The following Fedora 31 Security updates need testing:
Age URL
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c2d7f79309
cobbler-2.8.5-0.1.fc31
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6c96156c32
libgcrypt-1.8.5-1.fc31
11
https://bodhi.fedoraproject.org/updates/FEDORA-2019-5e54d5e6e9 ceph-14.2.3-1.fc31
11
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b467cab3c8
libextractor-1.9-5.fc31
11
https://bodhi.fedoraproject.org/updates/FEDORA-2019-1f604fd2f2
sphinx-2.2.11-13.fc31
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-50772cf122
python34-3.4.10-6.fc31
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-db06efdea1
compat-openssl10-1.0.2o-8.fc31
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-283364c6c0 libldb-2.0.7-1.fc31
libtalloc-2.3.0-1.fc31 libtevent-0.10.1-1.fc31 samba-4.11.0-0.2.rc4.fc31
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9e7112d917
thunderbird-68.1.0-1.fc31
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6d7f6fa2c8 curl-7.66.0-1.fc31
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c10700afdc ibus-1.5.21-2.fc31
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-27b9b94805
ImageMagick-6.9.10.64-1.fc31 rubygem-rmagick-2.16.0-24.fc31
The following Fedora 31 Critical Path updates have yet to be approved:
Age URL
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c20178ff19
python-mako-1.1.0-1.fc31
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-7d3c593f14
nfs-utils-2.4.1-1.rc1.fc31
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6a014367d5 qemu-4.1.0-2.fc31
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ec7e021ac5
iio-sensor-proxy-2.8-1.fc31
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6c96156c32
libgcrypt-1.8.5-1.fc31
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c08d442307
python-setuptools-41.2.0-1.fc31
11
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e0b7f56338
osinfo-db-20190905-1.fc31
11
https://bodhi.fedoraproject.org/updates/FEDORA-2019-78258f7c6c
libtirpc-1.1.4-2.rc3.fc31
11
https://bodhi.fedoraproject.org/updates/FEDORA-2019-5e54d5e6e9 ceph-14.2.3-1.fc31
11
https://bodhi.fedoraproject.org/updates/FEDORA-2019-df0cce6aa6
zlib-1.2.11-19.fc31
10
https://bodhi.fedoraproject.org/updates/FEDORA-2019-db2ac622a4
vim-8.1.1991-2.fc31
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8ad723bc14
cryptsetup-2.2.1-1.fc31
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-899f87aa32
edk2-20190501stable-4.fc31
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-7f3b0141bf
libdbusmenu-16.04.0-14.fc31
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e150bdda78
libblockdev-2.23-1.fc31
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-baa72d3408
pungi-4.1.39-1.fc31
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-f415c367b9
libvirt-5.6.0-2.fc31
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4e4a94b093
perl-5.30.0-446.fc31
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-db06efdea1
compat-openssl10-1.0.2o-8.fc31
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6c6582bafc
xorg-x11-server-1.20.5-7.fc31
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-05938d7bcb
util-linux-2.34-3.fc31
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-283364c6c0 libldb-2.0.7-1.fc31
libtalloc-2.3.0-1.fc31 libtevent-0.10.1-1.fc31 samba-4.11.0-0.2.rc4.fc31
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c10700afdc ibus-1.5.21-2.fc31
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6d7f6fa2c8 curl-7.66.0-1.fc31
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3de16ce9a3 grilo-0.3.10-1.fc31
grilo-plugins-0.3.10-1.fc31
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8faf889e73 cups-2.2.12-2.fc31
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9e7112d917
thunderbird-68.1.0-1.fc31
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-329a9b6fb1
mesa-19.2.0~rc3-1.fc31
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4d1121ce8e
libwacom-1.1-1.fc31
The following builds have been pushed to Fedora 31 updates-testing
brewtarget-2.1.0-13.fc31
conda-4.7.12-1.fc31
criu-3.13-5.fc31
elementary-files-4.2.0-1.fc31
expat-2.2.8-1.fc31
fleet-commander-admin-0.14.1-1.fc31
freeipmi-1.6.4-1.fc31
glusterfs-7.0-0.4rc1.fc31
gnome-feeds-0.10-2.fc31
gnome-shell-extension-desktop-icons-19.01.4-4.fc31
gns3-server-2.1.16-7.fc31
golang-github-azure-amqp-common-2.1.0-1.fc31
golang-github-azure-service-bus-0.9.1-1.fc31
golang-github-devigned-tab-0.1.2-1.fc31
golang-github-gobuffalo-logger-1.0.1-1.fc31
golang-github-gobuffalo-packd-0.3.0-1.fc31
golang-github-google-replayers-0.1.0-1.fc31
golang-github-google-wire-0.3.0-1.fc31
golang-github-tidwall-pretty-1.0.0-1.fc31
golang-gitlab-yawning-utls-0.0.11-1.1.fc31
golang-pack-amqp-0.12.0-1.fc31
golang-x-xerrors-0-0.1.20190916gita985d34.fc31
gramps-5.1.1-1.fc31
hydrapaper-1.9.4-1.fc31
java-1.8.0-openjdk-aarch32-1.8.0.222.b10-1.fc31
keepassxc-2.4.3-5.fc31
libarchive-3.4.0-1.fc31
libdnf-0.35.3-5.fc31
libfilezilla-0.18.2-1.fc31
libical-3.0.6-1.fc31
libmediainfo-19.09-1.fc31
mediaconch-18.03.2-10.fc31
mediainfo-19.09-1.fc31
netdata-1.17.1-1.fc31
openssl-1.1.1d-1.fc31
pcre2-10.33-14.fc31
perl-Carp-Clan-6.08-1.fc31
perl-DateTime-Format-Flexible-0.32-1.fc31
perl-MCE-1.860-1.fc31
perl-MCE-Shared-1.860-1.fc31
php-horde-Horde-Imap-Client-2.29.18-1.fc31
php-phpseclib-2.0.22-1.fc31
php-sebastian-exporter3-3.1.2-1.fc31
phpunit7-7.5.16-1.fc31
phpunit8-8.3.5-1.fc31
pipewire-0.2.6-5.fc31
python-pysimplesoap-1.16.2-4.fc31
python-tinydb-3.14.2-1.fc31
reposurgeon-3.47-1.fc31
rpkg-1.59-1.fc31
selinux-policy-3.14.4-33.fc31
srt-1.4.0-1.fc31
tcpdump-4.9.2-9.fc31
vala-0.46.1-1.fc31
xdg-desktop-portal-1.4.2-3.fc31
Details about builds:
================================================================================
brewtarget-2.1.0-13.fc31 (FEDORA-2019-673ecae185)
An open source beer recipe creation tool
--------------------------------------------------------------------------------
Update Information:
Fix FTBFS bug #1734987
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 16 2019 Kevin Fenzi <kevin(a)scrye.com> - 2.1.0-13
- Fix FTBFS bug #1734987
* Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.1.0-12
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.1.0-11
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.1.0-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.1.0-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1734987 - brewtarget: FTBFS in Fedora rawhide/f31
https://bugzilla.redhat.com/show_bug.cgi?id=1734987
--------------------------------------------------------------------------------
================================================================================
conda-4.7.12-1.fc31 (FEDORA-2019-d9ef3b2499)
Cross-platform, Python-agnostic binary package manager
--------------------------------------------------------------------------------
Update Information:
Update to 4.7.12
--------------------------------------------------------------------------------
