The following Fedora 29 Security updates need testing:
Age URL
46
https://bodhi.fedoraproject.org/updates/FEDORA-2019-49f80a78bc
mingw-sqlite-3.26.0.0-1.fc29
27
https://bodhi.fedoraproject.org/updates/FEDORA-2019-fa5843e0e1
asterisk-16.2.1-1.fc29
21
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4d83e78ad8
libu2f-host-1.1.8-1.fc29
21
https://bodhi.fedoraproject.org/updates/FEDORA-2019-f781d5c4c6
ntp-4.2.8p13-1.fc29
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c84f291592
WALinuxAgent-2.2.38-1.fc29
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-bff1cbaba3
edk2-20190308stable-1.fc29
8
https://bodhi.fedoraproject.org/updates/FEDORA-2019-7528388823
chicken-5.0.0-2.fc29
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-35589cfcb5
drupal7-7.65-1.fc29
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-1d9be4b853
drupal8-8.6.13-1.fc29
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-1a2c059afd
ghostscript-9.26-4.fc29
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-db1e9b3002
mod_auth_mellon-0.14.0-5.fc29
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-117e425677
golang-googlecode-go-crypto-0-0.28.20190324gitb7391e9.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ae913a2f00 qt-4.8.7-45.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-31722b8f33 fuse-2.9.9-1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e8c1cf958f
gnutls-3.6.7-1.fc29
The following Fedora 29 Critical Path updates have yet to be approved:
Age URL
22
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4d2303dc16
pungi-4.1.34-1.fc29
17
https://bodhi.fedoraproject.org/updates/FEDORA-2019-940d3922ce koji-1.17.0-5.fc29
16
https://bodhi.fedoraproject.org/updates/FEDORA-2019-5329292fc2
fedfind-4.2.2-1.fc29 python-productmd-1.20-1.fc29
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-96c964d319 sddm-0.18.0-4.fc29
10
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ebfd1fe19b
uboot-tools-2018.09-3.fc29
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-bff1cbaba3
edk2-20190308stable-1.fc29
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-7c323cc0a7
lxpanel-0.10.0-2.D20190301gitb9ad6f2a.fc29
8
https://bodhi.fedoraproject.org/updates/FEDORA-2019-32ee5fb506
python-productmd-1.21-1.fc29
8
https://bodhi.fedoraproject.org/updates/FEDORA-2019-f4b2308023
iproute-5.0.0-2.fc29
8
https://bodhi.fedoraproject.org/updates/FEDORA-2019-65327463be
psmisc-23.1-4.1.fc29
8
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ec5e8e23ba
osinfo-db-20190319-1.fc29
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-a6b95f631a
python-blivet-3.1.2-4.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e8c1cf958f
gnutls-3.6.7-1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d04731547a
python3-3.7.3-1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-7fbfa37585 dnf-4.2.2-1.fc29
librepo-1.9.6-1.fc29 libdnf-0.28.1-1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-85896b401a
audit-3.0-0.7.20190326git03e7489.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-31722b8f33 fuse-2.9.9-1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-5bd45146e1 fwupd-1.2.6-1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3987b3ae94
libsolv-0.7.2-3.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-412c8b4a63 pcre2-10.32-9.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ae913a2f00 qt-4.8.7-45.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ca5daf6531 nspr-4.21.0-1.fc29
nss-3.43.0-1.fc29
The following builds have been pushed to Fedora 29 updates-testing
aria2-1.34.0-4.fc29
bifcl-1.1-1.fc29
clamav-0.101.2-1.fc29
cmocka-1.1.5-1.fc29
erlang-ranch-1.7.1-1.fc29
flatpak-1.2.4-1.fc29
fuse-overlayfs-0.3-8.dev.gita6958ce.fc29
glpi-9.3.3-2.fc29
golang-github-mail-v2-2.3.1-1.fc29
gzip-1.9-9.fc29
hub-2.10.1-1.fc29
inkscape-0.92.4-5.fc29
intel-cmt-cat-3.0.1-1.fc29
kernel-5.0.5-200.fc29
kernel-headers-5.0.5-200.fc29
kernel-tools-5.0.5-200.fc29
libmodulemd-2.2.2-2.fc29
mame-0.208-1.fc29
mbedtls-2.16.1-1.fc29
paperwork-1.2.4-2.fc29
pdns-4.1.8-1.fc29
pspp-1.2.0-2.fc29
python-Pyped-1.4-13.fc29
python-alembic-1.0.8-1.fc29
python-flake8-docstrings-1.2.0-2.fc29
python-flake8-polyfill-1.0.2-1.fc29
python-operator-courier-1.2.1-1.fc29
python-paperwork-backend-1.2.4-1.fc29
python-pycountry-18.5.26-1.fc29
python-pyocr-0.6-2.fc29
python-rosdistro-0.7.3-1.fc29
python-rosinstall_generator-0.1.16-1.fc29
quilt-0.66-1.fc29
rpm-ostree-2019.3-1.fc29
shyaml-0.6.1-1.fc29
socket_wrapper-1.2.3-1.fc29
sos-3.7-1.fc29
sssd-2.1.0-2.fc29
visidata-1.5.2-2.fc29
whois-5.4.2-1.fc29
yarock-1.4.0-1.fc29
Details about builds:
