The following Fedora 29 Security updates need testing:
Age URL
48
https://bodhi.fedoraproject.org/updates/FEDORA-2018-51ce232320
xerces-c27-2.7.0-28.fc29
21
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4381dd7d0b
drupal8-8.6.2-1.fc29
21
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d3f4eb1f9f
drupal7-7.60-2.fc29
21
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7adf863a47
php-Smarty2-2.6.31-2.fc29
9
https://bodhi.fedoraproject.org/updates/FEDORA-2018-34f7f68029
chromium-70.0.3538.77-4.fc29
9
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6aada550ca bird-1.6.4-2.fc29
9
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e8ff8b7f8e
rubygem-rack-2.0.4-4.fc29
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9edb27ef05
pdns-recursor-4.1.7-1.fc29
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d5fcbb9ca6
rubygem-loofah-2.2.3-1.fc29
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bd18c784de
libtiff-4.0.10-1.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4544e8dbc8
python34-3.4.9-4.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a2e9bd6eae
php-PHPMailer-5.2.27-1.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-18f3eff32b
php-phpmailer6-6.0.6-1.fc29
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-87f2ace20d qemu-3.0.0-2.fc29
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a0d02065d0
libdigidocpp-3.13.7-1.fc29 xml-security-c-2.0.2-1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-0d2b97271c
mariadb-connector-c-3.0.7-1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7c540fdab4
nginx-1.14.1-2.fc29
The following Fedora 29 Critical Path updates have yet to be approved:
Age URL
12
https://bodhi.fedoraproject.org/updates/FEDORA-2018-053fa23050
shadow-utils-4.6-4.fc29
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-fff9c76313
xfce-polkit-0.3-1.fc29
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bd18c784de
libtiff-4.0.10-1.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3c0aaeaf9b pam-1.3.1-8.fc29
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-004d2f4e6f
xfconf-4.13.6-2.fc29
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-87f2ace20d qemu-3.0.0-2.fc29
The following builds have been pushed to Fedora 29 updates-testing
adwaita-icon-theme-3.30.1-1.fc29
brise-0.38.20180515-1.fc29
couchdb-1.7.1-12.fc29
csnappy-0-13.20181121gitb476930.fc29
environment-modules-4.2.1-1.fc29
ibus-rime-1.3.0-1.fc29
ibus-typing-booster-2.2.0-1.fc29
ignition-0.28.0-11.gitf707912.fc29
kernel-4.19.3-300.fc29
kernel-headers-4.19.3-300.fc29
kernel-tools-4.19.3-300.fc29
librime-1.3.2-1.fc29
libxc-4.2.3-1.fc29
libxmlb-0.1.5-1.fc29
magic-8.2.83-1.fc29
mingw-uriparser-0.9.0-1.fc29
moodle-3.5.3-1.fc29
openjfx-8.0.152-19.b05.fc29
openqa-4.6-3.20181113git3a06172.fc29
os-autoinst-4.5-9.20181119gitf5d9165.fc29
perl-CPAN-Perl-Releases-3.82-1.fc29
perl-File-Slurp-9999.25-1.fc29
perl-Module-CoreList-5.20181120-1.fc29
perl-Mojo-IOLoop-ReadWriteProcess-0.23-1.fc29
perl-Mojolicious-8.06-1.fc29
phan-1.1.3-1.fc29
php-7.2.13-0.1.RC1.fc29
php-deepend-Mockery-0.9.10-1.fc29
php-pecl-apcu-5.1.14-1.fc29
pidgin-groupchat-typing-notifications-3-1.fc29
prosody-0.11.0-1.fc29
purple-discord-0-21.20181108gita5dd44f.fc29
purple-hangouts-0-61.20181118hg833609a.fc29
purple-matrix-0-11.20180927gitf26edd5.fc29
python-hkdf-0.0.3-1.fc29
python-notebook-5.7.2-1.fc29
python-xnat-0.3.11-1.fc29
sbd-1.3.1-1.git4927571.fc29
upower-0.99.9-1.fc29
uriparser-0.9.0-1.fc29
Details about builds:
================================================================================
adwaita-icon-theme-3.30.1-1.fc29 (FEDORA-2018-11790c1a46)
Adwaita icon theme
--------------------------------------------------------------------------------
Update Information:
adwaita-icon-theme 3.30.1 release, fixing misrendering of inode-directory-
symbolic icon.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 20 2018 Kalev Lember <klember(a)redhat.com> - 3.30.1-1
- Update to 3.30.1
--------------------------------------------------------------------------------
================================================================================
brise-0.38.20180515-1.fc29 (FEDORA-2018-fd89bf11b7)
The official Rime schema repository
--------------------------------------------------------------------------------
Update Information:
new upstream release.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 21 2018 Peng Wu <pwu(a)redhat.com> - 0.38.20180515-1
- Update to 0.38.20180515
--------------------------------------------------------------------------------
================================================================================
couchdb-1.7.1-12.fc29 (FEDORA-2018-8f61d35c29)
A document database server, accessible via a RESTful JSON API
--------------------------------------------------------------------------------
Update Information:
* Rebuild to fix FTBFS
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 21 2018 Peter Lemenkov <lemenkov(a)gmail.com> - 1.7.1-12
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.7.1-11
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1603702 - couchdb: FTBFS in Fedora rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1603702
--------------------------------------------------------------------------------
================================================================================
csnappy-0-13.20181121gitb476930.fc29 (FEDORA-2018-c7b8a72425)
Snappy compression library ported to C