ChangeLog:
* Sat Sep 14 2019 Orion Poplawski <orion(a)nwra.com> - 4.7.12-1
- Update to 4.7.12
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 4.7.11-2
- Rebuilt for Python 3.8
--------------------------------------------------------------------------------
================================================================================
criu-3.13-5.fc31 (FEDORA-2019-fc83019864)
Tool for Checkpoint/Restore in User-space
--------------------------------------------------------------------------------
Update Information:
Update to 3.13 (#1751146) ---- Update to 3.13 (#1751146)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 16 2019 Adrian Reber <adrian(a)lisas.de> - 3.13-5
- Update to 3.13 (#1751146)
- Drop upstreamed patches
- Drop static library
- Add compel man-page
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 3.12-14
- Rebuilt for Python 3.8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1751146 - criu-3.13 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1751146
--------------------------------------------------------------------------------
================================================================================
elementary-files-4.2.0-1.fc31 (FEDORA-2019-acaa5f9f22)
File manager from elementary
--------------------------------------------------------------------------------
Update Information:
Update to version 4.2.0. Release notes:
https://github.com/elementary/files/releases/tag/4.2.0
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 16 2019 Fabio Valentini <decathorpe(a)gmail.com> - 4.2.0-1
- Update to version 4.2.0.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1750592 - elementary-files-4.2.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1750592
--------------------------------------------------------------------------------
================================================================================
expat-2.2.8-1.fc31 (FEDORA-2019-613edfe68b)
An XML parser library
--------------------------------------------------------------------------------
Update Information:
This update of `expat` fixes the following security issue: * **CVE-2019-15903**
-- Fix heap overflow triggered by `XML_GetCurrentLineNumber` (or
`XML_GetCurrentColumnNumber`), and deny internal entities closing the doctype
The following bug fixes are also included: * Fix cases where `XML_StopParser`
did not have any effect when called from inside of an end element handler *
xmlwf: Fix exit code for operation without "`-d DIRECTORY`" previously, only
"`-d DIRECTORY`" would give you a proper exit code
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 16 2019 Joe Orton <jorton(a)redhat.com> - 2.2.8-1
- update to 2.2.8 (#1752167)
--------------------------------------------------------------------------------
================================================================================
fleet-commander-admin-0.14.1-1.fc31 (FEDORA-2019-0a0c74828e)
Fleet Commander
--------------------------------------------------------------------------------
Update Information:
Updated to version 0.14.1
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 16 2019 Oliver Gutierrez <ogutierrez(a)redhat.com> - 0.14.1-1
- Updated to version 0.14.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1671754 - Fleet Commander not available to install as Cockpit add-on in GNOME
Software anymore
https://bugzilla.redhat.com/show_bug.cgi?id=1671754
--------------------------------------------------------------------------------
================================================================================
freeipmi-1.6.4-1.fc31 (FEDORA-2019-08191835e7)
IPMI remote console and system management software
--------------------------------------------------------------------------------
Update Information:
from NEWS: ####FreeIPMI 1.6.4 - 08/23/19 - In libfreeipmi, add additional
workarounds for packets that are re-ordered during sensor bridging. - In
libfreeipmi, add additional sensor / event interpretations. - In libfreeipmi,
fix error return value on bridging requests. - Add workaround in ipmi-sel for
QuantaPlex T42D-2U motherboard, which lists a SDR record that makes no sense.
- Add workaround for Dell Poweredge FC830, which have an error when reading
the last SDR record on a motherboard. - Support Supermicro X10 OEM dimm events.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 11 2019 Vaclav Dolezal <vdolezal(a)redhat.com> - 1.6.4-1
- New upstream release 1.6.4
--------------------------------------------------------------------------------
================================================================================
glusterfs-7.0-0.4rc1.fc31 (FEDORA-2019-205c852f37)
Distributed File System
--------------------------------------------------------------------------------
Update Information:
disable gnfs by default ---- 7.0 RC1
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 16 2019 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 7.0-0.4rc1
- disable gnfs by default
* Mon Sep 16 2019 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 7.0-0.3rc1
- 7.0 RC1
* Wed Aug 28 2019 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 7.0-0.2rc0
- python3-requests, el-8
--------------------------------------------------------------------------------
================================================================================
gnome-feeds-0.10-2.fc31 (FEDORA-2019-8b78093b86)
RSS/Atom feed reader for GNOME
--------------------------------------------------------------------------------
Update Information:
Add missed Requires ---- Update to latest version ---- Update to latest
version
--------------------------------------------------------------------------------
================================================================================
gnome-shell-extension-desktop-icons-19.01.4-4.fc31 (FEDORA-2019-75bf7cb279)
GNOME Shell extension for providing desktop icons
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1752292 - Review Request: gnome-shell-extension-desktop-icons - GNOME Shell
extension for providing desktop icons
https://bugzilla.redhat.com/show_bug.cgi?id=1752292
--------------------------------------------------------------------------------
================================================================================
gns3-server-2.1.16-7.fc31 (FEDORA-2019-ecd99aebf7)
Graphical Network Simulator 3
--------------------------------------------------------------------------------
Update Information:
Add back Docker support (rhbz #1570826)
--------------------------------------------------------------------------------
ChangeLog:
* Sun Sep 15 2019 Othman Madjoudj <athmane(a)fedoraproject.org> - 2.1.16-7
- Add back Docker support (rhbz #1570826)
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 2.1.16-5
- Rebuilt for Python 3.8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1570826 - Docker helper script and needed tools are missing.