================================================================================
aria2-1.34.0-4.fc29 (FEDORA-2019-fa61af95b3)
High speed download utility with resuming and segmented downloading
--------------------------------------------------------------------------------
Update Information:
Fix Password leak for HTTP based authentication CVE-2019-3500 (rhbz #1663991
#1663992 #1663993)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 27 2019 Athmane Madjoudj <athmane(a)fedoraproject.org> - 1.34.0-4
- Fix Password leak for HTTP based authentication CVE-2019-3500 (rhbz #1663991 #1663992
#1663993)
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.34.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1663991 - CVE-2019-3500 aria2: Password leak for HTTP based authentication
https://bugzilla.redhat.com/show_bug.cgi?id=1663991
--------------------------------------------------------------------------------
================================================================================
bifcl-1.1-1.fc29 (FEDORA-2019-659c9a227a)
A built-in-function (BIF) compiler/generator
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1690634 - Review Request: bifcl - A built-in-function (BIF)
compiler/generator
https://bugzilla.redhat.com/show_bug.cgi?id=1690634
--------------------------------------------------------------------------------
================================================================================
clamav-0.101.2-1.fc29 (FEDORA-2019-fa59f1ed49)
End-user tools for the Clam Antivirus scanner
--------------------------------------------------------------------------------
Update Information:
We just published two patch versions, 0.101.2 and 0.100.3. These versions
address a handful of potentially high severity security issues. Please package
these for your respective communities as soon as you���re able. For details,
check out our blog entry:
https://blog.clamav.net/2019/03/clamav-01012-and-01003-patches-have.html
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 28 2019 S��rgio Basto <sergio(a)serjux.com> - 0.101.2-1
- Update to 0.101.2
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.101.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1693011 - clamav-0.101.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1693011
--------------------------------------------------------------------------------
================================================================================
cmocka-1.1.5-1.fc29 (FEDORA-2019-0a61056e63)
An elegant unit testing framework for C with support for mock objects
--------------------------------------------------------------------------------
Update Information:
Update to version 1.1.5
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 28 2019 Andreas Schneider <asn(a)redhat.com> - 1.1.5-1
- Update to version 1.1.5
--------------------------------------------------------------------------------
================================================================================
erlang-ranch-1.7.1-1.fc29 (FEDORA-2019-e03f5f486c)
Socket acceptor pool for TCP protocols
--------------------------------------------------------------------------------
Update Information:
* Ver. 1.7.1
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 28 2019 Peter Lemenkov <lemenkov(a)gmail.com> - 1.7.1-1
- Ver. 1.7.1
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1651658 - erlang-ranch-1.7.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1651658
--------------------------------------------------------------------------------
================================================================================
flatpak-1.2.4-1.fc29 (FEDORA-2019-7d09431f07)
Application deployment framework for desktop apps
--------------------------------------------------------------------------------
Update Information:
Update to 1.2.4 * seccomp: Only compare the low 32bit of the TIOCSTI ioctl
args. * Support multiple nvidia cards on the machine * Fix support for systems
where XDG_RUNTIME_DIR is /var/run which is a symlink like gentoo. * Fix
potential crash when updating apps. * flatpak list --arch now works correctly
again. * Update translations
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 27 2019 David King <amigadave(a)amigadave.com> - 1.2.4-1
- Update to 1.2.4
--------------------------------------------------------------------------------
================================================================================
fuse-overlayfs-0.3-8.dev.gita6958ce.fc29 (FEDORA-2019-da2f894893)
FUSE overlay+shiftfs implementation for rootless containers
--------------------------------------------------------------------------------
