp-Pattern for details.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 10 2019 Sandro Mani <manisandro(a)gmail.com> - 0.2.9-1
- Update to 0.2.9
* Fri May 31 2019 Jitka Plesnikova <jplesnik(a)redhat.com> - 0.2.8-3
- Perl 5.30 rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1718709 - perl-Regexp-Pattern-0.2.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1718709
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-e1d260b112' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 10 months
Fedora 30 Update: php-symfony4-4.2.9-1.fc30
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-69de52b207
2019-06-28 16:33:11.414011
--------------------------------------------------------------------------------
Name : php-symfony4
Product : Fedora 30
Version : 4.2.9
Release : 1.fc30
URL : https://symfony.com
Summary : Symfony PHP framework (version 4)
Description :
Symfony PHP framework (version 4).
NOTE: Does not require PHPUnit bridge.
--------------------------------------------------------------------------------
Update Information:
**Version 4.2.9** (2019-05-28) * bug #31584 [Workflow] Do not trigger extra
guards (lyrixx) * bug #31632 [Messenger] Use "real" memory usage to honor
--memory-limit (chalasr) * bug #31599 [Translation] Fixed issue with new vs old
TranslatorInterface in TranslationDataCollector (althaus) * bug #31349
[WebProfilerBundle] Use absolute URL for profiler links (Alumbrados) * bug
#31541 [DI] fix using bindings with locators of service subscribers (nicolas-
grekas) * bug #31568 [Process] Fix infinite waiting for stopped process
(mshavliuk) * bug #31551 [ProxyManager] isProxyCandidate() does not take into
account interfaces (andrerom) * bug #31335 [Doctrine] Respect parent class
contract in ContainerAwareEventManager (Koc) * bug #31421
[Routing][AnnotationClassLoader] fix utf-8 encoding in default route name
(przemyslaw-bogusz) * bug #31510 Use the current working dir as default first
arg in 'link' binary (lyrixx) * bug #31524 [HttpFoundation] prevent deprecation
when filesize matches error code (xabbuh) * bug #31535 [Debug] Wrap call to
require_once in a try/catch (lyrixx) * bug #31477 [PropertyAccess] Add missing
property to PropertyAccessor (vudaltsov) * bug #31479 [Cache] fix saving
unrelated keys in recursive callback calls (nicolas-grekas) * bug #31438
[Serializer] Fix denormalization of object with variadic constructor typed
argument (ajgarlag) * bug #31445 [Messenger] Making cache rebuild correctly
when message subscribers change (weaverryan) * bug #31442 [Validator] Fix
finding translator parent definition in compiler pass (deguif) * bug #31475
[HttpFoundation] Allow set 'None' on samesite cookie flag (markitosgv) * bug
#31456 Remove deprecated usage of some Twig features (fabpot) * bug #31207
[Routing] Fixed unexpected 404 NoConfigurationException (yceruto) * bug #31261
[Console] Commands with an alias should not be recognized as ambiguous when
using register (Simperfit) * bug #31371 [DI] Removes number of elements
information in debug mode (jschaedl) * bug #31418 [FrameworkBundle] clarify the
possible class/interface of the cache (xabbuh) * bug #31411 [Intl] Fix root
fallback locale (ro0NL) * bug #31377 [Console] Fix auto-complete for
ChoiceQuestion (multi-select answers) (battye) * bug #31380 [WebProfilerBundle]
Don't filter submitted IP values (javiereguiluz)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 4 2019 Remi Collet <remi(a)remirepo.net> - 4.2.9-1
- update to 4.2.9
- raise dependency on twig 1.41
- raise dependency on contracts 1.1.1
* Thu May 2 2019 Remi Collet <remi(a)remirepo.net> - 4.2.8-1
- update to 4.2.8
- raise dependency on twig 1.40
* Thu Apr 18 2019 Remi Collet <remi(a)remirepo.net> - 4.2.7-2
- validator requires translation (from Koschei)
* Thu Apr 18 2019 Remi Collet <remi(a)remirepo.net> - 4.2.7-1
- update to 4.2.7
* Tue Apr 16 2019 Remi Collet <remi(a)remirepo.net> - 4.2.6-1
- update to 4.2.6
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-69de52b207' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 10 months
Fedora 30 Update: pngquant-2.12.3-1.fc30
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-e3e5e4a906
2019-06-28 16:33:11.413886
--------------------------------------------------------------------------------
Name : pngquant
Product : Fedora 30
Version : 2.12.3
Release : 1.fc30
URL : http://pngquant.org
Summary : PNG quantization tool for reducing image file size
Description :
pngquant converts 24/32-bit RGBA PNG images to 8-bit palette with alpha channel
preserved. Such images are compatible with all modern web browsers and a
compatibility setting is available to help transparency degrade well in
Internet Explorer 6. Quantized files are often 40-70 percent smaller than
their 24/32-bit version. pngquant uses the median cut algorithm.
