The following Fedora 29 Security updates need testing:
Age URL
99
https://bodhi.fedoraproject.org/updates/FEDORA-2018-51ce232320
xerces-c27-2.7.0-28.fc29
41
https://bodhi.fedoraproject.org/updates/FEDORA-2018-42555731d2
nagios-4.4.2-3.fc29
35
https://bodhi.fedoraproject.org/updates/FEDORA-2018-36115ae788
mysql-selinux-1.0.0-5.fc29
28
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b89746cb9b
tomcat-9.0.13-1.fc29
8
https://bodhi.fedoraproject.org/updates/FEDORA-2019-026d5ab23d
perl-Email-Address-1.912-1.fc29
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-50cc0c11e9
python36-3.6.8-1.fc29
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8fe9d427f1
php-horde-Horde-Form-2.0.19-1.fc29
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e818eaa0ac
syslog-ng-3.17.2-2.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b276ee69a8
gitolite3-3.6.11-1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-5750ad7485
radare2-3.2.0-1.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-aa6036fcb3 php-7.2.14-1.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e957cecffd
polkit-0.115-4.2.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-2e385f97e2
mingw-libvorbis-1.3.6-2.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c7da53319c
haproxy-1.8.17-1.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b0f7a7b74b
kernel-headers-4.19.14-300.fc29 kernel-4.19.14-300.fc29 kernel-tools-4.19.14-300.fc29
The following Fedora 29 Critical Path updates have yet to be approved:
Age URL
29
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3d43e7dd21
SLOF-0.1.git20180702-2.fc29
21
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3d576aa333 lldb-7.0.1-1.fc29
lld-7.0.1-2.fc29 compiler-rt-7.0.1-1.fc29 libomp-7.0.1-1.fc29 clang-7.0.1-1.fc29
llvm-7.0.1-1.fc29 python-lit-0.7.1-1.fc29
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8eaa9e8678
man-db-2.8.4-3.fc29
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-5549e8d51a
langtable-0.0.40-1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-7e427beea7
libguestfs-1.39.11-3.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e5b3682470
perl-File-Temp-0.230.900-1.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-f080abd9ad lorax-29.24-1.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b0f7a7b74b
kernel-headers-4.19.14-300.fc29 kernel-4.19.14-300.fc29 kernel-tools-4.19.14-300.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-cecbe4d1a5
libassuan-2.5.2-1.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-a958ee42f1
libgpg-error-1.33-1.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ca1f6bc5a1
gnome-settings-daemon-3.30.2-1.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b1190b5494
pcmanfm-1.3.1-2.D20181227git0619a81f.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-1fba27cd97 koji-1.16.1-3.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e957cecffd
polkit-0.115-4.2.fc29
The following builds have been pushed to Fedora 29 updates-testing
ardour5-5.12.0-10.fc29
container-selinux-2.79-1.git6f01752.fc29
eclipse-4.10.0-2.fc29
eclipse-mylyn-3.25.0-0.4.fc29
elementary-xfce-icon-theme-0.13.1-1.fc29
firefox-64.0.2-1.fc29
gcab-1.1-4.fc29
gdb-8.2-6.fc29
gnome-sound-recorder-3.28.2-1.fc29
gnutls-3.6.5-2.fc29
gstreamer1-plugins-base-1.14.4-2.fc29
inkscape-0.92.3-9.fc29
kbackup-18.12.1-1.fc29
libjpeg-turbo-2.0.0-3.fc29
libmodulemd-2.0.0-3.fc29
lmdb-0.9.23-1.fc29
lua-cqueues-20171014-1.fc29
matrix-synapse-0.34.0.1-1.fc29
mingw-libjpeg-turbo-2.0.0-2.fc29
nodejs-rhea-0.3.9-1.fc29
p11-kit-0.23.14-2.fc29
pcre-8.42-6.fc29
pcre2-10.32-5.fc29
perl-Type-Tiny-1.004004-1.fc29
php-symfony-contracts-1.0.2-1.fc29
poedit-2.2-3.fc29
pungi-4.1.32-3.fc29
python34-3.4.9-5.fc29
qpid-cpp-1.39.0-1.fc29
qpid-dispatch-1.4.1-1.fc29
qpid-proton-0.26.0-1.fc29
quodlibet-4.2.1-1.fc29
roxterm-3.7.3-1.fc29
rubygem-qpid_messaging-1.39.0-1.fc29
rubygem-qpid_proton-0.26.0-1.fc29
stlink-1.5.1-0.1.20190103git7651d21.fc29
systemd-239-8.gite339eae.fc29
wordpress-5.0.3-1.fc29
xfig-3.2.7a-2.fc29
xorg-x11-server-1.20.3-3.fc29
xrdp-0.9.9-1.fc29
Details about builds:
================================================================================
ardour5-5.12.0-10.fc29 (FEDORA-2019-a43f8c76d6)
Digital Audio Workstation
--------------------------------------------------------------------------------
