The following Fedora 29 Security updates need testing:
Age URL
110
https://bodhi.fedoraproject.org/updates/FEDORA-2018-51ce232320
xerces-c27-2.7.0-28.fc29
39
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b89746cb9b
tomcat-9.0.13-1.fc29
11
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c7da53319c
haproxy-1.8.17-1.fc29
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b4356521ba
runc-1.0.0-67.dev.git12f6a99.fc29
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-00870e8bfc
anaconda-29.24.7-2.fc29 python3-3.7.2-4.fc29
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-376ecc221c
nagios-4.4.3-1.fc29
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-a034423db8
docker-1.13.1-63.git1185cfd.fc29
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-f5b57646b7
docker-latest-1.13.1-40.git1185cfd.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3c45bd2cc3
mingw-python-qt5-5.11.3-2.fc29 mingw-qt5-qt3d-5.11.3-1.fc29
mingw-qt5-qtactiveqt-5.11.3-1.fc29 mingw-qt5-qtbase-5.11.3-1.fc29
mingw-qt5-qtcharts-5.11.3-1.fc29 mingw-qt5-qtdeclarative-5.11.3-1.fc29
mingw-qt5-qtgraphicaleffects-5.11.3-1.fc29 mingw-qt5-qtimageformats-5.11.3-1.fc29
mingw-qt5-qtlocation-5.11.3-1.fc29 mingw-qt5-qtmultimedia-5.11.3-1.fc29
mingw-qt5-qtquickcontrols-5.11.3-1.fc29 mingw-qt5-qtscript-5.11.3-1.fc29
mingw-qt5-qtsensors-5.11.3-1.fc29 mingw-qt5-qtserialport-5.11.3-1.fc29
mingw-qt5-qtsvg-5.11.3-1.fc29 mingw-qt5-qttools-5.11.3-1.fc29
mingw-qt5-qttranslations-5.11.3-1.fc29 mingw-qt5-qtwebkit-5.9.4-0.8.gitbd0657f.fc29
mingw-qt5-qtwebsockets-5.11.3-1.fc29 mingw-qt5-qtwinextras-5.11.3-1.fc29
mingw-qt5-qtxmlpatterns-5.11.3-1.fc29 mingw-sip-4.19.13-2.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-427a0ba9e3 curl-7.61.1-7.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-866b01407a
wireshark-2.6.6-1.fc29
The following Fedora 29 Critical Path updates have yet to be approved:
Age URL
40
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3d43e7dd21
SLOF-0.1.git20180702-2.fc29
11
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b1190b5494
pcmanfm-1.3.1-2.D20181227git0619a81f.fc29
10
https://bodhi.fedoraproject.org/updates/FEDORA-2019-27778372a6
pungi-4.1.32-3.fc29
8
https://bodhi.fedoraproject.org/updates/FEDORA-2019-a022691b72
breeze-icon-theme-5.54.0-1.fc29 extra-cmake-modules-5.54.0-1.fc29 kf5-5.54.0-1.fc29
kf5-attica-5.54.0-1.fc29 kf5-baloo-5.54.0-1.fc29 kf5-bluez-qt-5.54.0-1.fc29
kf5-frameworkintegration-5.54.0-1.fc29 kf5-kactivities-5.54.0-1.fc29
kf5-kactivities-stats-5.54.0-1.fc29 kf5-kapidox-5.54.0-1.fc29 kf5-karchive-5.54.0-1.fc29
kf5-kauth-5.54.0-1.fc29 kf5-kbookmarks-5.54.0-1.fc29 kf5-kcmutils-5.54.0-1.fc29
kf5-kcodecs-5.54.0-1.fc29 kf5-kcompletion-5.54.0-1.fc29 kf5-kconfig-5.54.0-1.fc29
kf5-kconfigwidgets-5.54.0-1.fc29 kf5-kcoreaddons-5.54.0-1.fc29 kf5-kcrash-5.54.0-1.fc29
kf5-kdbusaddons-5.54.0-1.fc29 kf5-kdeclarative-5.54.0-1.fc29 kf5-kded-5.54.0-1.fc29
kf5-kdelibs4support-5.54.0-1.fc29 kf5-kdesignerplugin-5.54.0-1.fc29
kf5-kdesu-5.54.0-1.fc29 kf5-kdewebkit-5.54.0-1.fc29 kf5-kdnssd-5.54.0-1.fc29
kf5-kdoctools-5.54.0-1.fc29 kf5-kemoticons-5.54.0-1.fc29 kf5-kfilemetadata-5.54.0-1.fc29
kf5-kglobalaccel-5.54.0-1.fc29 kf5-kguiad
dons-5.54.0-1.fc29 kf5-kholidays-5.54.0-1.fc29 kf5-khtml-5.54.0-1.fc29
kf5-ki18n-5.54.0-1.fc29 kf5-kiconthemes-5.54.0-1.fc29 kf5-kidletime-5.54.0-1.fc29
kf5-kimageformats-5.54.0-1.fc29 kf5-kinit-5.54.0-1.fc29 kf5-kio-5.54.1-1.fc29
kf5-kirigami2-5.54.0-1.fc29 kf5-kitemmodels-5.54.0-1.fc29 kf5-kitemviews-5.54.0-1.fc29
kf5-kjobwidgets-5.54.0-1.fc29 kf5-kjs-5.54.0-1.fc29 kf5-kjsembed-5.54.0-1.fc29
kf5-kmediaplayer-5.54.0-1.fc29 kf5-knewstuff-5.54.0-1.fc29
kf5-knotifications-5.54.0-1.fc29 kf5-knotifyconfig-5.54.0-1.fc29
kf5-kpackage-5.54.0-1.fc29 kf5-kparts-5.54.0-1.fc29 kf5-kpeople-5.54.0-1.fc29
kf5-kplotting-5.54.0-1.fc29 kf5-kpty-5.54.0-1.fc29 kf5-kross-5.54.0-1.fc29
kf5-krunner-5.54.0-1.fc29 kf5-kservice-5.54.0-1.fc29 kf5-ktexteditor-5.54.0-1.fc29
kf5-ktextwidgets-5.54.0-1.fc29 kf5-kunitconversion-5.54.0-1.fc29 kf5-kwallet-5.54.0-1.fc29
kf5-kwayland-5.54.0-1.fc29 kf5-kwidgetsaddons-5.54.0-1.fc29
kf5-kwindowsystem-5.54.0-1.fc29 kf5-kxmlgui-5.54.0-1.fc29 kf5-kxmlrpcclient-5.54.0-1.fc29
kf5-modemmanager-qt-5.54.0-1.fc29 kf5-networkmanager-qt-5.54.0-1.fc29
kf5-plasma-5.54.0-1.fc29 kf5-prison-5.54.0-1.fc29 kf5-purpose-5.54.0-1.fc29