Update Information:
built commit a6958ce ---- Add loading of fuse file system
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 28 2019 Giuseppe Scrivano <gscrivan(a)redhat.com> - 0.3-8.dev.gita6958ce
- built commit a6958ce
* Mon Mar 25 2019 Giuseppe Scrivano <gscrivan(a)redhat.com> - 0.3-7.dev.git8ec68ae
- Add loading of fuse file system
* Thu Mar 21 2019 Dan Walsh <dwalsh(a)redhat.com> - 0.3-6.dev.git8ec68ae
- Add loading of fuse file system
--------------------------------------------------------------------------------
================================================================================
glpi-9.3.3-2.fc29 (FEDORA-2019-a66789a334)
Free IT asset management software
--------------------------------------------------------------------------------
Update Information:
Add security fix backported from 9.4: * [security] Bad chevrons rendering on
dropdowns (#5468) * [security] Iframe and forms are rendered in rich text
contents (#5519) * [security] Type juggling authentication bypass (#5520) *
[security] Malicious images upload (#5580) * [security] Password token date was
not reset (#5577) * [security] Prevent timed attack and enforce cookie security
(#5562)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 27 2019 Remi Collet <remi(a)remirepo.net> - 9.3.3-2
- add security fix backported from 9.4.1:
[security] Bad chevrons rendering on dropdowns
[security] Iframe and forms are rendered in rich text contents
[security] Type juggling authentication bypass
[security] Malicious images upload
[security] Password token date was not reset
[security] Prevent timed attack and enforce cookie security
- add dependency on exif extension
--------------------------------------------------------------------------------
================================================================================
golang-github-mail-v2-2.3.1-1.fc29 (FEDORA-2019-4e04dafeaf)
Gomail is a simple and efficient package to send emails
--------------------------------------------------------------------------------
Update Information:
First package for Fedora
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1691608 - Review Request: golang-github-mail-v2 - simple and efficient
package to send emails
https://bugzilla.redhat.com/show_bug.cgi?id=1691608
--------------------------------------------------------------------------------
================================================================================
gzip-1.9-9.fc29 (FEDORA-2019-cd853538c2)
The GNU data compression program
--------------------------------------------------------------------------------
Update Information:
Fix: Gzexe is unable to decompress the file it creates.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 26 2019 Jakub Martisko <jamartis(a)redhat.com> - 1.9-9
- Fix wrong skip size in gzexe
- Add new test dealing with the ^^ (needs autoreconf)
- Enable make check (needs less)
Related: 1690825
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1690825 - gzexe unable to (auto)decompress
https://bugzilla.redhat.com/show_bug.cgi?id=1690825
[ 2 ] Bug #1693126 - gzexe unable to (auto)decompress
https://bugzilla.redhat.com/show_bug.cgi?id=1693126
--------------------------------------------------------------------------------
================================================================================
hub-2.10.1-1.fc29 (FEDORA-2019-f057266459)
A command-line wrapper for git with github shortcuts
--------------------------------------------------------------------------------
Update Information:
Update to hub 2.10.1 * Fix writing over existing cache files in hub api * Allow
repository names that start with a - character * List api among custom hub
commands in help
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 28 2019 Stephen Gallagher <sgallagh(a)redhat.com> - 2.10.1-1
- Update to 2.10.1
- Fix writing over existing cache files in hub api
- Allow repository names that start with a - character
- List api among custom hub commands in help
--------------------------------------------------------------------------------
================================================================================
inkscape-0.92.4-5.fc29 (FEDORA-2019-4411c81065)
Vector-based drawing program using SVG
--------------------------------------------------------------------------------
Update Information:
Drop FORTIFY_SOURCE=2 to work around crashes.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 27 2019 Gwyn Ciesla <gwync(a)protonmail.com> - 0.92.4-5
- Build without -D_FORTIFY_SOURCE=2 to work around
https://bugs.launchpad.net/inkscape/+bug/1778951