Update Information:
This update lets the package obsolete the long obsolescent ardour2 package and
restores the contents of the appdata file.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 8 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 5.12.0-10
- Obsolete ardour2 on Fedora 29+
* Fri Nov 9 2018 Nils Philippsen <nils(a)tiptoe.de> - 5.12.0-9
- set LC_ALL=C.UTF-8 to only require minimal glibc langpacks
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1660810 - ardour5 appdata file is 0 bytes
https://bugzilla.redhat.com/show_bug.cgi?id=1660810
[ 2 ] Bug #1657558 - ardour5 should obsolete ardour2?
https://bugzilla.redhat.com/show_bug.cgi?id=1657558
--------------------------------------------------------------------------------
================================================================================
container-selinux-2.79-1.git6f01752.fc29 (FEDORA-2019-f3106bd678)
SELinux policies for container runtimes
--------------------------------------------------------------------------------
Update Information:
Fix labeling on docker in user namespace and /var/lib/registries.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 11 2019 Dan Walsh <dwalsh(a)fedoraproject.org> - 2.79-1
- Fix labeling on /var/lib/registries
* Thu Jan 10 2019 Dan Walsh <dwalsh(a)fedoraproject.org> - 2.78-1
- Fix labeling for images in docker daemon user namespace
--------------------------------------------------------------------------------
================================================================================
eclipse-4.10.0-2.fc29 (FEDORA-2019-3342cfcef5)
An open, extensible IDE
--------------------------------------------------------------------------------
Update Information:
Removes recommends on Code Recommenders plug-in and includes latest fixes from
the Mylyn project.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 10 2019 Mat Booth <mat.booth(a)redhat.com> - 1:4.10.0-2
- No longer recommend Code Recommenders
--------------------------------------------------------------------------------
================================================================================
eclipse-mylyn-3.25.0-0.4.fc29 (FEDORA-2019-3342cfcef5)
Eclipse Mylyn main feature.
--------------------------------------------------------------------------------
Update Information:
Removes recommends on Code Recommenders plug-in and includes latest fixes from
the Mylyn project.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 14 2018 Mat Booth <mat.booth(a)redhat.com> - 3.25.0-0.4
- Rebuild to fix source bundle inclusion
- Don't ship the "dev" features
* Fri Dec 14 2018 Mat Booth <mat.booth(a)redhat.com> - 3.25.0-0.3
- Update to latest mylyn 3.25 snapshot
--------------------------------------------------------------------------------
================================================================================
elementary-xfce-icon-theme-0.13.1-1.fc29 (FEDORA-2019-9c8e4ee454)
Icons for Xfce based on the elementary Project Icon Theme
--------------------------------------------------------------------------------
Update Information:
- update to 0.13.1 - changelog
https://github.com/shimmerproject/elementary-
xfce/releases/tag/v0.13.1
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 11 2019 Johannes Lips <hannes(a)fedoraproject.org> - 0.13.1-1
- update to latest upstream version 0.13.1
--------------------------------------------------------------------------------
================================================================================
firefox-64.0.2-1.fc29 (FEDORA-2019-ca2b064d39)
Mozilla Firefox Web browser
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream version.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 10 2019 Jan Horak <jhorak(a)redhat.com> - 64.0.2-1
- Update to 64.0.2
--------------------------------------------------------------------------------
================================================================================
gcab-1.1-4.fc29 (FEDORA-2019-2feb4c8fed)
Cabinet file library and tool
--------------------------------------------------------------------------------
Update Information:
Fix LZX decompression corruption regression.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 11 2019 Marc-Andr�� Lureau <marcandre.lureau(a)redhat.com> - 1.1-4
- Fix LZX decompression corruption regression.