kf5-solid-5.54.0-1.fc29 kf5-sonnet-5.54.0-1.fc29 kf5-syndication-5.54.0-1.fc29
kf5-syntax-highlighting-5.54.0-1.fc29 kf5-threadweaver-5.54.0-1.fc29
oxygen-icon-theme-5.54.0-1.fc29 qqc2-desktop-style-5.54.0-1.fc29
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-00870e8bfc
anaconda-29.24.7-2.fc29 python3-3.7.2-4.fc29
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-0ab485544f
libguestfs-1.40.1-2.fc29
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-063d6e79f1
hivex-1.3.16-1.fc29
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-f357f36983
supermin-5.1.20-1.fc29
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ca705d784a lorax-29.25-1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-0e7003b946
osinfo-db-20190120-1.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-a97ca934d5
appstream-data-29-9.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ea8a50f7eb exo-0.12.4-1.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-791dec47d1
p11-kit-0.23.15-1.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-427a0ba9e3 curl-7.61.1-7.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-057ba29a5a gcr-3.28.1-1.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-7eace99b9b
libsolv-0.7.2-2.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c790d75439 llvm-7.0.1-2.fc29
rust-1.32.0-1.fc29
The following builds have been pushed to Fedora 29 updates-testing
R-IRkernel-0.8.15-1.fc29
container-selinux-2.80-1.git1b655d9.fc29
erlang-20.3.8.18-1.fc29
flatpak-module-tools-0.9.1-1.fc29
glib2-2.58.3-1.fc29
golang-github-jawher-mow-cli-1.0.4-1.fc29
ibus-libpinyin-1.11.0-1.fc29
ibus-libzhuyin-1.9.0-1.fc29
libpinyin-2.2.2-1.fc29
librsvg2-2.44.12-1.fc29
libwebp-1.0.2-1.fc29
linux-firmware-20190118-91.gita8b75cac.fc29
mingw-glib2-2.58.3-1.fc29
mingw-libwebp-1.0.2-1.fc29
moodle-3.5.4-1.fc29
mysql-selinux-1.0.0-7.fc29
nfoview-1.26-1.fc29
phan-1.2.1-1.fc29
php-microsoft-tolerant-php-parser-0.0.16-1.fc29
poppler-0.67.0-10.fc29
puppet-5.5.6-3.fc29
python-jsonschema-2.6.0-6.fc29
python-pycxx-7.1.0-1.fc29
python-ttystatus-0.38-1.fc29
python-tvb-data-1.5.6-4.20191229git7d2d05b.fc29
rednotebook-2.8-1.fc29
rpm-ostree-2019.1-1.fc29
singularity-3.0.3-1.fc29
vala-0.42.5-1.fc29
viking-1.7-1.fc29
virtualbox-guest-additions-5.2.24-1.fc29
wingpanel-applications-menu-2.4.2-1.fc29
zeromq-4.1.6-11.fc29
Details about builds:
================================================================================
R-IRkernel-0.8.15-1.fc29 (FEDORA-2019-0fba554a5f)
Native R Kernel for the 'Jupyter Notebook'
--------------------------------------------------------------------------------
Update Information:
Initial package of IRkernel for R
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1666942 - Review Request: R-IRkernel - Native R Kernel for the 'Jupyter
Notebook'
https://bugzilla.redhat.com/show_bug.cgi?id=1666942
--------------------------------------------------------------------------------
================================================================================
container-selinux-2.80-1.git1b655d9.fc29 (FEDORA-2019-4c15487ac9)
SELinux policies for container runtimes
--------------------------------------------------------------------------------
Update Information:
Remove access to container runtime sockets.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 22 2019 Dan Walsh <dwalsh(a)fedoraproject.org> - 2.80-1
- Don't allow containers to talk to contianer runtime sockets
--------------------------------------------------------------------------------
================================================================================
erlang-20.3.8.18-1.fc29 (FEDORA-2019-59bfc92218)
General-purpose programming language and runtime environment
--------------------------------------------------------------------------------
Update Information:
* Erlang ver. 20.3.8.18 ---- * Fix for nodes querying ---- * Erlang ver.
20.3.8.17 ---- * Erlang ver. 20.3.8.16
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 22 2019 Peter Lemenkov <lemenkov(a)gmail.com> - 20.3.8.18-1
- Ver. 20.3.8.18
* Tue Jan 15 2019 Peter Lemenkov <lemenkov(a)gmail.com> - 20.3.8.17-2
- Fix issue with nodes info querying
- Enable verbose build logs
* Thu Jan 10 2019 Peter Lemenkov <lemenkov(a)gmail.com> - 20.3.8.17-1
- Ver. 20.3.8.17
* Tue Jan 8 2019 Peter Lemenkov <lemenkov(a)gmail.com> - 20.3.8.16-1
- Ver. 20.3.8.16