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1575770 - inkscape crash in
Inkscape::UI::Tools::perform_bitmap_scanline_check
https://bugzilla.redhat.com/show_bug.cgi?id=1575770
--------------------------------------------------------------------------------
================================================================================
intel-cmt-cat-3.0.1-1.fc29 (FEDORA-2019-a1ae17a1e5)
Provides command line interface to CMT, MBM, CAT, CDP and MBA technologies
--------------------------------------------------------------------------------
Update Information:
Bug fix release
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 27 2019 Marcel cornu <marcel.d.cornu(a)intel.com> - 3.0.1-1
- New release 3.0.1
--------------------------------------------------------------------------------
================================================================================
kernel-5.0.5-200.fc29 (FEDORA-2019-adecec7468)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 5.0.5 update contains a number of important fixes across the tree
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 27 2019 Laura Abbott <labbott(a)redhat.com> - 5.0.5-200
- Linux v5.0.5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1671934 - CONFIG_W1_MASTER_GPIO not set in aarch64 config, enabled as module
in armv7hl config
https://bugzilla.redhat.com/show_bug.cgi?id=1671934
--------------------------------------------------------------------------------
================================================================================
kernel-headers-5.0.5-200.fc29 (FEDORA-2019-adecec7468)
Header files for the Linux kernel for use by glibc
--------------------------------------------------------------------------------
Update Information:
The 5.0.5 update contains a number of important fixes across the tree
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 27 2019 Laura Abbott <labbott(a)redhat.com> - 5.0.5-200
- Linux v5.0.5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1671934 - CONFIG_W1_MASTER_GPIO not set in aarch64 config, enabled as module
in armv7hl config
https://bugzilla.redhat.com/show_bug.cgi?id=1671934
--------------------------------------------------------------------------------
================================================================================
kernel-tools-5.0.5-200.fc29 (FEDORA-2019-adecec7468)
Assortment of tools for the Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 5.0.5 update contains a number of important fixes across the tree
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 27 2019 Laura Abbott <labbott(a)redhat.com> - 5.0.5-200
- Linux v5.0.5
* Mon Mar 25 2019 Jeremy Cline <jcline(a)fedoraproject.org>
- Drop the bpf-helpers manual page as man-pages packages it
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1671934 - CONFIG_W1_MASTER_GPIO not set in aarch64 config, enabled as module
in armv7hl config
https://bugzilla.redhat.com/show_bug.cgi?id=1671934
--------------------------------------------------------------------------------
================================================================================
libmodulemd-2.2.2-2.fc29 (FEDORA-2019-6ef4da132a)
Module metadata manipulation library
--------------------------------------------------------------------------------
Update Information:
Update to libmodulemd 2.2.1 - Support for RPM checksums - Adds a new directive:
"buildafter" for specifying build dependencies - Adds a new directive:
"buildonly" to indicate that a component's built artifacts should be listed
in
the "filter" field. - Deprecate lookup functions by NSVC in favor of NSVCA
(including the architecture. Update to libmodulemd 2.2.2 - Better support for
Python 2 and 3
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 27 2019 Stephen Gallagher <sgallagh(a)redhat.com> - 2.2.2-2
- Don't run tests on armv7hl/aarch64 since they have timeout problems
* Wed Mar 27 2019 Stephen Gallagher <sgallagh(a)redhat.com> - 2.2.2-1
- Update to libmodulemd 2.2.2
- Add support for python2 on RHEL and Fedora < 31
- Make python subpackages archful for GObject overrides
* Tue Mar 26 2019 Stephen Gallagher <sgallagh(a)redhat.com> - 2.2.1-1
- Update to libmodulemd 2.2.1
- Fixes builds on i686
- Fixes an accidental API error
* Tue Mar 26 2019 Stephen Gallagher <sgallagh(a)redhat.com> - 2.2.0-1
- Update to libmodulemd 2.2.0
- Support for RPM checksums
- Adds a new directive: "buildafter" for specifying build dependencies
- Adds a new directive: "buildonly" to indicate that a component's built
artifacts should be listed in the "filter" field.
- Deprecate lookup functions by NSVC in favor of NSVCA (including the
architecture.