https://bugzilla.redhat.com/show_bug.cgi?id=1570826
--------------------------------------------------------------------------------
================================================================================
golang-github-azure-amqp-common-2.1.0-1.fc31 (FEDORA-2019-cee38436ca)
Common types and interfaces for Service Bus and Event Hubs
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1743847 - Review Request: golang-github-azure-amqp-common - Common types and
interfaces for use in Service Bus and Event Hubs
https://bugzilla.redhat.com/show_bug.cgi?id=1743847
--------------------------------------------------------------------------------
================================================================================
golang-github-azure-service-bus-0.9.1-1.fc31 (FEDORA-2019-7292834d16)
Golang library for Azure Service Bus
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1743856 - Review Request: golang-github-azure-service-bus - Golang library
for Azure Service Bus
https://bugzilla.redhat.com/show_bug.cgi?id=1743856
--------------------------------------------------------------------------------
================================================================================
golang-github-devigned-tab-0.1.2-1.fc31 (FEDORA-2019-5d83e1ec77)
OpenTracing and OpenCensus abstraction for tracing and logging
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1743809 - Review Request: golang-github-devigned-tab - OpenTracing and
OpenCensus abstraction for tracing and logging
https://bugzilla.redhat.com/show_bug.cgi?id=1743809
--------------------------------------------------------------------------------
================================================================================
golang-github-gobuffalo-logger-1.0.1-1.fc31 (FEDORA-2019-d7bbaff44b)
Common logging interface for the Buffalo ecosystem
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1744085 - Review Request: golang-github-gobuffalo-logger - Common logging
interface for the Buffalo ecosystem
https://bugzilla.redhat.com/show_bug.cgi?id=1744085
--------------------------------------------------------------------------------
================================================================================
golang-github-gobuffalo-packd-0.3.0-1.fc31 (FEDORA-2019-7ea82b2b38)
Gobuffalo/packr interfaces
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1744087 - Review Request: golang-github-gobuffalo-packd - Gobuffalo/packr
interfaces
https://bugzilla.redhat.com/show_bug.cgi?id=1744087
--------------------------------------------------------------------------------
================================================================================
golang-github-google-replayers-0.1.0-1.fc31 (FEDORA-2019-1885b92d8c)
Go Tools for Recording and Replaying RPCs
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1743859 - Review Request: golang-github-google-replayers - Go Tools for
Recording and Replaying RPCs
https://bugzilla.redhat.com/show_bug.cgi?id=1743859
--------------------------------------------------------------------------------
================================================================================
golang-github-google-wire-0.3.0-1.fc31 (FEDORA-2019-76ebc8005a)
Compile-time Dependency Injection for Go
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1743861 - Review Request: golang-github-google-wire - Compile-time Dependency
Injection for Go
https://bugzilla.redhat.com/show_bug.cgi?id=1743861
--------------------------------------------------------------------------------
================================================================================
golang-github-tidwall-pretty-1.0.0-1.fc31 (FEDORA-2019-bed195af28)
Efficient JSON beautifier and compactor for Go
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1744158 - Review Request: golang-github-tidwall-pretty - Efficient JSON
beautifier and compactor for Go
https://bugzilla.redhat.com/show_bug.cgi?id=1744158
--------------------------------------------------------------------------------
================================================================================
golang-gitlab-yawning-utls-0.0.11-1.1.fc31 (FEDORA-2019-ef6fe69d49)
Fork of the Go standard TLS library, providing access to the ClientHello
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1738685 - Review Request: golang-gitlab-yawning-utls - Fork of the Go
standard TLS library, providing access to the ClientHello
https://bugzilla.redhat.com/show_bug.cgi?id=1738685
--------------------------------------------------------------------------------
================================================================================
golang-pack-amqp-0.12.0-1.fc31 (FEDORA-2019-b908b3c877)
AMQP 1.0 client library for Go
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1743838 - Review Request: golang-pack-amqp - AMQP 1.0 client library for Go
https://bugzilla.redhat.com/show_bug.cgi?id=1743838
--------------------------------------------------------------------------------
================================================================================
golang-x-xerrors-0-0.1.20190916gita985d34.fc31 (FEDORA-2019-a985408606)
Transition packages for the new Go 1.13 error values
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1744191 - Review Request: golang-x-xerrors - Transition packages for the new
Go 1.13 error values
https://bugzilla.redhat.com/show_bug.cgi?id=1744191
--------------------------------------------------------------------------------
================================================================================
gramps-5.1.1-1.fc31 (FEDORA-2019-3a3ef8045e)
Genealogical Research and Analysis Management Programming System
--------------------------------------------------------------------------------
Update Information:
5.1.1
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 16 2019 Gwyn Ciesla <gwync(a)protonmail.com> - 5.1.1-1
- 5.1.1
--------------------------------------------------------------------------------
================================================================================
hydrapaper-1.9.4-1.fc31 (FEDORA-2019-447383ad2e)
Set two different backgrounds for each monitor on GNOME
--------------------------------------------------------------------------------
Update Information:
Update to latest version ---- Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 16 2019 Artem Polishchuk <ego.cordatus(a)gmail.com> - 1.9.4-1
- Update to 1.9.4
* Wed Sep 4 2019 Artem Polishchuk <ego.cordatus(a)gmail.com> - 1.9.2-1
- Update to 1.9.2
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 1.9-2
- Rebuilt for Python 3.8
--------------------------------------------------------------------------------
================================================================================
java-1.8.0-openjdk-aarch32-1.8.0.222.b10-1.fc31 (FEDORA-2019-0bb3cfd816)
OpenJDK Runtime Environment 8 in a preview of the OpenJDK AArch32 project
--------------------------------------------------------------------------------
Update Information:
8u222 update
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 11 2019 Alex Kashchenko <akashche(a)redhat.com> - 1:1.8.0.222.b10-1
- update sources to 8u221
- sync with mainline package
--------------------------------------------------------------------------------
================================================================================
keepassxc-2.4.3-5.fc31 (FEDORA-2019-8bc3e73f2b)
Cross-platform password manager