--------------------------------------------------------------------------------
Update Information:
This release fixes the compiler warnings.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 21 2018 Petr Pisar <ppisar(a)redhat.com> - 0-13.20181121gitb476930
- Rebased to b47693024402fa8760edcd4fed71131cbd5ac175
--------------------------------------------------------------------------------
================================================================================
environment-modules-4.2.1-1.fc29 (FEDORA-2018-5c95a72f53)
Provides dynamic modification of a user's environment
--------------------------------------------------------------------------------
Update Information:
Update to 4.2.1 (rhbz#1648738). Release notes:
https://github.com/cea-
hpc/modules/releases/tag/v4.2.1
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 20 2018 Jan Syn����ek <jsynacek(a)redhat.com> - 4.2.1-1
- Update to 4.2.1 (#1648738)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1648738 - environment-modules-4.2.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1648738
--------------------------------------------------------------------------------
================================================================================
ibus-rime-1.3.0-1.fc29 (FEDORA-2018-fd89bf11b7)
Rime Input Method Engine for IBus
--------------------------------------------------------------------------------
Update Information:
new upstream release.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 21 2018 Peng Wu <pwu(a)redhat.com> - 1.3.0-1
- Update to 1.3.0
--------------------------------------------------------------------------------
================================================================================
ibus-typing-booster-2.2.0-1.fc29 (FEDORA-2018-21c000667c)
A completion input method
--------------------------------------------------------------------------------
Update Information:
Add inline completion feature
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 21 2018 Mike FABIAN <mfabian(a)redhat.com> - 2.2.0-1
- Update translations from zanata (de updated)
- Save some screen space in the setup tool
- Add inline completion feature
- Tab should force a lookup when the minimum number of characters is not yet reached
* Wed Nov 7 2018 Mike FABIAN <mfabian(a)redhat.com> - 2.1.3-2
- Use C.UTF-8 instead of en_US.UTF-8 when running the test cases.
(Because of
https://fedoraproject.org/wiki/Changes/Remove_glibc-langpacks-all_from_bu...)
- Add desktop-file-utils, python3-gobject, python3-gobject-base, gtk3,
dconf, dbus-x11, ibus to BuildRequires.
--------------------------------------------------------------------------------
================================================================================
ignition-0.28.0-11.gitf707912.fc29 (FEDORA-2018-2fde0b8cfa)
First boot installer and configuration tool
--------------------------------------------------------------------------------
Update Information:
newest iteration of igntion-dracut modules upstream
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 20 2018 Jonathan Lebon <jonathan(a)jlebon.com> - 0.28.0-11.git7b83454
- Bump to ignition-dracut 7b83454
* Thu Oct 25 2018 Dusty Mabe <dusty(a)dustymabe.com> - 0.28.0-10.gitf707912
- Bump to ignition-dracut decf63f
- * 03d8438 30ignition: only instmods if module available
* Thu Oct 25 2018 Dusty Mabe <dusty(a)dustymabe.com> - 0.28.0-9.gitf707912
- Bump to ignition-dracut 7ee64ca
- * 3ec0b39 remove ignition-remount-sysroot.service files
* 66335f2 ignition: run files stage at original CL ordering
* 0301a03 ignition-disks.service: drop Requires=network.target
* a0bc135 ignition-ask-var-mount.service: use RemainAfterExit=yes
* ecf5779 module-setup.sh: explicitly install qemu_fw_cfg
* Mon Oct 15 2018 Dusty Mabe <dusty(a)dustymabe.com> - 0.28.0-8.gitf707912
- Bump to ignition-dracut 4bdfb34
- * 6d0763a module-setup: Make mkfs.btrfs optional
* Wed Oct 10 2018 Jonathan Lebon <jonathan(a)jlebon.com> - 0.28.0-7.gitf707912
- Backport patch for handling sysctl files correctly
https://github.com/coreos/coreos-assembler/pull/128
https://github.com/openshift/machine-config-operator/pull/123
--------------------------------------------------------------------------------
================================================================================
kernel-4.19.3-300.fc29 (FEDORA-2018-367d08ef69)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
This is an update to the v4.19.3 stable kernel and includes fixes across the
tree
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 21 2018 Jeremy Cline <jcline(a)redhat.com> - 4.19.3-300
- Linux v4.19.3
* Tue Nov 20 2018 Hans de Goede <hdegoede(a)redhat.com>
- Turn on CONFIG_PINCTRL_GEMINILAKE on x86_64 (rhbz#1639155)
- Add a patch fixing touchscreens on HP AMD based laptops (rhbz#1644013)
- Add a patch fixing KIOX010A accelerometers (rhbz#1526312)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1526312 - No touchpad - error: i2c_hid i2c-SYNA3602:00: unexpected HID
descriptor bcdVersion (0x00ff)
https://bugzilla.redhat.com/show_bug.cgi?id=1526312
[ 2 ] Bug #1644013 - Touchscreen function for HP laptop with AMD processors broken on
all kernel version
https://bugzilla.redhat.com/show_bug.cgi?id=1644013
[ 3 ] Bug #1639155 - Touchpad doesn't work on Fedora (LENOVO 330-15IGM)
https://bugzilla.redhat.com/show_bug.cgi?id=1639155
--------------------------------------------------------------------------------