--------------------------------------------------------------------------------
================================================================================
mame-0.208-1.fc29 (FEDORA-2019-e16df60f2e)
Multiple Arcade Machine Emulator
--------------------------------------------------------------------------------
Update Information:
An update to latest mame release: *
https://www.mamedev.org/?p=467
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 27 2019 Julian Sikorski <belegdol(a)fedoraproject.org> - 0.208-1
- Update to 0.208
- Add python3-sphinx_rtd_theme to BuildRequires
--------------------------------------------------------------------------------
================================================================================
mbedtls-2.16.1-1.fc29 (FEDORA-2019-f116962395)
Light-weight cryptographic and SSL/TLS library
--------------------------------------------------------------------------------
Update Information:
- Update to 2.16.1 Release notes:
https://tls.mbed.org/tech-
updates/releases/mbedtls-2.16.1-and-2.7.10-released
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 28 2019 Morten Stevens <mstevens(a)fedoraproject.org> - 2.16.1-1
- Update to 2.16.1
* Mon Feb 11 2019 Peter Robinson <pbrobinson(a)fedoraproject.org> 2.16.0-3
- devel package needs zlib-devel
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.16.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
paperwork-1.2.4-2.fc29 (FEDORA-2019-66d546da6d)
Using scanner and OCR to grep dead trees the easy way
--------------------------------------------------------------------------------
Update Information:
Initial package of paperwork.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1659349 - Review Request: python-pycountry - ISO country, subdivision,
language, currency and script definitions and their translations
https://bugzilla.redhat.com/show_bug.cgi?id=1659349
[ 2 ] Bug #1692303 - Review Request: paperwork - Using scanner and OCR to grep dead
trees the easy way
https://bugzilla.redhat.com/show_bug.cgi?id=1692303
[ 3 ] Bug #1692218 - Review Request: python-paperwork-backend - Paperwork's backend
https://bugzilla.redhat.com/show_bug.cgi?id=1692218
[ 4 ] Bug #1691186 - Review Request: python-pyocr - Python wrapper for OCR engines
(Tesseract, Cuneiform, etc)
https://bugzilla.redhat.com/show_bug.cgi?id=1691186
--------------------------------------------------------------------------------
================================================================================
pdns-4.1.8-1.fc29 (FEDORA-2019-0542f85ea9)
A modern, advanced and high performance authoritative-only nameserver
--------------------------------------------------------------------------------
Update Information:
- Update to 4.1.8 Release notes:
https://doc.powerdns.com/authoritative/changelog/4.1.html#change-4.1.8
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 27 2019 Morten Stevens <mstevens(a)fedoraproject.org> - 4.1.8-1
- Update to 4.1.8
--------------------------------------------------------------------------------
================================================================================
pspp-1.2.0-2.fc29 (FEDORA-2019-817ff2201f)
A program for statistical analysis of sampled data
--------------------------------------------------------------------------------
Update Information:
* Fixed several CVEs ---- * PSPP ver. 1.2.0
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 28 2019 Peter Lemenkov <lemenkov(a)gmail.com> - 1.2.0-2
-
https://bugzilla.redhat.com/1660318 (CVE-2018-20230)
-
https://bugzilla.redhat.com/1683499
-
https://bugzilla.redhat.com/1684372 (CVE-2019-9211)
-
https://bugzilla.redhat.com/1668144
* Thu Mar 21 2019 Peter Lemenkov <lemenkov(a)gmail.com> - 1.2.0-1
- Ver. 1.2.0
* Sun Feb 17 2019 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 1.0.1-9
- Rebuild for readline 8.0
* Sat Feb 2 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.1-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Fri Sep 28 2018 Peter Lemenkov <lemenkov(a)gmail.com> - 1.0.1-7
- Added missing test dependency - perl(Text::Diff)
* Thu Sep 27 2018 Peter Lemenkov <lemenkov(a)gmail.com> - 1.0.1-6
- Fixed two bugs (1470704, 1470708)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1668144 - An issue was discovered in pspp 1.2.0. There is a buffer overflow
at function text_parse_counted_string.
https://bugzilla.redhat.com/show_bug.cgi?id=1668144
[ 2 ] Bug #1683499 - There is a reachable assertion abort in the function
write_long_string_missing_values() in sys-file-writer.c of the libpspp library in GNU PSPP
1.2.0 that will lead to denial of service.
https://bugzilla.redhat.com/show_bug.cgi?id=1683499
[ 3 ] Bug #1684372 - CVE-2019-9211 pspp: reachable assertion abort in function
write_long_string_missing_values() in data/sys-file-writer.c lead to denial of service
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1684372
[ 4 ] Bug #1660318 - There is a buffer overflow at function read_bytes_internal in pspp
1.2.0.
https://bugzilla.redhat.com/show_bug.cgi?id=1660318
[ 5 ] Bug #1675689 - pspp: FTBFS in Fedora rawhide/f30
https://bugzilla.redhat.com/show_bug.cgi?id=1675689
--------------------------------------------------------------------------------
================================================================================
python-Pyped-1.4-13.fc29 (FEDORA-2019-05bc46b8e7)
Replace sed/grep/cut/awk by letting you execute Python one-liners
--------------------------------------------------------------------------------
Update Information:
Fix package build
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 28 2019 Ren�� Ribaud <rene.ribaud(a)free.fr> - 1.4-13
- Fix of python3-Pyped requires both Python 2 and Python 3 (rhbz #1546790)
Thanks goes to Jan Beran <jberan(a)redhat.com> who submited the fix.