--------------------------------------------------------------------------------
================================================================================
gdb-8.2-6.fc29 (FEDORA-2019-c4ff3ce3fb)
A stub package for GNU source-level debugger
--------------------------------------------------------------------------------
Update Information:
Fix 'Assertion `SYMBOL_LANGUAGE (sym) == DICT_LANGUAGE (dict)->la_language'
failed.'
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 11 2019 Sergio Durigan Junior <sergiodj(a)redhat.com> - 8.2-6.fc29
- Fix 'Assertion `SYMBOL_LANGUAGE (sym) == DICT_LANGUAGE (dict)->la_language'
failed.'
(Keith Seitz, RHBZ 1560010).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1560010 - Assertion `SYMBOL_LANGUAGE (sym) == DICT_LANGUAGE
(dict)->la_language' failed.
https://bugzilla.redhat.com/show_bug.cgi?id=1560010
--------------------------------------------------------------------------------
================================================================================
gnome-sound-recorder-3.28.2-1.fc29 (FEDORA-2019-1b02c1c9d3)
Make simple recordings from your desktop
--------------------------------------------------------------------------------
Update Information:
gnome-sound-recorder 3.28.2 release with bug fixes and translation updates. For
details, see
https://mail.gnome.org/archives/ftp-release-
list/2019-January/msg00057.html
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 11 2019 Kalev Lember <klember(a)redhat.com> - 3.28.2-1
- Update to 3.28.2
--------------------------------------------------------------------------------
================================================================================
gnutls-3.6.5-2.fc29 (FEDORA-2019-99eefddc65)
A TLS protocol implementation
--------------------------------------------------------------------------------
Update Information:
Added explicit Requires for nettle >= 3.4.1
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 11 2019 Anderson Toshiyuki Sasaki <ansasaki(a)redhat.com> - 3.6.5-2
- Add explicit Requires for nettle >= 3.4.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1655389 - CVE-2018-16868 gnutls: Bleichenbacher-like side channel leakage in
PKCS#1 v1.5 verification and padding oracle verification [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1655389
--------------------------------------------------------------------------------
================================================================================
gstreamer1-plugins-base-1.14.4-2.fc29 (FEDORA-2019-d1dfb5826b)
GStreamer streaming media framework base plugins
--------------------------------------------------------------------------------
Update Information:
This update fixes thumbnailing of some videos appearing with a green tint.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 11 2019 Bastien Nocera <bnocera(a)redhat.com> - 1.14.4-2
+ gstreamer1-plugins-base-1.14.4-2
- Fix thumbnail colours for 10-bit MPEG-4 files
--------------------------------------------------------------------------------
================================================================================
inkscape-0.92.3-9.fc29 (FEDORA-2019-7f9bfd58d0)
Vector-based drawing program using SVG
--------------------------------------------------------------------------------
Update Information:
Patch for text crash.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 11 2019 Gwyn Ciesla <limburgher(a)gmail.com> - 0.92.3-9
- Patch for out of bounds.
* Tue Dec 4 2018 Gwyn Ciesla <limburgher(a)gmail.com> - 0.92.3-8
- Add bundled provides.
* Tue Sep 11 2018 Gwyn Ciesla <limburgher(a)gmail.com> - 0.92.3-7
- Fix shebang handling.
* Tue Aug 28 2018 Michael Cronenworth <mike(a)cchtml.com> - 0.92.3-6
- Rebuild for ImageMagick 6.9.10
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1580211 - Editing text on inkscape aborts in
"Inkscape::Text::Layout::_cursorXOnLineToIterator"
https://bugzilla.redhat.com/show_bug.cgi?id=1580211
[ 2 ] Bug #1577125 - inkscape killed by SIGABRT - when double-clicking text with cursor
tool
https://bugzilla.redhat.com/show_bug.cgi?id=1577125
[ 3 ] Bug #1573152 - Inkscape crash in sp_document_namedview
https://bugzilla.redhat.com/show_bug.cgi?id=1573152
[ 4 ] Bug #1665402 - Inkscape segfaults after hitting the End key and an Down Arrow key
while editing text.