================================================================================
kernel-headers-4.19.3-300.fc29 (FEDORA-2018-367d08ef69)
Header files for the Linux kernel for use by glibc
--------------------------------------------------------------------------------
Update Information:
This is an update to the v4.19.3 stable kernel and includes fixes across the
tree
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 21 2018 Jeremy Cline <jcline(a)redhat.com> - 4.20.0-0.rc3.git1.300
- Linux v4.19.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1526312 - No touchpad - error: i2c_hid i2c-SYNA3602:00: unexpected HID
descriptor bcdVersion (0x00ff)
https://bugzilla.redhat.com/show_bug.cgi?id=1526312
[ 2 ] Bug #1644013 - Touchscreen function for HP laptop with AMD processors broken on
all kernel version
https://bugzilla.redhat.com/show_bug.cgi?id=1644013
[ 3 ] Bug #1639155 - Touchpad doesn't work on Fedora (LENOVO 330-15IGM)
https://bugzilla.redhat.com/show_bug.cgi?id=1639155
--------------------------------------------------------------------------------
================================================================================
kernel-tools-4.19.3-300.fc29 (FEDORA-2018-367d08ef69)
Assortment of tools for the Linux kernel
--------------------------------------------------------------------------------
Update Information:
This is an update to the v4.19.3 stable kernel and includes fixes across the
tree
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 21 2018 Jeremy Cline <jeremy(a)jcline.org> - 4.19.3-300
- Linux v4.19.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1526312 - No touchpad - error: i2c_hid i2c-SYNA3602:00: unexpected HID
descriptor bcdVersion (0x00ff)
https://bugzilla.redhat.com/show_bug.cgi?id=1526312
[ 2 ] Bug #1644013 - Touchscreen function for HP laptop with AMD processors broken on
all kernel version
https://bugzilla.redhat.com/show_bug.cgi?id=1644013
[ 3 ] Bug #1639155 - Touchpad doesn't work on Fedora (LENOVO 330-15IGM)
https://bugzilla.redhat.com/show_bug.cgi?id=1639155
--------------------------------------------------------------------------------
================================================================================
librime-1.3.2-1.fc29 (FEDORA-2018-fd89bf11b7)
Rime Input Method Engine Library
--------------------------------------------------------------------------------
Update Information:
new upstream release.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 21 2018 Peng Wu <pwu(a)redhat.com> - 1.3.2-1
- Update to 1.3.2
* Wed Oct 10 2018 S��rgio Basto <sergio(a)serjux.com> - 1.2-24
- Rebuit for gflags-2.2.1
--------------------------------------------------------------------------------
================================================================================
libxc-4.2.3-1.fc29 (FEDORA-2018-30a6062ce1)
Library of exchange and correlation functionals for density-functional theory
--------------------------------------------------------------------------------
Update Information:
Update to 4.2.3, no functional changes.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 21 2018 Susi Lehtola <jussilehtola(a)fedoraproject.org> - 4.2.3-1
- Remove python2 subpackage from rawhide.
- Update to 4.2.3.
--------------------------------------------------------------------------------
================================================================================
libxmlb-0.1.5-1.fc29 (FEDORA-2018-6ece138384)
Library for querying compressed XML metadata
--------------------------------------------------------------------------------
Update Information:
- New upstream release - Add xb_builder_node_export() for gnome-software -
Ignore calls to xb_silo_query_build_index() with no results - Lazy load the
stemmer when required
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 21 2018 Richard Hughes <richard(a)hughsie.com> 0.1.5-1
- New upstream release
- Add xb_builder_node_export() for gnome-software
- Ignore calls to xb_silo_query_build_index() with no results
- Lazy load the stemmer when required
--------------------------------------------------------------------------------
================================================================================
magic-8.2.83-1.fc29 (FEDORA-2018-1751343533)
A very capable VLSI layout tool
--------------------------------------------------------------------------------
Update Information:
New version 8.2.83 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 21 2018 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 8.2.83-1
- 8.2.83
--------------------------------------------------------------------------------
================================================================================
mingw-uriparser-0.9.0-1.fc29 (FEDORA-2018-4003413459)
MinGW Windows uriparser library
--------------------------------------------------------------------------------
Update Information:
Update to 0.9.0, see
https://github.com/uriparser/uriparser/blob/uriparser-0.9.0/ChangeLog for
details.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 27 2018 Sandro Mani <manisandro(a)gmail.com> - 0.9.0-1
- Update to 0.9.0
* Tue Aug 21 2018 Sandro Mani <manisandro(a)gmail.com> - 0.8.6-1
- Update to 0.8.6
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1651946 - CVE-2018-19198 uriparser: Out-of-bounds write via uriComposeQuery*
or uriComposeQueryEx* function
https://bugzilla.redhat.com/show_bug.cgi?id=1651946