* Sat Feb 2 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4-12
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1546790 - python-Pyped: python3-Pyped requires both Python 2 and Python 3 /
nonresponsive maintainer
https://bugzilla.redhat.com/show_bug.cgi?id=1546790
[ 2 ] Bug #1675714 - python-Pyped: FTBFS in Fedora rawhide/f30
https://bugzilla.redhat.com/show_bug.cgi?id=1675714
--------------------------------------------------------------------------------
================================================================================
python-alembic-1.0.8-1.fc29 (FEDORA-2019-e2fee171bf)
Database migration tool for SQLAlchemy
--------------------------------------------------------------------------------
Update Information:
Update to
[
1.0.8](https://alembic.sqlalchemy.org/en/latest/changelog.html#change-1.0.8).
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 28 2019 Randy Barlow <bowlofeggs(a)fedoraproject.org> - 1.0.8-1
- Update to 1.0.8 (#1685262).
-
https://alembic.sqlalchemy.org/en/latest/changelog.html#change-1.0.8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1685262 - python-alembic-1.0.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1685262
--------------------------------------------------------------------------------
================================================================================
python-flake8-docstrings-1.2.0-2.fc29 (FEDORA-2019-35642e12e8)
A plugin to flake8 to include checks provided by pep257
--------------------------------------------------------------------------------
Update Information:
Initial packaging of flake8_polyfill and flake8_docstrings, a flake8 plugin
which runs pydocstyle as a part of flake8.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1691521 - Review Request: python-flake8-polyfill - Compatibility helpers for
flake8 plugins
https://bugzilla.redhat.com/show_bug.cgi?id=1691521
[ 2 ] Bug #1692582 - Review Request: python-flake8-docstrings - A plugin to flake8 to
include checks provided by pep257
https://bugzilla.redhat.com/show_bug.cgi?id=1692582
--------------------------------------------------------------------------------
================================================================================
python-flake8-polyfill-1.0.2-1.fc29 (FEDORA-2019-35642e12e8)
Polyfill package for Flake8 plugins
--------------------------------------------------------------------------------
Update Information:
Initial packaging of flake8_polyfill and flake8_docstrings, a flake8 plugin
which runs pydocstyle as a part of flake8.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1691521 - Review Request: python-flake8-polyfill - Compatibility helpers for
flake8 plugins
https://bugzilla.redhat.com/show_bug.cgi?id=1691521
[ 2 ] Bug #1692582 - Review Request: python-flake8-docstrings - A plugin to flake8 to
include checks provided by pep257
https://bugzilla.redhat.com/show_bug.cgi?id=1692582
--------------------------------------------------------------------------------
================================================================================
python-operator-courier-1.2.1-1.fc29 (FEDORA-2019-f548225ab9)
Library and CLI tool to build, verify and push operator metadata
--------------------------------------------------------------------------------
Update Information:
Latest upstream.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 27 2019 Ralph Bean <rbean(a)redhat.com> - 1.2.1-1
- new version
* Tue Mar 12 2019 Ralph Bean <rbean(a)redhat.com> - 1.2.0-1
- new version
* Mon Mar 11 2019 Ralph Bean <rbean(a)redhat.com> - 1.1.0-1
- new version
* Wed Feb 27 2019 Ralph Bean <rbean(a)redhat.com> - 1.0.2-1
- new version
--------------------------------------------------------------------------------
================================================================================
python-paperwork-backend-1.2.4-1.fc29 (FEDORA-2019-66d546da6d)
Paperwork's backend
--------------------------------------------------------------------------------
Update Information:
Initial package of paperwork.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1659349 - Review Request: python-pycountry - ISO country, subdivision,
language, currency and script definitions and their translations
https://bugzilla.redhat.com/show_bug.cgi?id=1659349
[ 2 ] Bug #1692303 - Review Request: paperwork - Using scanner and OCR to grep dead
trees the easy way
https://bugzilla.redhat.com/show_bug.cgi?id=1692303
[ 3 ] Bug #1692218 - Review Request: python-paperwork-backend - Paperwork's backend
https://bugzilla.redhat.com/show_bug.cgi?id=1692218
[ 4 ] Bug #1691186 - Review Request: python-pyocr - Python wrapper for OCR engines
(Tesseract, Cuneiform, etc)
https://bugzilla.redhat.com/show_bug.cgi?id=1691186
--------------------------------------------------------------------------------
================================================================================
python-pycountry-18.5.26-1.fc29 (FEDORA-2019-66d546da6d)
ISO country, subdivision, language, currency and script definitions and their
translations
--------------------------------------------------------------------------------
Update Information:
Initial package of paperwork.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1659349 - Review Request: python-pycountry - ISO country, subdivision,