--------------------------------------------------------------------------------
Update Information:
Update to libimagequant-2.12.3 and pngquant-2.12.3, see
https://github.com/ImageOptim/libimagequant/compare/2.12.2...2.12.3 and
https://github.com/kornelski/pngquant/compare/2.12.2...2.12.3 for details
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 27 2019 Sandro Mani <manisandro(a)gmail.com< - 2.12.3-1
- Update to 2.12.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1713249 - libimagequant-2.12.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1713249
[ 2 ] Bug #1713273 - pngquant-2.12.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1713273
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-e3e5e4a906' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 10 months
Fedora 29 Update: electron-cash-4.0.7-3.fc29
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-55b61dd0de
2019-06-28 05:20:24.267534
--------------------------------------------------------------------------------
Name : electron-cash
Product : Fedora 29
Version : 4.0.7
Release : 3.fc29
URL : https://electroncash.org/
Summary : A lightweight Bitcoin Cash client
Description :
Electron Cash is an easy to use Bitcoin Cash client. It protects you from losing
coins in a backup mistake or computer failure, because your wallet can
be recovered from a secret phrase that you can write on paper or learn
by heart. There is no waiting time when you start the client, because
it does not download the Bitcoin block chain.
--------------------------------------------------------------------------------
Update Information:
Fixed dependencies a second time ---- Added missing dependencies
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 25 2019 Jonny Heggheim <hegjon(a)gmail.com> - 4.0.7-3
- Added missing dependency on python3-qt5
* Mon Jun 24 2019 Jonny Heggheim <hegjon(a)gmail.com> - 4.0.7-2
- Added missing dependencies
* Fri Jun 21 2019 Jonny Heggheim <hegjon(a)gmail.com> - 4.0.7-1
- Updated to version 4.0.7
* Thu Jun 6 2019 Jonny Heggheim <hegjon(a)gmail.com> - 4.0.6-1
- Updated to version 4.0.6
* Mon May 27 2019 Jonny Heggheim <hegjon(a)gmail.com> - 4.0.5-1
- Updated to version 4.0.5
* Mon May 27 2019 Jonny Heggheim <hegjon(a)gmail.com> - 4.0.4-1
- Updated to version 4.0.4
* Wed May 22 2019 Jonny Heggheim <hegjon(a)gmail.com> - 4.0.3-1
- Updated to version 4.0.3
* Sat Apr 20 2019 Jonny Heggheim <hegjon(a)gmail.com> - 4.0.2-1
- Updated to version 4.0.2
* Thu Apr 4 2019 Jonny Heggheim <hegjon(a)gmail.com> - 4.0.1-1
- Updated to version 4.0.1
* Tue Apr 2 2019 Jonny Heggheim <hegjon(a)gmail.com> - 4.0.0-2
- Added dependency on libsecp256k1 because of CashShuffle
* Sat Mar 30 2019 Jonny Heggheim <hegjon(a)gmail.com> - 4.0.0-1
- Updated to version 4.0.0
* Mon Feb 25 2019 Jonny Heggheim <hegjon(a)gmail.com> - 3.3.6-2
- Disabled optional requires qdarkstyle that is not packed for Fedora
* Sun Feb 24 2019 Jonny Heggheim <hegjon(a)gmail.com> - 3.3.6-1
- Updated to version 3.3.6
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.3.5-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Fri Jan 25 2019 Jonny Heggheim <hegjon(a)gmail.com> - 3.3.5-3
- Add python3-pycryptodomex as requires
* Fri Jan 25 2019 Jonny Heggheim <hegjon(a)gmail.com> - 3.3.5-2
- Bumped the version requires for python3-trezor
* Fri Jan 25 2019 Jonny Heggheim <hegjon(a)gmail.com> - 3.3.5-1
- Updated to version 3.3.5