* Mon Dec 10 2018 Peter Lemenkov <lemenkov(a)gmail.com> - 20.3.8.15-1
- Ver. 20.3.8.15
--------------------------------------------------------------------------------
================================================================================
flatpak-module-tools-0.9.1-1.fc29 (FEDORA-2019-b3099803c8)
Tools for maintaining Flatpak applications and runtimes as Fedora modules
--------------------------------------------------------------------------------
Update Information:
Version 0.9.1 * Fix compatibility with module handling in dnf in F29 and newer
* Fix compatibility with mock configured to use systemd-nspawn * Add a
configuration system to allow profiles pointing at different infrastructure *
Bug fixes
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 22 2019 fedora-toolbox <otaylor(a)redhat.com> - 0.9.1-1
- Version 0.9.1 - bug fixes including systemd-nspawn compatibility
* Tue Jan 22 2019 Owen Taylor <otaylor(a)redhat.com> - 0.9-1
- Version 0.9 - configurability, fixes for F29 dnf compatibility
--------------------------------------------------------------------------------
================================================================================
glib2-2.58.3-1.fc29 (FEDORA-2019-faeddd973a)
A library of handy utility functions
--------------------------------------------------------------------------------
Update Information:
glib 2.58.3 release. * Fix GVariant tests on i686 * Fix crashes caused by
filtering of mounts Bugs fixed: - 2.58.2 GVariant test failure on i686 -
EXCEPTION_ACCESS_VIOLATION in g_clear_pointer - 2.58.2 introduces libgio
segfaults - Backport Suppress -Wint-in-bool-context warning with
G_DEFINE_INTERFACE and g++ to glib-2-58 - Don't fail trash test if ~/.local
doesn't exist or mount points can't be determined - gunixmounts: Fix segfaults
caused by new filter of mounts
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 22 2019 Kalev Lember <klember(a)redhat.com> - 2.58.3-1
- Update to 2.58.3
--------------------------------------------------------------------------------
================================================================================
golang-github-jawher-mow-cli-1.0.4-1.fc29 (FEDORA-2019-b8dceb084e)
Versatile library for building CLI applications in Go
--------------------------------------------------------------------------------
Update Information:
- Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1663708 - Review Request: golang-github-jawher-mow-cli - Versatile library
for building CLI applications in Go
https://bugzilla.redhat.com/show_bug.cgi?id=1663708
--------------------------------------------------------------------------------
================================================================================
ibus-libpinyin-1.11.0-1.fc29 (FEDORA-2019-00437e6de0)
Intelligent Pinyin engine based on libpinyin for IBus
--------------------------------------------------------------------------------
Update Information:
ibus-libpinyin * fixes keypad decimal * fixes emoji candidates * support
configurable opencc config ibus-libzhuyin * fixes special symbol * add need-
tone option
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 21 2019 Peng Wu <pwu(a)redhat.com> - 1.11.0-1
- Update to 1.11.0
- fixes keypad decimal
- fixes emoji candidates
- support configurable opencc config
--------------------------------------------------------------------------------
================================================================================
ibus-libzhuyin-1.9.0-1.fc29 (FEDORA-2019-00437e6de0)
New Zhuyin engine based on libzhuyin for IBus
--------------------------------------------------------------------------------
Update Information:
ibus-libpinyin * fixes keypad decimal * fixes emoji candidates * support
configurable opencc config ibus-libzhuyin * fixes special symbol * add need-
tone option
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 22 2019 Peng Wu <pwu(a)redhat.com> - 1.9.0-1
- Update to 1.9.0
- fixes special symbol
- add need-tone option
--------------------------------------------------------------------------------
================================================================================
libpinyin-2.2.2-1.fc29 (FEDORA-2019-00437e6de0)
Library to deal with pinyin
--------------------------------------------------------------------------------
Update Information:
