The following Fedora 29 Security updates need testing:
Age URL
33
https://bodhi.fedoraproject.org/updates/FEDORA-2018-51ce232320
xerces-c27-2.7.0-28.fc29
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-24d1e5a2c3
roundcubemail-1.3.8-1.fc29
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-319b9d0f68 ruby-2.5.3-99.fc29
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4381dd7d0b
drupal8-8.6.2-1.fc29
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a84b6d0071 feh-2.28-1.fc29
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d3f4eb1f9f
drupal7-7.60-2.fc29
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7adf863a47
php-Smarty2-2.6.31-2.fc29
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6d62140b89
php-pear-CAS-1.3.6-1.fc29
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-234c67b207
libgit2-0.27.7-1.fc29
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-209371341e
java-1.8.0-openjdk-aarch32-1.8.0.191.181022-1.fc29
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-44ea020814
mkvtoolnix-28.2.0-1.fc29
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2c0a92fd3d links-2.17-1.fc29
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c82fc3e109
community-mysql-8.0.13-1.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6b350bb946
mysql-connector-java-8.0.13-1.fc29
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b881073c43
icecast-2.4.4-1.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-075821dc8f
subscription-manager-1.24.2-1.fc29
The following Fedora 29 Critical Path updates have yet to be approved:
Age URL
56
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7a207f18aa sudo-1.8.25-1.fc29
14
https://bodhi.fedoraproject.org/updates/FEDORA-2018-099adf1f84
lxde-common-0.99.2-6.fc29
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-faf8956756
pungi-4.1.30-1.fc29
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6435f89651
highlight-3.47-1.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e89be76f8f pcre-8.42-5.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6db989493d pcre2-10.32-4.fc29
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4eb77f1fa6
fedora-release-29-2
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-39542d5348 ceph-12.2.9-1.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-49c4d6aa17
kernel-tools-4.18.17-300.fc29 kernel-headers-4.18.17-300.fc29 kernel-4.18.17-300.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-230c3c19f5
python3-3.7.1-2.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-dc0455bf79
findutils-4.6.0-21.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3129f981d3
selinux-policy-3.14.2-42.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5b39240bae
libwacom-0.32-1.fc29
The following builds have been pushed to Fedora 29 updates-testing
SDL2_image-2.0.4-1.fc29
SDL2_mixer-2.0.4-1.fc29
ax25-apps-1.0.5-8.fc29
cabextract-1.9-1.fc29
criu-3.11-1.fc29
eclipse-avr-2.4.2-6.fc29
eclipse-gef-3.11.0-7.fc29
eclipse-packagekit-0.2.0-9.fc29
eclipse-pdt-6.0.0-3.fc29
eclipse-remote-3.0.0-0.6.git14c6611.fc29
eclipse-sgx-2.0-4.fc29
firefox-63.0.1-4.fc29
gcc-8.2.1-5.fc29
gnome-shell-extension-media-player-indicator-0-0.22.20181105git813c05a.fc29
golang-1.11.2-1.fc29
grass-7.4.2-2.fc29
hdf-4.2.14-1.fc29
ibus-1.5.19-8.fc29
icu-62.1-3.fc29
kvantum-0.10.8-2.fc29
libmspack-0.9.1-0.1.alpha.fc29
mingw-SDL2_image-2.0.4-1.fc29
mingw-SDL2_mixer-2.0.4-1.fc29
nautilus-python-1.2.2-1.fc29
nbdkit-1.6.3-2.fc29
perl-CPAN-FindDependencies-2.48-1.fc29
perl-RT-Client-REST-0.53-1.fc29
pgadmin3-1.22.2-8.fc29
phan-1.1.2-1.fc29
python-rasterio-1.0.9-1.fc29
subversion-api-docs-1.11.0-1.fc29
swtpm-0.1.0-0.20181106git05d8160.fc29
syncthing-0.14.52-1.fc29
twa-1.6.2-1.fc29
Details about builds:
================================================================================
SDL2_image-2.0.4-1.fc29 (FEDORA-2018-70c2222171)
Image loading library for SDL
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2018-3977
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 6 2018 Pete Walter <pwalter(a)fedoraproject.org> - 2.0.4-1
- Update to 2.0.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1646575 - CVE-2018-3977 SDL2_image: code execution in the XCF image rendering
functionality
https://bugzilla.redhat.com/show_bug.cgi?id=1646575
--------------------------------------------------------------------------------
================================================================================
SDL2_mixer-2.0.4-1.fc29 (FEDORA-2018-2b2e2a0d3d)
Simple DirectMedia Layer - Sample Mixer Library
--------------------------------------------------------------------------------
Update Information:
Update to 2.0.4
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 6 2018 Pete Walter <pwalter(a)fedoraproject.org> - 2.0.4-1
- Update to 2.0.4
--------------------------------------------------------------------------------