[ 2 ] Bug #1651948 - CVE-2018-19199 uriparser: Integer overflow via uriComposeQuery* or
uriComposeQueryEx* function
https://bugzilla.redhat.com/show_bug.cgi?id=1651948
[ 3 ] Bug #1651949 - CVE-2018-19200 uriparser: NULL pointer dereference via uriResetUri*
function
https://bugzilla.redhat.com/show_bug.cgi?id=1651949
--------------------------------------------------------------------------------
================================================================================
moodle-3.5.3-1.fc29 (FEDORA-2018-6a4a3b78fd)
A Course Management System
--------------------------------------------------------------------------------
Update Information:
CVE-2018-16854
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 21 2018 Gwyn Ciesla <limburgher(a)gmail.com> - 3.5.3-1
- 3.5.3
* Tue Oct 30 2018 Gwyn Ciesla <limburgher(a)gmail.com> - 3.5.2-2
- Fix URL, drop php-Smarty.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1652022 - CVE-2018-16854 moodle: Login CSRF vulnerability in login form
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1652022
[ 2 ] Bug #1652021 - CVE-2018-16854 moodle: Login CSRF vulnerability in login form
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1652021
--------------------------------------------------------------------------------
================================================================================
openjfx-8.0.152-19.b05.fc29 (FEDORA-2018-d43b6eaa3c)
Rich client application platform for Java
--------------------------------------------------------------------------------
Update Information:
Fix missing java packages in openjfx
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 12 2018 Nicolas De Amicis <deamicis(a)bluewin.ch> - 8.0.152-19.b05
- Fix missing java packages in openjfx
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
8.0.152-18.b05
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1644712 - The java package javafx.scene.control.* is missing on
openjfx-8.0.152-17.b05.fc29
https://bugzilla.redhat.com/show_bug.cgi?id=1644712
--------------------------------------------------------------------------------
================================================================================
openqa-4.6-3.20181113git3a06172.fc29 (FEDORA-2018-99851c6d24)
OS-level automated testing framework
--------------------------------------------------------------------------------
Update Information:
This update provides recent git snapshots of openQA and os-autoinst. There have
been many changes and bug fixes, far too many to list them all; for instance,
os-autoinst's qemu interface has been quite significantly rewritten, openQA's
'interactive mode' is replaced with a new 'developer mode', Gru is now a
wrapper
around Minion, and many more. This update is deployed on the Fedora staging
instance already. Production is still running the old release. Note that from
this build on, openQA requires its PostgreSQL server to be running 10.0 or
higher. It also updates some dependencies for which newer versions are
required, including a new major release of Mojolicious. openQA is the primary
Mojolicious consumer in Fedora, and I checked that other projects downstream of
Mojolicious should work OK with the new release. More details on the changes in
Mojolicious can be found in [the upstream
changelog](https://github.com/mojolicious/mojo/blob/master/Changes).
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 20 2018 Adam Williamson <awilliam(a)redhat.com> - 4.6-3.20181113git3a06172
- Backport PR to fix UEFI var file handling with caching disabled
* Mon Nov 19 2018 Adam Williamson <awilliam(a)redhat.com> - 4.6-2.20181113git3a06172
- Backport a couple more useful changes
- Buildrequire glibc-langpack-en: see
https://fedoraproject.org/wiki/Changes/Remove_glibc-langpacks-all_from_bu...
* Wed Nov 14 2018 Adam Williamson <awilliam(a)redhat.com> - 4.6-1.20181113git3a06172
- Update to latest upstream git
(Before PR#1783, we do not have the deps for that yet)
- Port changes from SUSE spec (new deps, UTF-8 makeinstall...)
- Make asset cache script more similar to SUSE's
- Backport a few PRs to fix test issues
--------------------------------------------------------------------------------
================================================================================
os-autoinst-4.5-9.20181119gitf5d9165.fc29 (FEDORA-2018-99851c6d24)
OS-level test automation
--------------------------------------------------------------------------------
Update Information:
This update provides recent git snapshots of openQA and os-autoinst. There have
been many changes and bug fixes, far too many to list them all; for instance,
os-autoinst's qemu interface has been quite significantly rewritten, openQA's
'interactive mode' is replaced with a new 'developer mode', Gru is now a
wrapper
around Minion, and many more. This update is deployed on the Fedora staging
instance already. Production is still running the old release. Note that from
this build on, openQA requires its PostgreSQL server to be running 10.0 or
higher. It also updates some dependencies for which newer versions are
required, including a new major release of Mojolicious. openQA is the primary
Mojolicious consumer in Fedora, and I checked that other projects downstream of
Mojolicious should work OK with the new release. More details on the changes in
Mojolicious can be found in [the upstream
changelog](https://github.com/mojolicious/mojo/blob/master/Changes).