ibus-libpinyin * fixes keypad decimal * fixes emoji candidates * support
configurable opencc config ibus-libzhuyin * fixes special symbol * add need-
tone option
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 21 2019 Peng Wu <pwu(a)redhat.com> - 2.2.2-1
- Update to 2.2.2
- minor fixes
--------------------------------------------------------------------------------
================================================================================
librsvg2-2.44.12-1.fc29 (FEDORA-2019-edcb9267e0)
An SVG library based on cairo
--------------------------------------------------------------------------------
Update Information:
librsvg 2.44.12 release. For details, see
https://mail.gnome.org/archives/ftp-
release-list/2019-January/msg00077.html
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 22 2019 Kalev Lember <klember(a)redhat.com> - 2.44.12-1
- Update to 2.44.12
--------------------------------------------------------------------------------
================================================================================
libwebp-1.0.2-1.fc29 (FEDORA-2019-4eb4ba6069)
Library and tools for the WebP graphics format
--------------------------------------------------------------------------------
Update Information:
Update to libwebp-1.0.2, see
https://raw.githubusercontent.com/webmproject/libwebp/master/NEWS for details.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 22 2019 Sandro Mani <manisandro(a)gmail.com> - 1.0.2-1
- Update to 1.0.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1667640 - libwebp-1.0.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1667640
--------------------------------------------------------------------------------
================================================================================
linux-firmware-20190118-91.gita8b75cac.fc29 (FEDORA-2019-d1e8aa952c)
Firmware files used by the Linux kernel
--------------------------------------------------------------------------------
Update Information:
* Latest Intel 9000 series WiFi/Bluetooth firmware * Marvell WiFi (USB8801),
cxgb4, amdgpu updates * Raspberrp Pi 3-series NMRAM updates
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 22 2019 Peter Robinson <pbrobinson(a)fedoraproject.org>
20190118-91.gita8b75cac
- Latest Intel 9000 series WiFi/Bluetooth firmware
- Marvell WiFi (USB8801), cxgb4, amdgpu updates
- Raspberrp Pi 3-series NMRAM updates
--------------------------------------------------------------------------------
================================================================================
mingw-glib2-2.58.3-1.fc29 (FEDORA-2019-40131908b4)
MinGW Windows GLib2 library
--------------------------------------------------------------------------------
Update Information:
MinGW cross compiled glib 2.58.3 release.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 22 2019 Kalev Lember <klember(a)redhat.com> - 2.58.3-1
- Update to 2.58.3
--------------------------------------------------------------------------------
================================================================================
mingw-libwebp-1.0.2-1.fc29 (FEDORA-2019-4eb4ba6069)
MinGW compilation of Library and tools for the WebP format
--------------------------------------------------------------------------------
Update Information:
Update to libwebp-1.0.2, see
https://raw.githubusercontent.com/webmproject/libwebp/master/NEWS for details.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 22 2019 Sandro Mani <manisandro(a)gmail.com> - 1.0.2-1
- Update to 1.0.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1667640 - libwebp-1.0.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1667640
--------------------------------------------------------------------------------
================================================================================
moodle-3.5.4-1.fc29 (FEDORA-2019-d8ec88b21e)
A Course Management System
--------------------------------------------------------------------------------
Update Information:
Multiple CVE fixes.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 22 2019 Gwyn Ciesla <limburgher(a)gmail.com> - 3.5.4-1
- 3.5.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1668074 - CVE-2019-3810 moodle: User full name is not escaped in the
un-linked userpix page (MSA-19-0003) [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1668074