================================================================================
ax25-apps-1.0.5-8.fc29 (FEDORA-2018-0ed2688a62)
AX.25 ham radio applications
--------------------------------------------------------------------------------
Update Information:
Fix segfault when using Unix98 pty.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 6 2018 Richard Shaw <hobbes1069(a)gmail.com> - 1.0.5-8
- Add patch for segfault when using Unix98 pty, (#1644317).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1644317 - Segfault when using Unix98 pty
https://bugzilla.redhat.com/show_bug.cgi?id=1644317
--------------------------------------------------------------------------------
================================================================================
cabextract-1.9-1.fc29 (FEDORA-2018-a5953af115)
Utility for extracting cabinet (.cab) archives
--------------------------------------------------------------------------------
Update Information:
Latest stable releases of libmspack and cabextract, includes security fixes for
CVE-2018-14680, CVE-2018-14681, CVE-2018-14682, CVE-2018-18584, CVE-2018-18585
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 6 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 1.9-1
- 1.9
* Tue Oct 30 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 1.8-1
- 1.8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1644215 - CVE-2018-18585 libmspack: NULL pointer dereference in
chmd_read_headers in mspack/chmd.c
https://bugzilla.redhat.com/show_bug.cgi?id=1644215
[ 2 ] Bug #1644214 - CVE-2018-18584 libmspack: Out-of-bounds write in mspack/cab.h
https://bugzilla.redhat.com/show_bug.cgi?id=1644214
[ 3 ] Bug #1610896 - CVE-2018-14681 libmspack: out-of-bounds write in kwajd_read_headers
in mspack/kwajd.c
https://bugzilla.redhat.com/show_bug.cgi?id=1610896
[ 4 ] Bug #1610934 - CVE-2018-14680 libmspack: off-by-one error in the CHM chunk number
validity checks
https://bugzilla.redhat.com/show_bug.cgi?id=1610934
[ 5 ] Bug #1610941 - CVE-2018-14682 libmspack: off-by-one error in the TOLOWER() macro
for CHM decompression
https://bugzilla.redhat.com/show_bug.cgi?id=1610941
--------------------------------------------------------------------------------
================================================================================
criu-3.11-1.fc29 (FEDORA-2018-5b04551b46)
Tool for Checkpoint/Restore in User-space
--------------------------------------------------------------------------------
Update Information:
Updated to 3.11
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 6 2018 Adrian Reber <adrian(a)lisas.de> - 3.11-1
- Updated to 3.11
- Removed upstreamed patches
* Tue Oct 30 2018 Adrian Reber <adrian(a)lisas.de> - 3.10-5
- Added Recommends: tar
It is necessary when checkpointing containers with a tmpfs
--------------------------------------------------------------------------------
================================================================================
eclipse-avr-2.4.2-6.fc29 (FEDORA-2018-c0593b2244)
AVR plug-in for Eclipse
--------------------------------------------------------------------------------
Update Information:
This update fixes erroneous requirements on Java 9+ from Eclipse plug-ins.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 5 2018 Mat Booth <mat.booth(a)redhat.com> - 2.4.2-6
- Rebuild to regenerate requires
- Update license tag
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1645885 - eclipse-remote is pulling java-openjdk-headless 1:10.0.2.13-7.fc29
as requirement
https://bugzilla.redhat.com/show_bug.cgi?id=1645885
--------------------------------------------------------------------------------
================================================================================
eclipse-gef-3.11.0-7.fc29 (FEDORA-2018-c0593b2244)
Graphical Editing Framework (GEF) Eclipse plug-in
--------------------------------------------------------------------------------
Update Information:
This update fixes erroneous requirements on Java 9+ from Eclipse plug-ins.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 5 2018 Mat Booth <mat.booth(a)redhat.com> - 3.11.0-7
- Rebuild to regenerate requires
- Update license tag
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1645885 - eclipse-remote is pulling java-openjdk-headless 1:10.0.2.13-7.fc29
as requirement
https://bugzilla.redhat.com/show_bug.cgi?id=1645885
--------------------------------------------------------------------------------
================================================================================
eclipse-packagekit-0.2.0-9.fc29 (FEDORA-2018-c0593b2244)
PackageKit integration tools for Eclipse (Incubation)
--------------------------------------------------------------------------------
Update Information:
This update fixes erroneous requirements on Java 9+ from Eclipse plug-ins.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 5 2018 Mat Booth <mat.booth(a)redhat.com> - 0.2.0-9