* Sat Dec 29 2018 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 3.3.4-2
- Enable python dependency generator
* Sat Dec 29 2018 Jonny Heggheim <hegjon(a)gmail.com> - 3.3.4-1
- Updated to version 3.3.4
* Wed Nov 14 2018 Jonny Heggheim <hegjon(a)gmail.com> - 3.3.2-1
- Updated to version 3.3.2
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-55b61dd0de' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 10 months
Fedora 29 Update: beakerlib-libraries-0.4-2.fc29
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-67674e8a57
2019-06-28 05:20:24.267524
--------------------------------------------------------------------------------
Name : beakerlib-libraries
Product : Fedora 29
Version : 0.4
Release : 2.fc29
URL : https://pagure.io/beakerlib-libraries/
Summary : Beakerlib libraries
Description :
Beakerlib Libraries are used by beakerlib tests to encapsulate common complex
tasks such as configuring and starting a particular daemon in a single
function.
--------------------------------------------------------------------------------
Update Information:
Change .spec
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 20 2019 Andrei Stepanov <astepano(a)redhat.com> - 0.4-2
- Build with AutoReq: no
* Fri Mar 22 2019 Andrei Stepanov <astepano(a)redhat.com> - 0.4-1
- Build with the latest merged PRs.
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-67674e8a57' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 10 months
Fedora 29 Update: python-glad-0.1.30-1.fc29
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-1f767abd3f
2019-06-28 05:20:24.267514
--------------------------------------------------------------------------------
Name : python-glad
Product : Fedora 29
Version : 0.1.30
Release : 1.fc29
URL : https://github.com/Dav1dde/glad
Summary : Multi-Language GL/GLES/EGL/GLX/WGL Loader-Generator
Description :
Glad uses the official Khronos-XML specs to generate a GL/GLES/EGL/GLX/WGL
Loader made for your needs.
--------------------------------------------------------------------------------
Update Information:
Initial package.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1720575 - Review Request: python-glad - Multi-Language GL/GLES/EGL/GLX/WGL Loader-Generator
https://bugzilla.redhat.com/show_bug.cgi?id=1720575
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-1f767abd3f' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 10 months
Fedora 29 Update: R-rcmdcheck-1.3.3-1.fc29
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-3a8dd760ee
2019-06-28 05:20:24.267505
--------------------------------------------------------------------------------
Name : R-rcmdcheck
Product : Fedora 29
Version : 1.3.3
Release : 1.fc29
URL : https://CRAN.R-project.org/package=rcmdcheck
Summary : Run 'R CMD check' from 'R' and Capture Results
Description :
Run 'R CMD check' from 'R' and capture the results of the individual checks.
Supports running checks in the background, timeouts, pretty printing and
comparing check results.
--------------------------------------------------------------------------------
Update Information:
Initial package of rcmdcheck for R
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1721338 - Review Request: R-rcmdcheck - Run 'R CMD check' from 'R' and Capture Results
https://bugzilla.redhat.com/show_bug.cgi?id=1721338
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-3a8dd760ee' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 10 months