https://bugzilla.redhat.com/show_bug.cgi?id=1665402
[ 5 ] Bug #1657329 - Issue with Text
https://bugzilla.redhat.com/show_bug.cgi?id=1657329
[ 6 ] Bug #1612618 - Inkscape crashes when hitting ENTER on text input
https://bugzilla.redhat.com/show_bug.cgi?id=1612618
[ 7 ] Bug #1608371 - Inkscape crashes on selecting boxed text
https://bugzilla.redhat.com/show_bug.cgi?id=1608371
--------------------------------------------------------------------------------
================================================================================
kbackup-18.12.1-1.fc29 (FEDORA-2019-a89ca5b0c2)
Back up your data in a simple, user friendly way
--------------------------------------------------------------------------------
Update Information:
Update to 18.12.1.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 11 2019 Vasiliy N. Glazov <vascom2(a)gmail.com> 18.12.1-1
- Update to 18.12.1
--------------------------------------------------------------------------------
================================================================================
libjpeg-turbo-2.0.0-3.fc29 (FEDORA-2019-ae92ca8981)
A MMX/SSE2/SIMD accelerated library for manipulating JPEG image files
--------------------------------------------------------------------------------
Update Information:
Fix for **CVE-2018-20330** and **CVE-2018-19664**
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 11 2019 Nikola Forr�� <nforro(a)redhat.com> - 2.0.0-3
- Fix CVE-2018-19664 (#1656219)
* Fri Jan 11 2019 Nikola Forr�� <nforro(a)redhat.com> - 2.0.0-2
- Fix CVE-2018-20330 (#1665224)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1665224 - CVE-2018-20330 libjpeg-turbo: heap-based buffer overflow in
tjLoadImage [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1665224
[ 2 ] Bug #1656219 - CVE-2018-19664 libjpeg-turbo: heap-based buffer over-read in the
put_pixel_rows function in wrbmp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1656219
--------------------------------------------------------------------------------
================================================================================
libmodulemd-2.0.0-3.fc29 (FEDORA-2019-563bda3464)
Module metadata manipulation library
--------------------------------------------------------------------------------
Update Information:
Fix an issue where reading modulemd-defaults YAML would not retain the modified
date, leading to issues when merging repodata.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 11 2019 Stephen Gallagher <sgallagh(a)redhat.com> - 2.0.0-3
- Fix ordering issue with dependencies
- Use glib2 suppression file when running valgrind tests
* Fri Jan 11 2019 Stephen Gallagher <sgallagh(a)redhat.com> - 2.0.0-2
- Fix issue reading modified value for defaults from YAML streams
--------------------------------------------------------------------------------
================================================================================
lmdb-0.9.23-1.fc29 (FEDORA-2019-9d5c2a7634)
Memory-mapped key-value database
--------------------------------------------------------------------------------
Update Information:
Upgraded to version 0.9.23
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 9 2019 Tomas Krizek <tomas.krizek(a)nic.cz> - 0.9.23-1
- Updated to 0.9.23
--------------------------------------------------------------------------------
================================================================================
lua-cqueues-20171014-1.fc29 (FEDORA-2019-4ca5923d43)
Stackable Continuation Queues for the Lua Programming Language
--------------------------------------------------------------------------------
Update Information:
Rebuild for released Fedora/CentOS versions (fedpkg update was missing)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1585758 - Review Request: lua-cqueues - Stackable Continuation Queues for
Lua
https://bugzilla.redhat.com/show_bug.cgi?id=1585758
--------------------------------------------------------------------------------
================================================================================
matrix-synapse-0.34.0.1-1.fc29 (FEDORA-2019-4d914f9257)
A Matrix reference homeserver written in Python using Twisted
--------------------------------------------------------------------------------
Update Information:
Fix for CVE-2019-5885
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 11 2019 Jeremy Cline <jeremy(a)jcline.org> - 0.34.0.1-1
- Update to v0.34.0.1, fixes CVE-2019-5885
--------------------------------------------------------------------------------
================================================================================
mingw-libjpeg-turbo-2.0.0-2.fc29 (FEDORA-2019-a018522ba3)
MinGW Windows Libjpeg-turbo library
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2018-19664 and CVE-2018-20330.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 11 2019 Kalev Lember <klember(a)redhat.com> - 2.0.0-2
- Fix CVE-2018-19664 and CVE-2018-20330
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1665223 - CVE-2018-20330 libjpeg-turbo: heap-based buffer overflow in
tjLoadImage
https://bugzilla.redhat.com/show_bug.cgi?id=1665223