[ 2 ] Bug #1668068 - CVE-2019-3809 moodle: Blind SSRF Risk in /badges/mybackpack.php
(MSA-19-0002) [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1668068
[ 3 ] Bug #1668066 - CVE-2019-3808 moodle: Manage groups capability is missing XSS risk
flag (MSA-19-0001) [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1668066
[ 4 ] Bug #1668065 - CVE-2019-3808 moodle: Manage groups capability is missing XSS risk
flag (MSA-19-0001) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1668065
--------------------------------------------------------------------------------
================================================================================
mysql-selinux-1.0.0-7.fc29 (FEDORA-2019-8fd30157ec)
SELinux policies for product
--------------------------------------------------------------------------------
Update Information:
Fix install/uninstall procedure. ---- Sync with upstream.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 11 2019 Kevin Fenzi <kevin(a)scrye.com> - 1.0.0-7
- Also make sure posttrans does not fail.
* Thu Jan 10 2019 Kevin Fenzi <kevin(a)scrye.com> - 1.0.0-6
- Add Requires(post) on policycoreutils for semodule and make sure post/postun cannot
fail
* Thu Dec 6 2018 Jakub Janco <jjanco(a)redhat.com> - 1.0.0-5
- Sync with upstream
* Wed Aug 29 2018 Jakub Janco <jjanco(a)redhat.com> - 1.0.0-4
- Allow mysqld sys_nice capability
--------------------------------------------------------------------------------
================================================================================
nfoview-1.26-1.fc29 (FEDORA-2019-cb87423901)
A viewer for NFO files
--------------------------------------------------------------------------------
Update Information:
Update to new upstream version 1.26
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 22 2019 Fabian Affolter <mail(a)fabian-affolter.ch> - 1.26-1
- Update to new upstream version 1.26
--------------------------------------------------------------------------------
================================================================================
phan-1.2.1-1.fc29 (FEDORA-2019-20b811f212)
A static analyzer for PHP
--------------------------------------------------------------------------------
Update Information:
18 Jan 2019, **Phan 1.2.1** **New features (CLI):** + Add short flags: `-S`
for `--strict-type-checking`, `-C` for `--color`, `-P` for `--plugin <plugin>`
**New features (Analysis):** + Infer that the result of `array_map` has integer
keys when passed two or more arrays (#2277) + Improve inferences about the left
hand side of `&&` statements such as `$leftVar && (other_expression);`
(#2300) +
Warn about passing an undefined variable to a function expecting a reference
parameter with a real, non-nullable type (#1344) + Include variables in scope as
alternative suggestions for undeclared properties (#1680) + Infer a string
literal when analyzing calls to `basename` or `dirname` on an expression that
evaluates to a string literal. (#2323) + Be stricter about warning when literal
int/string values are passed to incompatible scalar types when
`scalar_implicit_cast` or `scalar_implicit_partial` are used. (#2340)
**Maintenance:** + End the output for `--output-mode <json>` with a newline. +
Upgrade tolerant-php-parser, making the polyfill/fallback properly parse `$a &&
$b = $c` (#2180) + Add updates to the function/method signature map from Psalm
and PHPStan. **Language Server/Daemon mode:** + Add `--output-mode <mode>` to
`phan_client`. (#1568). Supported formats: `phan_client` (default), `text`,
`json`, `csv`, `codeclimate`, `checkstyle`, or `pylint` + Add `--color` to
`phan_client` (e.g. for use with `--output-mode text`) + Add `--language-server-
completion-vscode`. This is a workaround to make completion of variables and
static properties work in [the Phan plugin for VS
Code](https://github.com/tysonandre/vscode-php-phan) + Include Phan's signature
types in hover text for internal and user-defined methods (instead of just the
real types) (#2309) Also, show defaults of non-nullable parameters as `=
default` instead of `= null` + Properly return a result set when requesting
variable completion of `$` followed by nothing. + Fix code completion when
`--language-server-analyze-only-on-save` is on. (#2327) **Plugins:** + Add a
new issue type to `DuplicateExpressionPlugin`: `PhanPluginBothLiteralsBinaryOp`.