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 19 2018 Adam Williamson <awilliam(a)redhat.com> - 4.5-9.2018119gitf5d9165
- Bump to latest git again
- Backport a patch related to new video timestamp feature
* Wed Nov 14 2018 Adam Williamson <awilliam(a)redhat.com> - 4.5-8.2018113gitdced72b
- Bump to latest git
- Resync with upstream spec
- Disable OCR test on Rawhide as Tesseract 4.0.0 sucks
--------------------------------------------------------------------------------
================================================================================
perl-CPAN-Perl-Releases-3.82-1.fc29 (FEDORA-2018-f87a5b1816)
Mapping Perl releases on CPAN to the location of the tarballs
--------------------------------------------------------------------------------
Update Information:
Updated to the latest version
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 21 2018 Jitka Plesnikova <jplesnik(a)redhat.com> - 3.82-1
- 3.82 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1651941 - Upgrade perl-CPAN-Perl-Releases to 3.82
https://bugzilla.redhat.com/show_bug.cgi?id=1651941
--------------------------------------------------------------------------------
================================================================================
perl-File-Slurp-9999.25-1.fc29 (FEDORA-2018-94d7ac7a1d)
Efficient Reading/Writing of Complete Files
--------------------------------------------------------------------------------
Update Information:
Upstream update ---- Upstream update
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 21 2018 Ralf Cors��pius <corsepiu(a)fedoraproject.org> - 9999.25-1
- Update to 9999.25.
* Mon Nov 5 2018 Ralf Cors��pius <corsepiu(a)fedoraproject.org> - 9999.24-1
- Update to 9999.24.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1651942 - Upgrade perl-File-Slurp to 9999.25
https://bugzilla.redhat.com/show_bug.cgi?id=1651942
--------------------------------------------------------------------------------
================================================================================
perl-Module-CoreList-5.20181120-1.fc29 (FEDORA-2018-3cfb210f6d)
What modules are shipped with versions of perl
--------------------------------------------------------------------------------
Update Information:
This release provides data for Perl 5.29.5.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 21 2018 Petr Pisar <ppisar(a)redhat.com> - 1:5.20181120-1
- 5.20181120 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1651943 - Upgrade perl-Module-CoreList to 5.20181120
https://bugzilla.redhat.com/show_bug.cgi?id=1651943
--------------------------------------------------------------------------------
================================================================================
perl-Mojo-IOLoop-ReadWriteProcess-0.23-1.fc29 (FEDORA-2018-99851c6d24)
Execute external programs or internal code blocks as separate process
--------------------------------------------------------------------------------
Update Information:
This update provides recent git snapshots of openQA and os-autoinst. There have
been many changes and bug fixes, far too many to list them all; for instance,
os-autoinst's qemu interface has been quite significantly rewritten, openQA's
'interactive mode' is replaced with a new 'developer mode', Gru is now a
wrapper
around Minion, and many more. This update is deployed on the Fedora staging
instance already. Production is still running the old release. Note that from
this build on, openQA requires its PostgreSQL server to be running 10.0 or
higher. It also updates some dependencies for which newer versions are
required, including a new major release of Mojolicious. openQA is the primary
Mojolicious consumer in Fedora, and I checked that other projects downstream of
Mojolicious should work OK with the new release. More details on the changes in
Mojolicious can be found in [the upstream
changelog](https://github.com/mojolicious/mojo/blob/master/Changes).
--------------------------------------------------------------------------------
ChangeLog:
* Sun Aug 19 2018 Emmanuel Seyman <emmanuel(a)seyman.fr> - 0.23-1
- Update to 0.23
--------------------------------------------------------------------------------
================================================================================
perl-Mojolicious-8.06-1.fc29 (FEDORA-2018-99851c6d24)
A next generation web framework for Perl
--------------------------------------------------------------------------------
Update Information:
This update provides recent git snapshots of openQA and os-autoinst. There have
been many changes and bug fixes, far too many to list them all; for instance,
os-autoinst's qemu interface has been quite significantly rewritten, openQA's
'interactive mode' is replaced with a new 'developer mode', Gru is now a
wrapper
around Minion, and many more. This update is deployed on the Fedora staging
instance already. Production is still running the old release. Note that from
this build on, openQA requires its PostgreSQL server to be running 10.0 or
higher. It also updates some dependencies for which newer versions are
required, including a new major release of Mojolicious. openQA is the primary
Mojolicious consumer in Fedora, and I checked that other projects downstream of
Mojolicious should work OK with the new release. More details on the changes in
Mojolicious can be found in [the upstream
changelog](https://github.com/mojolicious/mojo/blob/master/Changes).
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 11 2018 Emmanuel Seyman <emmanuel(a)seyman.fr> - 8.06-1
- Update to 8.06
* Sun Nov 4 2018 Emmanuel Seyman <emmanuel(a)seyman.fr> - 8.05-1
- Update to 8.05
* Sun Oct 28 2018 Emmanuel Seyman <emmanuel(a)seyman.fr> - 8.04-1
- Update to 8.04
* Sun Oct 21 2018 Emmanuel Seyman <emmanuel(a)seyman.fr> - 8.03-1
- Update to 8.03
* Sun Oct 7 2018 Emmanuel Seyman <emmanuel(a)seyman.fr> - 8.02-1
- Update to 8.02
* Sun Sep 16 2018 Emmanuel Seyman <emmanuel(a)seyman.fr> - 8.0-1
- Update to 8.0
--------------------------------------------------------------------------------
================================================================================
phan-1.1.3-1.fc29 (FEDORA-2018-e9cc4a17b1)
A static analyzer for PHP
--------------------------------------------------------------------------------
Update Information:
20 Nov 2018, Phan 1.1.3 ----------------------- **New features (CLI):** + Warn
when calling method on union types that are definitely partially invalid.