--------------------------------------------------------------------------------
Update Information:
Enabled KeeShare signed sharing ---- added -DWITH_XC_KEESHARE_SECURE=ON
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 16 2019 Germano Massullo <germano.massullo(a)gmail.com> - 2.4.3-5
- Added BuildRequires: quazip-devel
* Thu Sep 5 2019 Germano Massullo <germano.massullo(a)gmail.com> - 2.4.3-4
- Added -DWITH_XC_KEESHARE_SECURE=ON
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1747700 - Compile with support for KeeShare signed sharing
https://bugzilla.redhat.com/show_bug.cgi?id=1747700
--------------------------------------------------------------------------------
================================================================================
libarchive-3.4.0-1.fc31 (FEDORA-2019-fff850860b)
A library for handling streaming archive formats
--------------------------------------------------------------------------------
Update Information:
Update to libarchive 3.4.0 * New upstream release. Adds RAR5 and ZIPX
support (readonly), 64-bit ar, improved extraction and file-attribute
support. * Switch to HTTPS URLs * Drop upstreamed security patches *
Add patch (submitted upstream) to fix zstd test when built with different
libzstd releases * Remove BuildRequires: on lzo-devel, as the release notes
for 3.3.x included a notice regarding licensing issues when linking with
liblzo. (See
https://github.com/libarchive/libarchive/releases/tag/v3.3.0)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 30 2019 FeRD (Frank Dana) <ferdnyc(a)gmail.com> - 3.4.0-1
- New upstream release, adds RAR5 and ZIPX support (readonly)
- Drop upstreamed patches
- Add upstreamed patch to fix test failure with libzstd-1.4.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1747024 - libarchive-3.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747024
--------------------------------------------------------------------------------
================================================================================
libdnf-0.35.3-5.fc31 (FEDORA-2019-7d72d1e7a5)
Library providing simplified C and Python API to libsolv
--------------------------------------------------------------------------------
Update Information:
Add WITH_ZCHUNK flag so LRO_SUPPORTS_CACHEDIR is set in librepo
--------------------------------------------------------------------------------
ChangeLog:
* Sat Sep 14 2019 Jonathan Dieter <jdieter(a)gmail.com> - 0.35.3-5
- Set LRO_CACHEDIR so zchunk works again
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1739867 - Broken support in libdnf of zchunk metadata after rebuilt for
librepo 1.10.5
https://bugzilla.redhat.com/show_bug.cgi?id=1739867
--------------------------------------------------------------------------------
================================================================================
libfilezilla-0.18.2-1.fc31 (FEDORA-2019-6aab5c38ad)
C++ Library for FileZilla
--------------------------------------------------------------------------------
Update Information:
0.18.2
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 16 2019 Gwyn Ciesla <gwync(a)protonmail.com> - 0.18.2-1
- 0.18.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1752528 - libfilezilla-0.18.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1752528
--------------------------------------------------------------------------------
================================================================================
libical-3.0.6-1.fc31 (FEDORA-2019-0f92148142)
Reference implementation of the iCalendar data type and serialization format
--------------------------------------------------------------------------------
Update Information:
Update to 3.0.6 release
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 16 2019 Milan Crha <mcrha(a)redhat.com> - 3.0.6-1
- Update to 3.0.6
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1752214 - libical-3.0.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1752214
--------------------------------------------------------------------------------
================================================================================
libmediainfo-19.09-1.fc31 (FEDORA-2019-1bf5f8ead7)
Library for supplies technical and tag information about a video or audio file
--------------------------------------------------------------------------------
Update Information:
Update mediainfo to 19.09.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Sep 13 2019 Vasiliy N. Glazov <vascom2(a)gmail.com> - 19.09-1
- Update to 19.09
--------------------------------------------------------------------------------
================================================================================
mediaconch-18.03.2-10.fc31 (FEDORA-2019-1bf5f8ead7)
Most relevant technical and tag data for video and audio files (CLI)
--------------------------------------------------------------------------------
Update Information:
Update mediainfo to 19.09.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Sep 13 2019 Vasiliy N. Glazov <vascom2(a)gmail.com> - 18.03.2-10
- Rebuild with new mediainfo 19.09
--------------------------------------------------------------------------------
================================================================================
mediainfo-19.09-1.fc31 (FEDORA-2019-1bf5f8ead7)
Supplies technical and tag information about a video or audio file (CLI)
--------------------------------------------------------------------------------
Update Information:
Update mediainfo to 19.09.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Sep 13 2019 Vasiliy N. Glazov <vascom2(a)gmail.com> - 19.09-1
- Update to 19.09
--------------------------------------------------------------------------------
================================================================================
netdata-1.17.1-1.fc31 (FEDORA-2019-5c7829e5e5)
Real-time performance monitoring
--------------------------------------------------------------------------------
Update Information:
Update from upstream ---- Update from upstream
--------------------------------------------------------------------------------
ChangeLog:
* Fri Sep 13 2019 Didier Fabert <didier.fabert(a)gmail.com> 1.17.1-1
- Update from upstream
* Sat Sep 7 2019 Didier Fabert <didier.fabert(a)gmail.com> 1.17.0-1
- Update from upstream
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1727914 - netdata-1.18.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1727914
--------------------------------------------------------------------------------
================================================================================
openssl-1.1.1d-1.fc31 (FEDORA-2019-9ab7ee6309)
Utilities from the general purpose cryptography library with TLS implementation
--------------------------------------------------------------------------------
Update Information:
Minor update release 1.1.1d with low impact security fixes.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Sep 13 2019 Tom���� Mr��z <tmraz(a)redhat.com> 1.1.1d-1
- update to the 1.1.1d release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1752102 - CVE-2019-1563 openssl: information disclosure in PKCS7_dataDecode
and CMS_decrypt_set1_pkey [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1752102
[ 2 ] Bug #1752097 - CVE-2019-1549 openssl: information disclosure in fork()
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1752097