(#2297) (warns about suspicious expressions such as `null == 'a literal` in
`$x ?? null == 'a literal'`) + Support `assertInternalType` in
`PHPUnitAssertionPlugin` (#2290) + Warn when identical dynamic expressions (e.g.
variables, function calls) are used as array keys in `DuplicateArrayKeyPlugin`
---- **microsoft/tolerant-php-parser version 0.0.16**
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 19 2019 Remi Collet <remi(a)remirepo.net> - 1.2.1-1
- update to 1.2.1
- raise dependency on microsoft/tolerant-php-parser 0.0.16
--------------------------------------------------------------------------------
================================================================================
php-microsoft-tolerant-php-parser-0.0.16-1.fc29 (FEDORA-2019-20b811f212)
Tolerant PHP-to-AST parser
--------------------------------------------------------------------------------
Update Information:
18 Jan 2019, **Phan 1.2.1** **New features (CLI):** + Add short flags: `-S`
for `--strict-type-checking`, `-C` for `--color`, `-P` for `--plugin <plugin>`
**New features (Analysis):** + Infer that the result of `array_map` has integer
keys when passed two or more arrays (#2277) + Improve inferences about the left
hand side of `&&` statements such as `$leftVar && (other_expression);`
(#2300) +
Warn about passing an undefined variable to a function expecting a reference
parameter with a real, non-nullable type (#1344) + Include variables in scope as
alternative suggestions for undeclared properties (#1680) + Infer a string
literal when analyzing calls to `basename` or `dirname` on an expression that
evaluates to a string literal. (#2323) + Be stricter about warning when literal
int/string values are passed to incompatible scalar types when
`scalar_implicit_cast` or `scalar_implicit_partial` are used. (#2340)
**Maintenance:** + End the output for `--output-mode <json>` with a newline. +
Upgrade tolerant-php-parser, making the polyfill/fallback properly parse `$a &&
$b = $c` (#2180) + Add updates to the function/method signature map from Psalm
and PHPStan. **Language Server/Daemon mode:** + Add `--output-mode <mode>` to
`phan_client`. (#1568). Supported formats: `phan_client` (default), `text`,
`json`, `csv`, `codeclimate`, `checkstyle`, or `pylint` + Add `--color` to
`phan_client` (e.g. for use with `--output-mode text`) + Add `--language-server-
completion-vscode`. This is a workaround to make completion of variables and
static properties work in [the Phan plugin for VS
Code](https://github.com/tysonandre/vscode-php-phan) + Include Phan's signature
types in hover text for internal and user-defined methods (instead of just the
real types) (#2309) Also, show defaults of non-nullable parameters as `=
default` instead of `= null` + Properly return a result set when requesting
variable completion of `$` followed by nothing. + Fix code completion when
`--language-server-analyze-only-on-save` is on. (#2327) **Plugins:** + Add a
new issue type to `DuplicateExpressionPlugin`: `PhanPluginBothLiteralsBinaryOp`.
(#2297) (warns about suspicious expressions such as `null == 'a literal` in
`$x ?? null == 'a literal'`) + Support `assertInternalType` in
`PHPUnitAssertionPlugin` (#2290) + Warn when identical dynamic expressions (e.g.