language, currency and script definitions and their translations
https://bugzilla.redhat.com/show_bug.cgi?id=1659349
[ 2 ] Bug #1692303 - Review Request: paperwork - Using scanner and OCR to grep dead
trees the easy way
https://bugzilla.redhat.com/show_bug.cgi?id=1692303
[ 3 ] Bug #1692218 - Review Request: python-paperwork-backend - Paperwork's backend
https://bugzilla.redhat.com/show_bug.cgi?id=1692218
[ 4 ] Bug #1691186 - Review Request: python-pyocr - Python wrapper for OCR engines
(Tesseract, Cuneiform, etc)
https://bugzilla.redhat.com/show_bug.cgi?id=1691186
--------------------------------------------------------------------------------
================================================================================
python-pyocr-0.6-2.fc29 (FEDORA-2019-66d546da6d)
Python wrapper for OCR engines (Tesseract, Cuneiform, etc)
--------------------------------------------------------------------------------
Update Information:
Initial package of paperwork.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1659349 - Review Request: python-pycountry - ISO country, subdivision,
language, currency and script definitions and their translations
https://bugzilla.redhat.com/show_bug.cgi?id=1659349
[ 2 ] Bug #1692303 - Review Request: paperwork - Using scanner and OCR to grep dead
trees the easy way
https://bugzilla.redhat.com/show_bug.cgi?id=1692303
[ 3 ] Bug #1692218 - Review Request: python-paperwork-backend - Paperwork's backend
https://bugzilla.redhat.com/show_bug.cgi?id=1692218
[ 4 ] Bug #1691186 - Review Request: python-pyocr - Python wrapper for OCR engines
(Tesseract, Cuneiform, etc)
https://bugzilla.redhat.com/show_bug.cgi?id=1691186
--------------------------------------------------------------------------------
================================================================================
python-rosdistro-0.7.3-1.fc29 (FEDORA-2019-bd8570b5f8)
File format for managing ROS Distributions
--------------------------------------------------------------------------------
Update Information:
Update to latest releases.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 27 2019 Scott K Logan <logans(a)cottsay.net> - 0.7.3-1
- Update to 0.7.3 (rhbz#1693483)
- Switch to Python 3 Sphinx
- Handle automatic dependency generation (f30+)
- Make doc subpackage a weaker dependency
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1693483 - python-rosdistro-0.7.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1693483
[ 2 ] Bug #1693502 - python-rosinstall_generator-0.1.16 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1693502
--------------------------------------------------------------------------------
================================================================================
python-rosinstall_generator-0.1.16-1.fc29 (FEDORA-2019-bd8570b5f8)
Generates rosinstall files
--------------------------------------------------------------------------------
Update Information:
Update to latest releases.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 27 2019 Scott K Logan <logans(a)cottsay.net> - 0.1.16-1
- Update to 0.1.16
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1693483 - python-rosdistro-0.7.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1693483
[ 2 ] Bug #1693502 - python-rosinstall_generator-0.1.16 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1693502
--------------------------------------------------------------------------------
================================================================================
quilt-0.66-1.fc29 (FEDORA-2019-81d8b81672)
Scripts for working with series of patches
--------------------------------------------------------------------------------
Update Information:
- Update to 0.66 release - Add Requires: p7zip - Add some additional
BuildRequires - Modernize spec file - Remove obsolete Group tag - Remove
needless use of %defattr
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 28 2019 Bj��rn Esser <besser82(a)fedoraproject.org> - 0.66-1
- Update to 0.66 release (rhbz 1693765)
- Modernize spec file
- Add some additional BuildRequires
- Add Requires: p7zip
* Sat Feb 2 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.65-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1585864 - emails are not threaded with quilt 0.65
https://bugzilla.redhat.com/show_bug.cgi?id=1585864
[ 2 ] Bug #1693765 - quilt-0.66 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1693765
--------------------------------------------------------------------------------
================================================================================
rpm-ostree-2019.3-1.fc29 (FEDORA-2019-3de87d27bb)
Hybrid image/package system
--------------------------------------------------------------------------------
Update Information:
New upstream release. See release notes at
https://github.com/projectatomic/rpm-
ostree/releases/tag/v2019.3.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 27 2019 Jonathan Lebon <jonathan(a)jlebon.com> - 2019.3-1
- New upstream version
--------------------------------------------------------------------------------
================================================================================