[ 3 ] Bug #1752092 - CVE-2019-1547 openssl: side-channel weak encryption vulnerability
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1752092
[ 4 ] Bug #1751027 - openssl-1.1.1d is available
https://bugzilla.redhat.com/show_bug.cgi?id=1751027
--------------------------------------------------------------------------------
================================================================================
pcre2-10.33-14.fc31 (FEDORA-2019-038b12fa0c)
Perl-compatible regular expression library
--------------------------------------------------------------------------------
Update Information:
This release fixes a crash in JIT match when a zero-length subject has a near-
zero pointer.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 9 2019 Petr Pisar <ppisar(a)redhat.com> - 10.33-14
- Fix a crash in JIT match when a subject has a zero length and an invalid
pointer (upstream bug #2440)
--------------------------------------------------------------------------------
================================================================================
perl-Carp-Clan-6.08-1.fc31 (FEDORA-2019-4b63cf963c)
Perl module to print improved warning messages
--------------------------------------------------------------------------------
Update Information:
This release fixes tests. It also removes a code not used with current Perls.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 16 2019 Petr Pisar <ppisar(a)redhat.com> - 6.08-1
- 6.08 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1752218 - perl-Carp-Clan-6.08 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1752218
--------------------------------------------------------------------------------
================================================================================
perl-DateTime-Format-Flexible-0.32-1.fc31 (FEDORA-2019-e58fc257fc)
Flexibly parse strings and turn them into DateTime objects
--------------------------------------------------------------------------------
Update Information:
This release adds a support for offset timezones without a space separator and
formatted HH:MM, a support for negative timezone offsets in 2 and 4 digit
lengths with and without spaces.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 16 2019 Petr Pisar <ppisar(a)redhat.com> - 0.32-1
- 0.32 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1752200 - perl-DateTime-Format-Flexible-0.32 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1752200
--------------------------------------------------------------------------------
================================================================================
perl-MCE-1.860-1.fc31 (FEDORA-2019-651f86c7ba)
Many-core Engine for Perl providing parallel processing capabilities
--------------------------------------------------------------------------------
Update Information:
Enhancements in signal handling.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 16 2019 Paul Howarth <paul(a)city-fan.org> - 1.860-1
- Update to 1.860
- Signal-handling update release
- Localized input and output record separators in MCE::Channel
- IPC safety in MCE::Child during SIGINT and SIGTERM
- Method $child->exit in MCE::Child now sends the SIGINT signal for extra
reliability with MCE::Shared (previously SIGQUIT)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1752314 - perl-MCE-1.860 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1752314
--------------------------------------------------------------------------------
================================================================================
perl-MCE-Shared-1.860-1.fc31 (FEDORA-2019-651f86c7ba)
MCE extension for sharing data, supporting threads and processes
--------------------------------------------------------------------------------
Update Information:
Enhancements in signal handling.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 16 2019 Paul Howarth <paul(a)city-fan.org> - 1.860-1
- Update to 1.860
- Signal-handling update release
- SIGINT and SIGTERM safety for shared objects during IPC
- IPC safety in MCE::Hobo during SIGINT and SIGTERM
- Method $hobo->exit in MCE::Hobo now sends the SIGINT signal for extra
reliability with MCE::Shared (previously SIGQUIT)
- Bumped MCE dependency to 1.860
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1752314 - perl-MCE-1.860 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1752314
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Imap-Client-2.29.18-1.fc31 (FEDORA-2019-e80fc4a6e6)
Horde IMAP abstraction interface
--------------------------------------------------------------------------------
Update Information:
**Horde_Imap_Client 2.29.18** * [mjr] Fix LIST-STATUS parsing when using
wildcards (Bug #14937, mariusz.goch).
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 16 2019 Remi Collet <remi(a)remirepo.net> - 2.29.18-1
- update to 2.29.18
--------------------------------------------------------------------------------
================================================================================
php-phpseclib-2.0.22-1.fc31 (FEDORA-2019-1b9011a2d3)
PHP Secure Communications Library
--------------------------------------------------------------------------------
Update Information:
**Version 2.0.22** - 2019-09-15 - SSH2: backport setPreferredAlgorithms() /
getAlgorithmsNegotiated (#1156) - SSH2 / SFTP: fix issues with ping() (#1402) -
X509: IPs in nameconstraints extension include netmask (#1387) - X509: fix issue
with explicit time tags whose maps expect implicit (#1388) - BigInteger: fix bug
with toBytes() with fixed precision negative numbers - fix PHP 7.4 deprecations
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 16 2019 Remi Collet <remi(a)remirepo.net> - 2.0.22-1
- update to 2.0.22
--------------------------------------------------------------------------------
================================================================================
php-sebastian-exporter3-3.1.2-1.fc31 (FEDORA-2019-9193ebecaf)
Export PHP variables for visualization
--------------------------------------------------------------------------------
Update Information:
**Version 3.1.2** - 2019-09-14 **Fixed** * Fixed
[#29](https://github.com/sebastianbergmann/exporter/pull/29): Second parameter
for `str_repeat()` must be an integer
--------------------------------------------------------------------------------
ChangeLog:
* Sun Sep 15 2019 Remi Collet <remi(a)remirepo.net> - 3.1.2-1
- update to 3.1.2
--------------------------------------------------------------------------------
================================================================================
phpunit7-7.5.16-1.fc31 (FEDORA-2019-34d5d68a4a)
The PHP Unit Testing framework version 7
--------------------------------------------------------------------------------
Update Information:
**Version 7.5.16** - 2019-09-14 **Fixed** * Fixed
[#3801](https://github.com/sebastianbergmann/phpunit/issues/3801): Class
constant as default parameter is undefined * Fixed
[#3834](https://github.com/sebastianbergmann/phpunit/issues/3834): Trailing
slash breaks code coverage on Windows
--------------------------------------------------------------------------------
ChangeLog:
* Sun Sep 15 2019 Remi Collet <remi(a)remirepo.net> - 7.5.16-1
- update to 7.5.16
--------------------------------------------------------------------------------
================================================================================
phpunit8-8.3.5-1.fc31 (FEDORA-2019-668ba92d2e)