variables, function calls) are used as array keys in `DuplicateArrayKeyPlugin`
---- **microsoft/tolerant-php-parser version 0.0.16**
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 19 2019 Remi Collet <remi(a)remirepo.net> - 0.0.16-1
- update to 0.0.16
--------------------------------------------------------------------------------
================================================================================
poppler-0.67.0-10.fc29 (FEDORA-2019-7ff7f5093e)
PDF rendering library
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2018-20551, CVE-2018-20481, CVE-2018-20650 and
CVE-2018-18897.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 22 2019 Marek Kasik <mkasik(a)redhat.com> - 0.67.0-10
- Avoid global display profile state becoming an uncontrolled
- memory leak
- Resolves: #1646549
* Mon Jan 21 2019 Marek Kasik <mkasik(a)redhat.com> - 0.67.0-9
- Do not try to parse into unallocated XRef entry
- Resolves: #1665268
* Mon Jan 21 2019 Marek Kasik <mkasik(a)redhat.com> - 0.67.0-8
- Move the fileSpec.dictLookup call inside fileSpec.isDict if
- Resolves: #1665264
* Mon Jan 21 2019 Marek Kasik <mkasik(a)redhat.com> - 0.67.0-7
- Do not try to construct invalid rich media annotation assets
- Resolves: #1665260
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1665259 - CVE-2018-20551 poppler: reachable Object::getString assertion in
AnnotRichMedia class in Annot.c
https://bugzilla.redhat.com/show_bug.cgi?id=1665259
[ 2 ] Bug #1665266 - CVE-2018-20481 poppler: NULL pointer dereference in the
XRef::getEntry in XRef.cc
https://bugzilla.redhat.com/show_bug.cgi?id=1665266
[ 3 ] Bug #1665263 - CVE-2018-20650 poppler: reachable Object::dictLookup assertion in
FileSpec class in FileSpec.cc
https://bugzilla.redhat.com/show_bug.cgi?id=1665263
[ 4 ] Bug #1646546 - CVE-2018-18897 poppler: memory leak in
GfxColorSpace::setDisplayProfile in GfxState.cc
https://bugzilla.redhat.com/show_bug.cgi?id=1646546
--------------------------------------------------------------------------------
================================================================================
puppet-5.5.6-3.fc29 (FEDORA-2019-035aaa739d)
A network tool for managing many disparate systems
--------------------------------------------------------------------------------
Update Information:
Update to puppet 5.5.6 and add a systemd script change.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 22 2019 Bogdan Dobrelya <bdobreli(a)redhat.com> - 5.5.6-3
- Use systemd_ordering macro
* Wed Oct 31 2018 Ha��kel Gu��mar <hguemar(a)fedoraproject.org> - 5.5.6-1
- Upstream 5.5.6
- Fix issues with RHEL > 7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1654672 - Optimize puppet RPM spec for systemd requirements when installing
it in containers
https://bugzilla.redhat.com/show_bug.cgi?id=1654672
--------------------------------------------------------------------------------
================================================================================
python-jsonschema-2.6.0-6.fc29 (FEDORA-2019-58052493a6)
An implementation of JSON Schema validation for Python
--------------------------------------------------------------------------------
Update Information:
Add a patch to use the correct python executable on fedora 29+ to fix the FTBFS
issue.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.6.0-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1605736 - python-jsonschema: FTBFS in Fedora rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1605736
--------------------------------------------------------------------------------
================================================================================
python-pycxx-7.1.0-1.fc29 (FEDORA-2019-1f08a3d991)
Write Python extensions in C++
--------------------------------------------------------------------------------
Update Information:
Update to 7.1.0.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 21 2019 Richard Shaw <hobbes1069(a)gmail.com> - 7.1.0-1
- Update to 7.1.0.
--------------------------------------------------------------------------------
================================================================================
python-ttystatus-0.38-1.fc29 (FEDORA-2019-cc096b6ad1)
Progress and status updates on terminals for Python
--------------------------------------------------------------------------------
Update Information:
- Update to latest upstream release - Also build for Python 3
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 21 2019 Michel Alexandre Salim <salimma(a)fedoraproject.org> - 0.38-1
- Update to 0.38
- Also build for Python 3
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.34-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1605959 - python-ttystatus: FTBFS in Fedora rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1605959
[ 2 ] Bug #1458531 - python-ttystatus-0.37.orig is available
https://bugzilla.redhat.com/show_bug.cgi?id=1458531
--------------------------------------------------------------------------------
================================================================================
python-tvb-data-1.5.6-4.20191229git7d2d05b.fc29 (FEDORA-2019-872277e166)
Demo data for The Virtual Brain software
--------------------------------------------------------------------------------
Update Information:
New package! TVB data: data for The Virtual Brain
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1662538 - Review Request: python-tvb-data - Demo data for The Virtual Brain
software
https://bugzilla.redhat.com/show_bug.cgi?id=1662538
--------------------------------------------------------------------------------
================================================================================
rednotebook-2.8-1.fc29 (FEDORA-2019-fb02798782)
Daily journal with calendar, templates and keyword searching
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release 2.8
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 22 2019 Fabian Affolter <mail(a)fabian-affolter.ch> - 2.8-1
- Update to latest upstream release 2.8
--------------------------------------------------------------------------------
================================================================================
rpm-ostree-2019.1-1.fc29 (FEDORA-2019-4ae69dc026)
Hybrid image/package system
--------------------------------------------------------------------------------
Update Information:
New upstream release. See release notes for details:
https://github.com/projectatomic/rpm-ostree/releases/tag/v2019.1
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 22 2019 Jonathan Lebon <jonathan(a)jlebon.com> - 2019.1-1
- New upstream version
--------------------------------------------------------------------------------
================================================================================
singularity-3.0.3-1.fc29 (FEDORA-2019-6d921f8fe1)
Application and environment virtualization
--------------------------------------------------------------------------------
Update Information:
Update to upstream 3.0.3-1 release.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 22 2019 Dave Dykstra <dwd(a)fedoraproject.org> - 3.0.3-1
- Update to upstream 3.0.3-1 release.