(#1885) New config setting: `--strict-method-checking` (enabled as part of
`--strict-type-checking`) New issue type: `PhanPossiblyNonClassMethodCall` +
Add a prototype tool `tool/phoogle`, which can be used to search for
function/method signatures in user-declared and internal functions/methods.
E.g. to look for functions that return a string, given a string and an array:
`/path/phan/tool/phoogle 'string -> array -> string` **New features
(Analysis):** + Add a heuristic check to detect potential infinite recursion in
a functionlike calling itself (i.e. stack overflows) New issue types:
`PhanInfiniteRecursion` + Infer literal integer values from expressions such as
`2 | 1`, `2 + 2`, etc. + Infer more accurate array shapes for `preg_match_all`
(based on existing inferences for `preg_match`) + Make Phan infer union types of
variables from switch statements on variables (#1291) (including literal int
and string types) + Analyze simple assertions on `get_class($var)` of various
forms (#1977) Examples: - `assert(get_class($x) === 'someClass')` - `if
(get_class($x) === someClass::class)` - `switch (get_class($x)) {case
someClass::class: ...}` + Warn about invalid/possibly invalid callables in
function calls. New issue types: `PhanTypeInvalidCallable`,
`PhanTypePossiblyInvalidCallable` (the latter check requires `--strict-method-
checking`) + Reduce false positives for a few functions (such as `substr`) in
strict mode. + Make Phan infer that variables are not null/false from various
comparison expressions, e.g. `assert($x > 0);` + Detect invalid arguments to
`++`/`--` operators (#680). Improve the analysis of the side effects of
`++`/`--` operators. New issue type: `PhanTypeInvalidUnaryOperandIncOrDec`
**Plugins:** + Add `BeforeAnalyzeCapability`, which will be executed once
before starting the analysis phase. (#2086) **Bug fixes:** + Fix false
positives analyzing `define()` (#2128) + Support declaring instance properties
as the union type `static` (#2145) New issue types:
`PhanStaticPropIsStaticType` + Fix a crash seen when Phan attempted to emit
`PhanTypeArrayOperator` for certain operations (#2153)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 21 2018 Remi Collet <remi(a)remirepo.net> - 1.1.3-1
- update to 1.1.3
--------------------------------------------------------------------------------
================================================================================
php-7.2.13-0.1.RC1.fc29 (FEDORA-2018-9893bc7f24)
PHP scripting language for creating dynamic web sites
--------------------------------------------------------------------------------
Update Information:
# QA build - not for stable repository **PHP version 7.2.13RC1** (22 Nov 2018)
**ftp:** * Fixed bug php#77151 (ftp_close(): SSL_read on shutdown). (Remi)
**CLI:** * Fixed bug php#77111 (php-win.exe corrupts unicode symbols from cli
parameters). (Anatol) **Fileinfo:** * Fixed bug php#77095 (slowness regression
in 7.2/7.3 (compared to 7.1)). (Anatol) **iconv:** * Fixed bug php#77147
(Fixing 60494 ignored ICONV_MIME_DECODE_CONTINUE_ON_ERROR). (cmb) **ODBC:** *
Fixed bug php#77079 (odbc_fetch_object has incorrect type signature). (Jon
Allen) **Opcache:** * Fixed bug php#77058 (Type inference in opcache causes
side effects). (Nikita) * Fixed bug php#77092 (array_diff_key() - segmentation
fault). (Nikita) **PGSQL:** * Fixed bug php#77047 (pg_convert has a broken
regex for the 'TIME WITHOUT TIMEZONE' data type). (Andy Gajetzki) **SOAP:** *
Fixed bug php#50675 (SoapClient can't handle object references correctly).
(Cameron Porter) * Fixed bug php#76348 (WSDL_CACHE_MEMORY causes Segmentation
fault). (cmb) * Fixed bug php#77141 (Signedness issue in SOAP when
precision=-1). (cmb) **Sockets:** * Fixed bug php#67619 (Validate length on
socket_write). (thiagooak)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 21 2018 Remi Collet <remi(a)remirepo.net> - 7.2.13-0.1.RC1
- update to 7.2.13RC1
--------------------------------------------------------------------------------
================================================================================
php-deepend-Mockery-0.9.10-1.fc29 (FEDORA-2018-1497f0bcfe)
Mockery is a simple but flexible PHP mock object framework
--------------------------------------------------------------------------------
Update Information:
**Version 0.9.10** * The `Mockery:: globalHelpers()` added for the backwards
compatibility
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 21 2018 Remi Collet <remi(a)remirepo.net> - 0.9.10-1
- update to 0.9.10
* Mon Sep 10 2018 Remi Collet <remi(a)remirepo.net> - 0.9.9-7
- use range dependencies
- ensure hamcrest v1 is used, fix FTBFS
--------------------------------------------------------------------------------
================================================================================
php-pecl-apcu-5.1.14-1.fc29 (FEDORA-2018-d1612c5109)
APC User Cache
--------------------------------------------------------------------------------
Update Information:
**Version 5.1.14** - Fixed GH #347: Disable slam defense by default. - Fix
potential issue with destruction of locks. This does not affect Linux, but might
affect Windows and BSD. - Use mutex instead of rwlock for shared memory
allocator (if pthreads mutex available). - Require only read-lock for
apcu_cas(), by using atomic compare-and-swap. ---- **Version 5.1.13** -
Reimplement persistence logic using precise allocation rather than memory pools.