The PHP Unit Testing framework version 8
--------------------------------------------------------------------------------
Update Information:
**Version 8.3.5** - 2019-09-14 **Fixed** * Fixed
[#3745](https://github.com/sebastianbergmann/phpunit/issues/3745): Performance
degradation with test doubles * Fixed
[#3801](https://github.com/sebastianbergmann/phpunit/issues/3801): Class
constant as default parameter is undefined * Fixed
[#3807](https://github.com/sebastianbergmann/phpunit/pull/3807): Fixed message
of exception raised by `MockBuilder::addMethods()` * Fixed
[#3834](https://github.com/sebastianbergmann/phpunit/issues/3834): Trailing
slash breaks code coverage on Windows
--------------------------------------------------------------------------------
ChangeLog:
* Sun Sep 15 2019 Remi Collet <remi(a)remirepo.net> - 8.3.5-1
- update to 8.3.5
- raise dependency on sebastian/exporter 3.1.1
--------------------------------------------------------------------------------
================================================================================
pipewire-0.2.6-5.fc31 (FEDORA-2019-f34a1bc2cb)
Media Sharing Server
--------------------------------------------------------------------------------
Update Information:
Packaging cleanups: - Don't require the daemon package for -devel subpackage
- Move pipewire.conf man page to the daemon package
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 16 2019 Kalev Lember <klember(a)redhat.com> - 0.2.6-5
- Don't require the daemon package for -devel subpackage
- Move pipewire.conf man page to the daemon package
--------------------------------------------------------------------------------
================================================================================
python-pysimplesoap-1.16.2-4.fc31 (FEDORA-2019-1b1afde10e)
Python simple and lightweight SOAP Library
--------------------------------------------------------------------------------
Update Information:
New packages
--------------------------------------------------------------------------------
================================================================================
python-tinydb-3.14.2-1.fc31 (FEDORA-2019-e419f2b30a)
TinyDB is a tiny, document oriented database
--------------------------------------------------------------------------------
Update Information:
Update to latest version 3.14.2
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 16 2019 Sundeep Anand <suanand(a)redhat.com> - 3.14.2-1
- Update to latest version 3.14.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1752140 - python-tinydb-3.14.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1752140
--------------------------------------------------------------------------------
================================================================================
reposurgeon-3.47-1.fc31 (FEDORA-2019-1844ba6254)
SCM Repository Manipulation Tool
--------------------------------------------------------------------------------
Update Information:
3.47: 2019-09-09:: - Fix for a crash bug when backing out of a script failure.
- Fix for an error that caused premature exit from the divide command. -
Repositories created by expunge command now have correct ancestor marks. -
Insert newly created blobs after front events. - Minor repair to translation of
Subversion default ignores. - Add --noignores read option to suppress filling
in default Subversion ignores. - Results of reorder and reparent ae no longer
toposorted. - Fix: repocutter was not patching Node-copyfrom-rev fields as it
should.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 16 2019 Denis Fateyev <denis(a)fateyev.com> - 3.47-1
- Update to 3.47
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1750591 - reposurgeon-3.47 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1750591
--------------------------------------------------------------------------------
================================================================================
rpkg-1.59-1.fc31 (FEDORA-2019-609226dd65)
Python library for interacting with rpm+git
--------------------------------------------------------------------------------
Update Information:
What's new in rpkg 1.59 ----------------------- ### Add commands for
interacting with Koji side-tag plugin Add commands for interacting with Koji
side-tag plugin There is a Koji [plugin](https://pagure.io/sidetag-koji-plugin)
that can create, list and remove side-tags. This patch adds support for a
commands to do that. It is used like this: ``` $ rpkg request-side-tag
[--base-tag=FOO] $ rpkg list-side-tags [--mine|--user=LOGIN] [--base-tag=FOO] $
rpkg remove-side-tag TAG ``` The base tag is used as a parent of the new side
tag. If not given, rpkg will find build tag of the current target and use it.
The plugin creates both tag and target (with the same name), so the output of
rpkg contains a suggestion on how to submit builds to the new target. ### Port
to `libmodulemd` 2 API *rpkg* will now use `libmodulemd` library version 2
instead of version 1. ### `module-overview` allows filtering by owner Adds
additional arguments to command `fedpkg module-overview`: * `--owner` - param
is added to mbs query and shows only builds of that owner * `--mine` - use
current Kerberos user (or system username if Kerberos is not present) for
filtering. Arguments are mutually exclusive. ### Add option to skip build for
container-build With this option, a build can be skipped in `container-build`
command, to update just buildconfig for autorebuilds. ### Show nvr in
`container-build` After the build is created with `container-build`, build's
nvr is listed on output. ### Different `import --offline` command behavior
`*pkg import --offline` didn't update *source* and *.gitignore* files. Modified
incorrect output about uploaded sources. Offline mode now does everything but
uploading sources into lookaside cache. ### Do not delete files related to
gating on import When `rhpkg import` is used, it will delete files that are not
used in the imported SRPM but are tracked in git. Now there is an exception for
*gating.yaml* also *tests/* subdirectory - these files are kept. ### In
`Container-build` add `--build-release` argument Add support for a new
`--build-release` argument to the `container-build` sub-command. This allows
users to specify a specific "Release" value to OSBS for the build's Name-
Version-Release. ### Allow some arguments for `container-build` together For
`rhpkg container-build` command allow `--signing-intent together` with `--repo-
url`. `--compose-id` is still restricted to be used with these arguments. ###
Ignore error when adding exclude patterns Creates a `.git/info` directory if is
missing during `clone` of a remote repository. Then `exclude` file can be
updated. ### Custom handler for `koji watch_tasks` Output text during
rhpkg/fedpkg build process states that there is a *watch\_task* subcommand. When
*koji\_cli* library is imported in rhpkg/fedpkg tool, it shows that command is
named *rhpkg/fedpkg watch\_task* instead of *brew/koji watch\_task*. Custom
handler replaces the internal one inside *koji\_cli* library. Additional fix in
rhpkg is needed after this change is released. ### Fix `clone --branches` When
cloning with the `--branches` option we first clone a bare repo locally, then
clone each branch from that bare repo. Avoid adding an excludes file to the
temporary bare repo (which fails because we pass the wrong path to the git dir).