--------------------------------------------------------------------------------
================================================================================
nodejs-rhea-0.3.9-1.fc29 (FEDORA-2019-5ffe8521e0)
A reactive messaging library based on the AMQP protocol
--------------------------------------------------------------------------------
Update Information:
Rebased to latest: 0.3.9
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 10 2019 Irina Boverman <iboverma(a)redhat.com> - 0.3.9-1
- Rebased to 0.3.9
* Mon Jan 7 2019 Irina Boverman <iboverma(a)redhat.com> - 0.3.8-1
- Rebased to 0.3.8
* Fri Jan 4 2019 Irina Boverman <iboverma(a)redhat.com> - 0.3.6-1
- Rebased to 0.3.6
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1613353 - nodejs-rhea-0.2.20 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1613353
--------------------------------------------------------------------------------
================================================================================
p11-kit-0.23.14-2.fc29 (FEDORA-2019-8d6ee591d9)
Library for loading and sharing PKCS#11 modules
--------------------------------------------------------------------------------
Update Information:
This update fixes SELinux violations in many programs using p11-kit.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 11 2019 Nils Philippsen <nils(a)tiptoe.de> - 0.23.14-2
- use spaces instead of tabs consistently
- prefer fixed closures to libffi closures (#1656245, patch by Daiki Ueno)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1656245 - p11_virtual_wrap causing tmpfiles to be created causing SELinux
violations and error logs
https://bugzilla.redhat.com/show_bug.cgi?id=1656245
--------------------------------------------------------------------------------
================================================================================
pcre-8.42-6.fc29 (FEDORA-2019-d51bb838af)
Perl-compatible regular expression library
--------------------------------------------------------------------------------
Update Information:
This release fixes an undefined behavior in aarch64 JIT compiler and OpenPOWER
64-bit ELFv2 ABI detection in the JIT compiler.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 3 2019 Petr Pisar <ppisar(a)redhat.com> - 8.42-6
- Fix OpenPOWER 64-bit ELFv2 ABI detection in JIT compiler (upstream bug #2353)
- Fix an undefined behavior in aarch64 JIT compiler (upstream bug #2355)
--------------------------------------------------------------------------------
================================================================================
pcre2-10.32-5.fc29 (FEDORA-2019-1d83808ce6)
Perl-compatible regular expression library
--------------------------------------------------------------------------------
Update Information:
This release fixes anchoring a pattern preceded with (*MARK). It also corrects
an undefined behavior in aarch64 JIT compiler and OpenPOWER 64-bit ELFv2 ABI
detection in JIT compiler.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 3 2019 Petr Pisar <ppisar(a)redhat.com> - 10.32-5
- Fix anchoring a pattern preceded with (*MARK)
- Fix OpenPOWER 64-bit ELFv2 ABI detection in JIT compiler (upstream bug #2353)
- Fix an undefined behavior in aarch64 JIT compiler (upstream bug #2355)
--------------------------------------------------------------------------------
================================================================================
perl-Type-Tiny-1.004004-1.fc29 (FEDORA-2019-2989c80bc2)
Tiny, yet Moo(se)-compatible type constraint
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 11 2019 Ralf Cors��pius <corsepiu(a)fedoraproject.org> - 1.004004-1
- Update to 1.004004.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1664970 - Upgrade perl-Type-Tiny to 1.004004
https://bugzilla.redhat.com/show_bug.cgi?id=1664970
--------------------------------------------------------------------------------
================================================================================
php-symfony-contracts-1.0.2-1.fc29 (FEDORA-2019-1287a595f0)
A set of abstractions extracted out of the Symfony
--------------------------------------------------------------------------------
Update Information:
A set of abstractions extracted out of the Symfony components. Can be used to
build on semantics that the Symfony components proved useful - and that already
have battle tested implementations. Autoloader:
/usr/share/php/Symfony/Contracts/autoload.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1664050 - Review Request: php-symfony-contracts - A set of abstractions
extracted out of the Symfony
https://bugzilla.redhat.com/show_bug.cgi?id=1664050
--------------------------------------------------------------------------------
================================================================================
poedit-2.2-3.fc29 (FEDORA-2019-347fa92148)
GUI editor for GNU gettext .po files
--------------------------------------------------------------------------------
Update Information:
Add upstream patches poedit-2.2-fix_dark_mode_assert.patch, fixes #1639361
poedit-2.2-fix_wayland_incompatibility.patch, fixes #1659253