This reduces memory usage of cache entries, especially for small values, and
improves performance of persisting and unpersisting values. - Fixed GH #335:
Stampede protection is broken. - Fixed GH #328: Segfault in apcu_key_info() if
APCu is disabled. - Generally make the behavior of functions if APCu is disabled
more consistent. - Fixed PHP bug #72980: Empty strings are now consistently
allowed as cache keys. - Optimized apcu_key_info() and apcu_cache_info() by
using interned strings. - Fix build against PHP master (PHP 7.4). - Many changes
to internal C APIs.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 21 2018 Remi Collet <remi(a)remirepo.net> - 5.1.14-1
- update to 5.1.14 (stable)
* Mon Nov 19 2018 Remi Collet <remi(a)remirepo.net> - 5.1.13-1
- update to 5.1.13 (stable)
--------------------------------------------------------------------------------
================================================================================
pidgin-groupchat-typing-notifications-3-1.fc29 (FEDORA-2018-77cf251d3f)
Adds typing notifications for group chats in Pidgin
--------------------------------------------------------------------------------
Update Information:
Updated to latest upstream version.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 21 2018 Vitaly Zaitsev <vitaly(a)easycoding.org> - 3-1
- Updated to version 3.
--------------------------------------------------------------------------------
================================================================================
prosody-0.11.0-1.fc29 (FEDORA-2018-fe93517450)
Flexible communications server for Jabber/XMPP
--------------------------------------------------------------------------------
Update Information:
Prosody 0.11.0 ============== See upstream's blog post at
https://blog.prosody.im/prosody-0-11-0-released/ for a full overview of the
release features. This release includes significant improvements to MUC and
Pubsub, adds support for vCard4, mobile battery optimisations and Lua 5.2.
Upgrade notes ------------- There are some changes that users running previous
versions of Prosody should be aware of: Modules added ------------- *
`mod_csi_simple` This is a renamed version of the `mod_csi_pump` community
module. If you are using `mod_csi_pump` or do not yet have a CSI module set up,
we encourage you to use this one. * `mod_muc_mam` This replaces the
community module `mod_mam_muc` (note the name change!). It provides support
for archiving and querying chatroom messages using XEP-0313. It should be added
to `modules_enabled` under your MUC component: ``` Component
"rooms.example.com" "muc" modules_enabled = {
"muc_mam"; } ```
* `mod_vcard4`, `mod_vcard_legacy` Prosody now offers support for vCard4 in
`mod_vcard4`. Since most clients today do not yet support this format, if you
use this module you should also enable `mod_vcard_legacy`. These modules
are separate to the old `mod_vcard`, which still exists and works for services
that want to continue just supporting the older vcard-temp protocol. Modules
removed --------------- The following modules were deprecated in previous
releases and have been removed in 0.11: * `mod_storage_sql1` *
`mod_compression` * `mod_privacy` MySQL schema upgrade --------------------
Some limitations were found with the current MySQL schema that prevented it from
working properly with our new pubsub and PEP features. Prosody will refuse to
connect to the database until this is fixed, but this can be done easily with
the following command: ``` prosodyctl mod_storage_sql upgrade ``` Lua 5.2
------- The recommended Lua version for 0.11 is Lua 5.2, while Lua 5.1 is still
supported for the platforms that need it. However the 0.11.x series is the last
series that will still support Lua 5.1 (and by extension, LuaJIT).
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 19 2018 Robert Scheck <robert(a)fedoraproject.org> 0.11.0-1
- Upgrade to 0.11.0
* Sun Aug 19 2018 Robert Scheck <robert(a)fedoraproject.org> 0.10.2-3
- Don't attempt to reload during logrotate if prosody is stopped
--------------------------------------------------------------------------------
================================================================================
purple-discord-0-21.20181108gita5dd44f.fc29 (FEDORA-2018-9a0c10f433)
Discord plugin for libpurple
--------------------------------------------------------------------------------
Update Information:
Updated to latest upstream version.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 21 2018 Vitaly Zaitsev <vitaly(a)easycoding.org> - 0-21.20181108gita5dd44f
- Updated to latest snapshot.
--------------------------------------------------------------------------------
================================================================================
purple-hangouts-0-61.20181118hg833609a.fc29 (FEDORA-2018-c11558e7ef)
Hangouts plugin for libpurple
--------------------------------------------------------------------------------
Update Information:
Updated to latest upstream version.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 21 2018 Vitaly Zaitsev <vitaly(a)easycoding.org> - 1:0-61.20181118hg833609a
- Updated to latest snapshot.