* Fri Jan 18 2019 Dave Dykstra <dwd(a)fedoraproject.org> - 3.0.3-rc2
- Update to upstream 3.0.3-rc2
* Wed Jan 16 2019 Dave Dykstra <dwd(a)fedoraproject.org> - 3.0.3-rc1
- Update to upstream 3.0.3-rc1
* Wed Jan 9 2019 Dave Dykstra <dwd(a)fedoraproject.org> - 3.0.2-1.2
- Add patch for PR 2531
* Mon Jan 7 2019 Dave Dykstra <dwd(a)fedoraproject.org> - 3.0.2-1.1
- Update to upstream 3.0.2
- Added patches for PRs 2472, 2478, 2481
--------------------------------------------------------------------------------
================================================================================
vala-0.42.5-1.fc29 (FEDORA-2019-56be92e01e)
A modern programming language for GNOME
--------------------------------------------------------------------------------
Update Information:
vala 0.42.5 release. For details, see
https://mail.gnome.org/archives/ftp-
release-list/2019-January/msg00081.html
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 22 2019 Kalev Lember <klember(a)redhat.com> - 0.42.5-1
- Update to 0.42.5
--------------------------------------------------------------------------------
================================================================================
viking-1.7-1.fc29 (FEDORA-2019-f607b1832d)
GPS data editor and analyzer
--------------------------------------------------------------------------------
Update Information:
Update to new upstream version 1.7
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 22 2019 Fabian Affolter <mail(a)fabian-affolter.ch> - 1.7-1
- Update to new upstream version 1.7
* Fri Sep 28 2018 Federico Bruni <fede(a)inventati.org> - 1.6.2-8
- Add man page and fix help files location (rhbz#1633836)
--------------------------------------------------------------------------------
================================================================================
virtualbox-guest-additions-5.2.24-1.fc29 (FEDORA-2019-c5042bdb37)
VirtualBox Guest Additions
--------------------------------------------------------------------------------
Update Information:
- Update Virtualbox Guest Additions to 5.2.24, security fix version
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 22 2019 Hans de Goede <hdegoede(a)redhat.com> - 5.2.24-1
- Update Virtualbox Guest Additions to 5.2.24, security fix version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1668440 - virtualbox-guest-additions 5.2.24 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1668440
--------------------------------------------------------------------------------
================================================================================
wingpanel-applications-menu-2.4.2-1.fc29 (FEDORA-2019-e032c89d9e)
Lightweight and stylish app launcher
--------------------------------------------------------------------------------
Update Information:
Update to version 2.4.2. Release notes:
https://github.com/elementary/applications-menu/releases/tag/2.4.2
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 22 2019 Fabio Valentini <decathorpe(a)gmail.com> - 2.4.2-1
- Update to version 2.4.2.
--------------------------------------------------------------------------------
================================================================================
zeromq-4.1.6-11.fc29 (FEDORA-2019-2788cc6712)
Software library for fast, message-based applications
--------------------------------------------------------------------------------
Update Information:
Fix FTBFS in Fedora 29. Backport patches to fix test failures in build. Cleanup
spec a little.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 21 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 4.1.6-11
- Backport patches to fix test failures in build
- Cleanup spec a little
- Use explicit soname version in file list
* Tue Aug 28 2018 Pavel Zhukov <landgraf(a)fedoraproject.org> - 4.1.6-10
- Add gcc-c++ BR
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.1.6-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.1.6-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1606788 - zeromq: FTBFS in Fedora rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1606788
--------------------------------------------------------------------------------