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 11 2019 Wolfgang St��ggl <c72578(a)yahoo.de> - 2.2-3
- Add patches:
poedit-2.2-fix_dark_mode_assert.patch, fixes #1639361
poedit-2.2-fix_wayland_incompatibility.patch, fixes #1659253
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1639361 - [abrt] poedit: wxTrap(): poedit killed by SIGTRAP
https://bugzilla.redhat.com/show_bug.cgi?id=1639361
[ 2 ] Bug #1659253 - Poedit is missing an application icon
https://bugzilla.redhat.com/show_bug.cgi?id=1659253
--------------------------------------------------------------------------------
================================================================================
pungi-4.1.32-3.fc29 (FEDORA-2019-27778372a6)
Distribution compose tool
--------------------------------------------------------------------------------
Update Information:
New upstream release - /usr/bin/pungi command ported to use createrepo_c and
use productmd to generate metadata (thanks to @fepitre) - improved documentation
for product IDs (thanks to @ktdreyer) - includes a new experimental tool to
create multiple linked composes
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 10 2019 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.32-3
- Replace basearch in ostree ref in message
* Wed Jan 9 2019 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.32-2
- Drop dependency on python3-enum34
* Tue Jan 8 2019 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.32-1
- Add script to orchestrate multiple composes (lsedlar)
- buildinstall: Expose lorax's --rootfs-size argument (lsedlar)
- Support for pungi-legacy with productmd format (frederic.pierret)
- Unify update-docs.sh script with rpkg (onosek)
- Remove createrepo references from doc and spec (lsedlar)
- CreaterepoWrapper: add 'basedir' and 'compress-type' args for
createrepo_c
(frederic.pierret)
- gather.py: use createrepo_c for creating repodata instead of obsolete
createrepo python library (frederic.epitre)
- Fix import of ConfigParser for NoSectionError and NoOptionError
(frederic.pierret)
- doc: explain product_id_allow_missing results in detail (kdreyer)
- doc: describe product_id's output and purpose (kdreyer)
* Wed Dec 12 2018 Stephen Gallagher <sgallagh(a)redhat.com> - 4.1.31-3
- Update dependency for libmodulemd
* Wed Dec 5 2018 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.31-2
- Send correct ostree ref to fedmsg
--------------------------------------------------------------------------------
================================================================================
python34-3.4.9-5.fc29 (FEDORA-2019-d1951b6b70)
Version 3.4 of the Python programming language
--------------------------------------------------------------------------------
Update Information:
- Add missing semicolon in patch 00290, fixes build of the `crypt` module
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 11 2019 Bj��rn Esser <besser82(a)fedoraproject.org> - 3.4.9-5
- Add missing semicolon in patch 00290
--------------------------------------------------------------------------------
================================================================================
qpid-cpp-1.39.0-1.fc29 (FEDORA-2019-2bfd2f97ba)
Libraries for Qpid C++ client applications
--------------------------------------------------------------------------------
Update Information:
Rebased to 1.39.0.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 7 2019 Irina Boverman <iboverma(a)redhat.com> - 1.39.0-1
- Rebased to 1.39.0
- Rebuilt against qpid-proton 0.26.0
--------------------------------------------------------------------------------
================================================================================
qpid-dispatch-1.4.1-1.fc29 (FEDORA-2019-07d1837fd7)
Dispatch router for Qpid
--------------------------------------------------------------------------------
Update Information:
Rebased to 1.4.1.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 8 2019 Irina Boverman <iboverma(a)redhat.com> - 1.4.1-1
- Rebased to 1.4.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1620055 - Error when starting qpid-dispatch-router 1.2.0
https://bugzilla.redhat.com/show_bug.cgi?id=1620055
--------------------------------------------------------------------------------
================================================================================
qpid-proton-0.26.0-1.fc29 (FEDORA-2019-f0fddf08af)
A high performance, lightweight messaging library
--------------------------------------------------------------------------------
Update Information:
Rebased to 0.26.0.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 7 2019 Irina Boverman <iboverma(a)redhat.com> - 0.26.0-1
- Rebased to 0.26.0
--------------------------------------------------------------------------------
================================================================================
quodlibet-4.2.1-1.fc29 (FEDORA-2019-3a1f6251fb)
A music management program
--------------------------------------------------------------------------------
Update Information:
- update to 4.2.1 - changelog
https://quodlibet.readthedocs.io/en/latest/changelog.html#do-not-wear-the...