shyaml-0.6.1-1.fc29 (FEDORA-2019-df67b947ff)
YAML for command line
--------------------------------------------------------------------------------
Update Information:
Update to 0.6.1
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 26 2019 Till Hofmann <thofmann(a)fedoraproject.org> - 0.6.1-1
- Update to 0.6.1
- Remove check section, no tests were run
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1692280 - shyaml 0.6.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1692280
--------------------------------------------------------------------------------
================================================================================
socket_wrapper-1.2.3-1.fc29 (FEDORA-2019-3aea7d433a)
A library passing all socket communications through Unix sockets
--------------------------------------------------------------------------------
Update Information:
Update to version 1.2.3
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 28 2019 Andreas Schneider <asn(a)redhat.com> - 1.2.3-1
- Update to version 1.2.3
--------------------------------------------------------------------------------
================================================================================
sos-3.7-1.fc29 (FEDORA-2019-2c73c37bb6)
A set of tools to gather troubleshooting information from a system
--------------------------------------------------------------------------------
Update Information:
Rebase package(s) to version: 3.7 Highlights, important fixes, or notable
enhancements: See upstream release notes at
https://github.com/sosreport/sos/releases/tag/3.7
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 28 2019 Sandro Bonazzola <sbonazzo(a)redhat.com> - 3.7-1
- Rebase on upstream 3.7
- Resolves: BZ#1693419
* Sun Feb 3 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.6-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1693419 - sos-3.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1693419
--------------------------------------------------------------------------------
================================================================================
sssd-2.1.0-2.fc29 (FEDORA-2019-efe7e2c5cf)
System Security Services Daemon
--------------------------------------------------------------------------------
Update Information:
Resolves: upstream#3867 - [RFE] Need an option in SSSD so that it will skip
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 27 2019 Michal ��idek <mzidek(a)redhat.com> - 2.1.0-2
- Resolves: upstream#3867 - [RFE] Need an option in SSSD so that it will skip
GPOs that have groupPolicyContainers unreadable
by SSSD.
- CVE-2018-16838
* Wed Mar 27 2019 Michal ��idek <mzidek(a)redhat.com> - 2.1.0-1
- Update to latest released upstream version
-
https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_2_1_0.html
--------------------------------------------------------------------------------
================================================================================
visidata-1.5.2-2.fc29 (FEDORA-2019-b4ae59d084)
Curses interface for exploring and arranging tabular data
--------------------------------------------------------------------------------
Update Information:
Initial package of visidata
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1692593 - Review Request: visidata - Curses interface for exploring and
arranging tabular data
https://bugzilla.redhat.com/show_bug.cgi?id=1692593
--------------------------------------------------------------------------------
================================================================================
whois-5.4.2-1.fc29 (FEDORA-2019-e533c8b5ce)
Improved WHOIS client
--------------------------------------------------------------------------------
Update Information:
This release adds records for ss. and ������������������. TLDs. It also updates records
for fm., in., ������������., ������������., ������������., ������������.,
���������������., ������������., ������������������., ���������������., ������������.,
����������., ��������., ��������., ���������������., ������������., and
���������������������. TLDs.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 28 2019 Petr Pisar <ppisar(a)redhat.com> - 5.4.2-1
- 5.4.2 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1693530 - whois-5.4.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1693530
--------------------------------------------------------------------------------
================================================================================
yarock-1.4.0-1.fc29 (FEDORA-2019-a6e05b912c)
Lightweight, beautiful music player
--------------------------------------------------------------------------------
Update Information:
- Update to 1.4.0 - Add %%{name}-%%{version}-appdata.patch
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 28 2019 Martin Gansser <martinkg(a)fedoraproject.org> - 1.4.0-1
- Update to 1.4.0
- Add %{name}-%{version}-appdata.patch
* Sun Mar 3 2019 Rex Dieter <rdieter(a)fedoraproject.org> - 1.3.1-8
- rebuild (qt5)
* Sun Feb 3 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.1-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Thu Dec 13 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 1.3.1-6
- rebuild (qt5)
--------------------------------------------------------------------------------