--------------------------------------------------------------------------------
================================================================================
purple-matrix-0-11.20180927gitf26edd5.fc29 (FEDORA-2018-6e936d99f6)
Matrix plugin for libpurple
--------------------------------------------------------------------------------
Update Information:
Updated to latest upstream version.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 21 2018 Vitaly Zaitsev <vitaly(a)easycoding.org> - 0-11.20180927gitf26edd5
- Updated to latest snapshot.
--------------------------------------------------------------------------------
================================================================================
python-hkdf-0.0.3-1.fc29 (FEDORA-2018-0e1aa10a4b)
HMAC-based Extract-and-Expand Key Derivation Function (HKDF)
--------------------------------------------------------------------------------
Update Information:
Initial packaging for fedora.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1651808 - Review Request: python-hkdf - HMAC-based Extract-and-Expand Key
Derivation Function (HKDF)
https://bugzilla.redhat.com/show_bug.cgi?id=1651808
--------------------------------------------------------------------------------
================================================================================
python-notebook-5.7.2-1.fc29 (FEDORA-2018-b792d607fd)
A web-based notebook environment for interactive computing
--------------------------------------------------------------------------------
Update Information:
Update to 5.7.2, fix CVE-2018-19351, CVE-2018-19352
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 21 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 5.7.2-1
- Update to 5.7.2, fix CVE-2018-19351, CVE-2018-19352 (#1651976)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1651973 - CVE-2018-19351 python-notebook: XSS via an untrusted notebook
https://bugzilla.redhat.com/show_bug.cgi?id=1651973
[ 2 ] Bug #1651975 - CVE-2018-19352 python-notebook: XSS via an crafted directory
https://bugzilla.redhat.com/show_bug.cgi?id=1651975
--------------------------------------------------------------------------------
================================================================================
python-xnat-0.3.11-1.fc29 (FEDORA-2018-8d4268019a)
A new XNAT client that exposes XNAT objects/functions as python objects/functions.
--------------------------------------------------------------------------------
Update Information:
New release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1651388 - Review Request: python-xnat - A new XNAT client that exposes XNAT
objects/functions as python objects/functions
https://bugzilla.redhat.com/show_bug.cgi?id=1651388
--------------------------------------------------------------------------------
================================================================================
sbd-1.3.1-1.git4927571.fc29 (FEDORA-2018-cafed1ee4f)
Storage-based death
--------------------------------------------------------------------------------
Update Information:
- Rebased to commit 4927571f8e9b00db8242654b1329dfbd71dcfe99 - Removed disabling
of shared-disk-support - Resolves rhbz#1606301
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 21 2018 Klaus Wenninger <kwenning(a)redhat.com> - 1.3.1-1.git4927571
- Rebased to commit 4927571f8e9b00db8242654b1329dfbd71dcfe99
- Removed disabling of shared-disk-support
Resolves rhbz#1606301
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.1-4.3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Sun Mar 18 2018 Iryna Shcherbina <ishcherb(a)redhat.com> - 1.2.1-4.2
- Update Python 2 dependency declarations to new packaging standards
(See
https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1606301 - sbd: FTBFS in Fedora rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1606301
--------------------------------------------------------------------------------
================================================================================
upower-0.99.9-1.fc29 (FEDORA-2018-2773b12aad)
Power Management Service
--------------------------------------------------------------------------------
Update Information:
New upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 20 2018 Christian Kellner <ckellner(a)redhat.com> - 0.99.9-1
- New upstream release
- Drop unneccessary patch to fix udev events access
- Fix daemon lockdown issues (keyboard backlight, AC status changes)
- Out-of-tree build fixes and documentation fixes
--------------------------------------------------------------------------------
================================================================================
uriparser-0.9.0-1.fc29 (FEDORA-2018-c5c72a45ea)
URI parsing library - RFC 3986
--------------------------------------------------------------------------------
Update Information:
Update to 0.9.0, see
https://github.com/uriparser/uriparser/blob/uriparser-0.9.0/ChangeLog for
details.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 27 2018 Sandro Mani <manisandro(a)gmail.com> - 0.9.0-1
- Update to 0.9.0
* Mon Aug 20 2018 Sandro Mani <manisandro(a)gmail.com> - 0.8.6-1
- Update to 0.8.6
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1651946 - CVE-2018-19198 uriparser: Out-of-bounds write via uriComposeQuery*
or uriComposeQueryEx* function
https://bugzilla.redhat.com/show_bug.cgi?id=1651946
[ 2 ] Bug #1651948 - CVE-2018-19199 uriparser: Integer overflow via uriComposeQuery* or
uriComposeQueryEx* function
https://bugzilla.redhat.com/show_bug.cgi?id=1651948
[ 3 ] Bug #1651949 - CVE-2018-19200 uriparser: NULL pointer dereference via uriResetUri*
function
https://bugzilla.redhat.com/show_bug.cgi?id=1651949
--------------------------------------------------------------------------------