under-any-circumstances
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 11 2019 Johannes Lips <hannes(a)fedoraproject.org> - 4.2.0-1
- update to recent upstream release 4.2.1
* Mon Dec 10 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 4.2.0-2
- Require python3-gobject instead of python2-gobject
--------------------------------------------------------------------------------
================================================================================
roxterm-3.7.3-1.fc29 (FEDORA-2019-39d6c80214)
Terminal emulator
--------------------------------------------------------------------------------
Update Information:
Update to 3.7.3
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 11 2019 Pete Walter <pwalter(a)fedoraproject.org> - 3.7.3-1
- Update to 3.7.3
- Update upstream URLs for the github switch
- Switch to cmake
- Use desktop-file-validate rather than desktop-file-install
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1664208 - Roxterm (old version), sets wrong size (fixed in upstream), please
update to GitHub version
https://bugzilla.redhat.com/show_bug.cgi?id=1664208
--------------------------------------------------------------------------------
================================================================================
rubygem-qpid_messaging-1.39.0-1.fc29 (FEDORA-2019-04a0b5ebff)
Ruby bindings for the Qpid messaging framework
--------------------------------------------------------------------------------
Update Information:
Rebased to 1.39.0.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 8 2019 Irina Boverman <iboverma(a)redhat.com> - 1.39.0-1
- Rebased to 1.39.0
--------------------------------------------------------------------------------
================================================================================
rubygem-qpid_proton-0.26.0-1.fc29 (FEDORA-2019-a4bcf38dad)
Ruby language bindings for the Qpid Proton messaging framework
--------------------------------------------------------------------------------
Update Information:
Rebased to 0.26.0.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 8 2019 Irina Boverman <iboverma(a)redhat.com> - 0.26.0-1
- Rebased to 0.26.0
--------------------------------------------------------------------------------
================================================================================
stlink-1.5.1-0.1.20190103git7651d21.fc29 (FEDORA-2019-d3cc5fc52f)
STM32 discovery line Linux programmer
--------------------------------------------------------------------------------
Update Information:
Update to latest git.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 11 2019 Vasiliy N. Glazov <vascom2(a)gmail.com> -
1.5.1-0.1.20190103git7651d21
- Update to latest git
--------------------------------------------------------------------------------
================================================================================
systemd-239-8.gite339eae.fc29 (FEDORA-2019-18b3a10c7f)
System and Service Manager
--------------------------------------------------------------------------------
Update Information:
- systemd-journald and systemd-journal-remote reject entries which contain too
many fields (CVE-2018-16865, #1664973) and set limits on the process' command
line length (CVE-2018-16864, #1664972) - Fix out-of-bounds read when parsing a
crafted syslog message in systemd-journald (CVE-2018-16866, #1664975) - A signal
is again used to stop user sessions instead of dbus (#1664491) No need to log
out or reboot.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 11 2019 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> -
239-8.gite339eae
- systemd-journald and systemd-journal-remote reject entries which
contain too many fields (CVE-2018-16865, #1664973) and set limits on the
process' command line length (CVE-2018-16864, #1664972)
- Fix out-of-bounds read when parsing a crafted syslog message in systemd-journald
(CVE-2018-16866, #1664975)
- A signal is again used to stop user sessions instead of dbus (#1664491)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1664491 - Shutdown takes a long time to finish
https://bugzilla.redhat.com/show_bug.cgi?id=1664491
[ 2 ] Bug #1664975 - CVE-2018-16866 systemd: out-of-bounds read when parsing a crafted
syslog message [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1664975
[ 3 ] Bug #1664972 - CVE-2018-16864 systemd: stack overflow when calling syslog from a