Add an excludes file to each branch dir. ### Make `gitbuildhash` work for
windows builds The requests are structured differently to rpm builds, so we
need to look at the different field to extract URL. Change Logs ----------- -
Add option to skip build for container-build (rcerven) - Sorting imports
(onosek) - Ignore error when adding exclude patterns -
[
rhbz\#1733862](https://bugzilla.redhat.com/show_bug.cgi?id=1733862)
(onosek) - Path to lookaside repo fix (onosek) - Add commands for
interacting with Koji side-tag plugin -
[\#329](https://pagure.io/fedpkg/issue/329) (lsedlar) - Do not delete files
related to gating on import (onosek) - Support integer values in the optional
module-build arguments (mprahl) - container-build: add --build-release
argument (kdreyer) - Allow some arguments for container-build together
(onosek) - git-changelog: Fix running on Python 3 (onosek) - Port to
libmodulemd 2 API (lsedlar) - Module-overview allows filtering by owner -
[\#325](https://pagure.io/fedpkg/issue/325) (onosek) - Different import
--offline command behavior - [\#445](https://pagure.io/rpkg/issue/445),
[
rhbz\#1175262](https://bugzilla.redhat.com/show_bug.cgi?id=1175262)
(onosek) - Show nvr in container-build (onosek) - Custom handler for koji
watch\_tasks -
[
rhbz\#1570921](https://bugzilla.redhat.com/show_bug.cgi?id=1570921)
(onosek) - Unittests for clone command (onosek) - Fix clone --branches -
[
rhbz\#1707223](https://bugzilla.redhat.com/show_bug.cgi?id=1707223) (tmz) -
Make gitbuildhash work for windows builds (lsedlar)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 16 2019 Ond��ej Nosek <onosek(a)redhat.com> - 1.59-1
- Add argument to skip build option for container-build (rcerven)
- Sorting imports (onosek)
- Ignore error when adding exclude patterns - 1733862 (onosek)
- Path to lookaside repo fix (onosek)
- Add commands for interacting with Koji side-tag plugin - 329 (lsedlar)
- Do not delete files related to gating on import (onosek)
- Support integer values in the optional module-build arguments (mprahl)
- container-build: add --build-release argument (kdreyer)
- Allow some arguments for container-build together (onosek)
- git-changelog: Fix running on Python 3 - 3 (onosek)
- Port to libmodulemd 2 API (lsedlar)
- Module-overview allows filtering by owner - 325 (onosek)
- Different import --offline command behavior - #445 (onosek)
- Show nvr in container-build (onosek)
- Custom handler for koji watch_tasks (onosek)
- Unittests for clone command (onosek)
- Fix clone --branches - rhbz#1707223 (tmz)
- Make gitbuildhash work for windows builds (lsedlar)
* Mon Sep 16 2019 Ond��ej Nosek <onosek(a)redhat.com> - 1.58-10
- Update koji dependency
* Sat Aug 17 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 1.58-9
- Rebuilt for Python 3.8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1733862 - fedpkg clone fails in _add_git_excludes() method
https://bugzilla.redhat.com/show_bug.cgi?id=1733862
--------------------------------------------------------------------------------
================================================================================
selinux-policy-3.14.4-33.fc31 (FEDORA-2019-8169f4e6b7)
SELinux policy configuration
--------------------------------------------------------------------------------
Update Information:
More info:
https://koji.fedoraproject.org/koji/buildinfo?buildID=1377245 ----
More info:
https://koji.fedoraproject.org/koji/buildinfo?buildID=1371233
--------------------------------------------------------------------------------
ChangeLog:
* Fri Sep 13 2019 Lukas Vrabec <lvrabec(a)redhat.com> - 3.14.4-33
- Add sys_ptrace capability to pcp_pmlogger_t domain BZ(1751816)
- Allow gssproxy_t domain read state of all processes on system
- Update travis-CI file
- Fix syntax erros in keepalived policy
- Add sys_admin capability for keepalived_t labeled processes
- Allow user_mail_domain attribute to manage files labeled as etc_aliases_t.
- Create new type ipmievd_helper_t domain for loading kernel modules.
- Run stratisd service as stratisd_t
- Fix abrt_upload_watch_t in abrt policy
- Update keepalived policy
- Update cron_role, cron_admin_role and cron_unconfined_role to avoid *_t_t types
- Revert "Create admin_crontab_t and admin_crontab_tmp_t types"
- Revert "Update cron_role() template to accept third parameter with SELinux domain
prefix"
- Allow amanda_t to manage its var lib files and read random_device_t
- Create admin_crontab_t and admin_crontab_tmp_t types
- Add setgid and setuid capabilities to keepalived_t domain
- Update cron_role() template to accept third parameter with SELinux domain prefix
- Allow psad_t domain to create tcp diag sockets BZ(1750324)
- Allow systemd to mount fwupd_cache_t BZ(1750288)
- Allow chronyc_t domain to append to all non_security files
- Update zebra SELinux policy to make it work also with frr service
- Allow rtkit_daemon_t domain set process nice value in user namespaces BZ(1750024)
- Dontaudit rhsmcertd_t to write to dirs labeled as lib_t BZ(1556763)
- Label /var/run/mysql as mysqld_var_run_t
- Allow chronyd_t domain to manage and create chronyd_tmp_t dirs,files,sock_file objects.
- Update timedatex policy to manage localization
- Allow sandbox_web_type domains to sys_ptrace and sys_chroot in user namespaces
- Update gnome_dontaudit_read_config
- Allow devicekit_var_lib_t dirs to be created by systemd during service startup.