command with long cmdline [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1664972
[ 4 ] Bug #1664973 - CVE-2018-16865 systemd: stack overflow when receiving many journald
entries [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1664973
--------------------------------------------------------------------------------
================================================================================
wordpress-5.0.3-1.fc29 (FEDORA-2019-2937ad3e48)
Blog tool and publishing platform
--------------------------------------------------------------------------------
Update Information:
See upstream announcement: [WordPress 5.0.3 Maintenance
Release](https://wordpress.org/news/2019/01/wordpress-5-0-3-maintenance-
release/)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 11 2019 Remi Collet <remi(a)remirepo.net> - 5.0.3-1
- WordPress 5.0.3 Maintenance Release
--------------------------------------------------------------------------------
================================================================================
xfig-3.2.7a-2.fc29 (FEDORA-2019-4f6b5dc1ed)
An X Window System tool for drawing basic vector graphics
--------------------------------------------------------------------------------
Update Information:
- Fix spline drawing (rhbz#1665237)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 11 2019 Hans de Goede <hdegoede(a)redhat.com> - 3.2.7a-2
- Fix spline drawing (rhbz#1665237)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1665237 - xfig interpolated spline draws polyline instead of spline
https://bugzilla.redhat.com/show_bug.cgi?id=1665237
--------------------------------------------------------------------------------
================================================================================
xorg-x11-server-1.20.3-3.fc29 (FEDORA-2019-f379cf5a07)
X.Org X11 X server
--------------------------------------------------------------------------------
Update Information:
More Xwayland/Present fixes from upstream (rhbz#1609181, rhbz#1661748)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 11 2019 Olivier Fourdan <ofourdan(a)redhat.com> - 1.20.3-3
- More Xwayland/Present fixes from upstream (rhbz#1609181, rhbz#1661748)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1609181 - [abrt] xorg-x11-server-Xwayland: OsLookupColor(): Segmentation
fault at address 0x400000000
https://bugzilla.redhat.com/show_bug.cgi?id=1609181
[ 2 ] Bug #1661748 - [abrt] xorg-x11-server-Xwayland: System(): Xwayland killed by
SIGABRT
https://bugzilla.redhat.com/show_bug.cgi?id=1661748
--------------------------------------------------------------------------------
================================================================================
xrdp-0.9.9-1.fc29 (FEDORA-2019-e1d8fe2b6d)
Open source remote desktop protocol (RDP) server
--------------------------------------------------------------------------------
Update Information:
Release notes for xrdp v0.9.9 (2018/12/25) Release cycle From the next
release, release cycle will be changed from quarterly to every 4 months. xrdp
will be released in April, August, December. New features - Disconnection by
idle timeout (requires xorgxrdp v0.2.9 or later) #1227 - Glyph cache v2 (fixes
no font issue on iOS/macOS/Android client) #367 #1235 Bug fixes - Fix xrdp-
chansrv crashes caused in drive redirection #1202 #1225 - Fix build with FDK
AAC v2 #1257 - Do not enable RemoteApp if the INFO_RAIL flag is not set (RDP-
RDP proxy) #1253 Other changes - Add Spanish Latin Amarican keyboard #1237
#1240 #1244 - Dynamic channel improvements #1222 #1224 - Remove some
deprecated sesman session types #1232 - Refactoring and cleanups Known issues
- FreeRDP 2.0.0-rc4 or later might not able to connect to xrdp due to - xrdp's
bad-mannered behaviour, add +glyph-cache option to FreeRDP to connect #1266 -
Audio redirection by MP3 codec doesn't sound with some client, use AAC instead
#965 ---- Required xrdp-selinux sub-package.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 11 2019 Bojan Smojver <bojan(a)rexurive.com> - 1:0.9.9-1
- Bump up to 0.9.9
- Fix sesman.ini patch
- Fix xrdp.ini patch
* Wed Nov 14 2018 Bojan Smojver <bojan(a)rexurive.com> - 1:0.9.8-2
- Make main and selinux packages codependent
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1575019 - xrdp should require xrdp-selinux sub-package
https://bugzilla.redhat.com/show_bug.cgi?id=1575019
--------------------------------------------------------------------------------