BZ(1748997)
- Update travis-CI file
- Allow systemd labeled as init_t domain to remount rootfs filesystem
- Add interface files_remount_rootfs()
- Dontaudit sys_admin capability for iptables_t SELinux domain
- Allow userdomains to dbus chat with policykit daemon
- Update userdomains to pass correct parametes based on updates from cron_*_role
interfaces
- New interface files_append_non_security_files()
- Label 2618/tcp and 2618/udp as priority_e_com_port_t
- Label 2616/tcp and 2616/udp as appswitch_emp_port_t
- Label 2615/tcp and 2615/udp as firepower_port_t
- Label 2610/tcp and 2610/udp as versa_tek_port_t
- Label 2613/tcp and 2613/udp as smntubootstrap_port_t
- Label 3784/tcp and 3784/udp as bfd_control_port_t
- Remove rule allowing all processes to stream connect to unconfined domains
* Wed Sep 4 2019 Lukas Vrabec <lvrabec(a)redhat.com> - 3.14.4-32
- Allow zabbix_t domain to manage zabbix_var_lib_t sock files and connect to
unix_stream_socket
- Dontaudit sandbox web types to setattr lib_t dirs
- Dontaudit system_mail_t domains to check for existence other applications on system
BZ(1747369)
- Allow haproxy_t domain to read network state of system
- Allow processes labeled as keepalived_t domain to get process group
- Introduce dbusd_unit_file_type
- Allow pesign_t domain to read/write named cache files.
- Label /var/log/hawkey.log as rpm_log_t and update rpm named filetrans interfaces.
- Allow httpd_t domain to read/write named_cache_t files
- Add new interface bind_rw_cache()
- Allow cupsd_t domain to create directory with name ppd in dirs labeled as cupsd_etc_t
with label cupsd_rw_etc_t.
- Update cpucontrol_t SELinux policy
- Allow pcp_pmcd_t domain to bind on udp port labeled as statsd_port_t
- Run lldpd service as lldpad_t.
- Allow spamd_update_t domain to create unix dgram sockets.
- Update dbus role template for confined users to allow login into x session
- Label /usr/libexec/microcode_ctl/reload_microcode as cpucontrol_exec_t
- Fix typo in networkmanager_append_log() interface
- Update collectd policy to allow daemon create /var/log/collectd with collectd_log_t
label
- Allow login user type to use systemd user session
- Allow xdm_t domain to start dbusd services.
- Introduce new type xdm_unit_file_t
- Remove allowing all domain to communicate over pipes with all domain under
rpm_transition_domain attribute
- Allow systemd labeled as init_t to remove sockets with tmp_t label BZ(1745632)
- Allow ipsec_t domain to read/write named cache files
- Allow sysadm_t to create hawkey log file with rpm_log_t SELinux label
- Allow domains systemd_networkd_t and systemd_logind_t to chat over dbus
- Label udp 8125 port as statsd_port_t
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1737198 - SELinux is preventing timedatex from 'ioctl' accesses on
the chr_file /dev/rtc0.
https://bugzilla.redhat.com/show_bug.cgi?id=1737198
[ 2 ] Bug #1737192 - SELinux is preventing timedatex from 'getattr' accesses on
the file /etc/adjtime.
https://bugzilla.redhat.com/show_bug.cgi?id=1737192
[ 3 ] Bug #1737191 - SELinux is preventing timedatex from 'open' accesses on the
file /etc/adjtime.
https://bugzilla.redhat.com/show_bug.cgi?id=1737191
[ 4 ] Bug #1737200 - SELinux is preventing timedatex from 'read' accesses on the
chr_file rtc0.
https://bugzilla.redhat.com/show_bug.cgi?id=1737200
[ 5 ] Bug #1737190 - SELinux is preventing timedatex from 'read' accesses on the
file /etc/adjtime.
https://bugzilla.redhat.com/show_bug.cgi?id=1737190
[ 6 ] Bug #1647493 - bind: denied { map } for named
https://bugzilla.redhat.com/show_bug.cgi?id=1647493
[ 7 ] Bug #1737199 - SELinux is preventing timedatex from 'open' accesses on the
chr_file /dev/rtc0.
https://bugzilla.redhat.com/show_bug.cgi?id=1737199
[ 8 ] Bug #1737239 - SELinux is preventing timedatex from 'write' accesses on
the sock_file system_bus_socket.
https://bugzilla.redhat.com/show_bug.cgi?id=1737239
[ 9 ] Bug #1683820 - SELinux denied create sock for zabbix_server
https://bugzilla.redhat.com/show_bug.cgi?id=1683820
--------------------------------------------------------------------------------
================================================================================
srt-1.4.0-1.fc31 (FEDORA-2019-69e03d1bea)
Secure Reliable Transport protocol tools
--------------------------------------------------------------------------------
Update Information:
Update to 1.4.0
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 16 2019 Yanko Kaneti <yaneti(a)declera.com> - 1.4.0-1
- Update to 1.4.0
--------------------------------------------------------------------------------
================================================================================
tcpdump-4.9.2-9.fc31 (FEDORA-2019-d64bb18a10)
A network traffic monitoring tool
--------------------------------------------------------------------------------
Update Information:
Adding getent to pre scriptlet to avoid audit messages
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 16 2019 Michal Ruprich <mruprich(a)redhat.com> - 14:4.9.2-9
- Adding getent to pre scriptlet to avoid audit messages (rhbz#1715420)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1715420 - tcpdump %pre creates user and groups unconditionally, raising
alerts in audit
https://bugzilla.redhat.com/show_bug.cgi?id=1715420
--------------------------------------------------------------------------------
================================================================================
vala-0.46.1-1.fc31 (FEDORA-2019-e609dc9988)
A modern programming language for GNOME
--------------------------------------------------------------------------------
Update Information:
vala 0.46.1 release. For details, see
https://mail.gnome.org/archives/ftp-
release-list/2019-September/msg00198.html
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 16 2019 Kalev Lember <klember(a)redhat.com> - 0.46.1-1
- Update to 0.46.1
--------------------------------------------------------------------------------
================================================================================
xdg-desktop-portal-1.4.2-3.fc31 (FEDORA-2019-18b111e375)
Portal frontend service to flatpak
--------------------------------------------------------------------------------
Update Information:
Avoid a hard dep on pipewire daemon package
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 16 2019 Kalev Lember <klember(a)redhat.com> - 1.4.2-3
- Avoid a hard dep on pipewire daemon
--------------------------------------------------------------------------------