- Rebuild to regenerate requires
- Update license tag
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1645885 - eclipse-remote is pulling java-openjdk-headless 1:10.0.2.13-7.fc29
as requirement
https://bugzilla.redhat.com/show_bug.cgi?id=1645885
--------------------------------------------------------------------------------
================================================================================
eclipse-pdt-6.0.0-3.fc29 (FEDORA-2018-c0593b2244)
PHP Development Tools (PDT) Eclipse plug-in
--------------------------------------------------------------------------------
Update Information:
This update fixes erroneous requirements on Java 9+ from Eclipse plug-ins.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 5 2018 Mat Booth <mat.booth(a)redhat.com> - 6.0.0-3
- Rebuild to regenerate requires
- Update license tag
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1645885 - eclipse-remote is pulling java-openjdk-headless 1:10.0.2.13-7.fc29
as requirement
https://bugzilla.redhat.com/show_bug.cgi?id=1645885
--------------------------------------------------------------------------------
================================================================================
eclipse-remote-3.0.0-0.6.git14c6611.fc29 (FEDORA-2018-c0593b2244)
Eclipse Remote Services plug-in
--------------------------------------------------------------------------------
Update Information:
This update fixes erroneous requirements on Java 9+ from Eclipse plug-ins.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 5 2018 Mat Booth <mat.booth(a)redhat.com> - 3.0.0-0.6.git14c6611
- Rebuild to regenerate requires
- Update license tag
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1645885 - eclipse-remote is pulling java-openjdk-headless 1:10.0.2.13-7.fc29
as requirement
https://bugzilla.redhat.com/show_bug.cgi?id=1645885
--------------------------------------------------------------------------------
================================================================================
eclipse-sgx-2.0-4.fc29 (FEDORA-2018-c0593b2244)
Intel Software Guard Extensions Plug-in for Eclipse
--------------------------------------------------------------------------------
Update Information:
This update fixes erroneous requirements on Java 9+ from Eclipse plug-ins.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 5 2018 Mat Booth <mat.booth(a)redhat.com> - 2.0-4
- Rebuild to regenerate requires
- Update license tag
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1645885 - eclipse-remote is pulling java-openjdk-headless 1:10.0.2.13-7.fc29
as requirement
https://bugzilla.redhat.com/show_bug.cgi?id=1645885
--------------------------------------------------------------------------------
================================================================================
firefox-63.0.1-4.fc29 (FEDORA-2018-2d09c093cc)
Mozilla Firefox Web browser
--------------------------------------------------------------------------------
Update Information:
- Fixed clipboard on Wayland (rhbz#1585393)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 5 2018 Martin Stransky <stransky(a)redhat.com> - 63.0.1-4
- Added clipboard fix (mozbz#1504689)
* Fri Nov 2 2018 Dan Horak <dhorak(a)redhat.com> - 63.0.1-3
- Added fixes for ppc64le
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1585393 - Firefox Wayland copy and paste is not working
https://bugzilla.redhat.com/show_bug.cgi?id=1585393
--------------------------------------------------------------------------------
================================================================================
gcc-8.2.1-5.fc29 (FEDORA-2018-de93530d49)
Various compilers (C, C++, Objective-C, ...)
--------------------------------------------------------------------------------
Update Information:
Upstream bugs (
http://gcc.gnu.org/PRNNNNN) fixed: 52795, 63155, 70966, 77854,
78595, 81033, 81733, 81878, 85488, 85669, 86198, 86288, 86687, 86751, 87061,
87087, 87362, 87428, 87465, 87473, 87511, 87597, 87610, 87623, 87641, 87645,
87647, 87649, 87665, 87700, 87704, 87725, 87745, 87749, 87809, 87822, 87837,
87859
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 5 2018 Jakub Jelinek <jakub(a)redhat.com> 8.2.1-5
- update from the 8 branch
- PRs ada/81878, bootstrap/81033, c++/86288, debug/86687, debug/87362,
debug/87428, fortran/87597, fortran/87725, libstdc++/70966,
libstdc++/77854, libstdc++/78595, libstdc++/86751, libstdc++/87061,
libstdc++/87641, libstdc++/87704, libstdc++/87749, libstdc++/87809,
libstdc++/87822, middle-end/63155, middle-end/85488, middle-end/87087,
middle-end/87610, middle-end/87623, middle-end/87645,
middle-end/87647, middle-end/87649, other/86198, sanitizer/87837,
target/52795, target/81733, target/85669, target/87511,
tree-optimization/63155, tree-optimization/87465,
tree-optimization/87473, tree-optimization/87665,
tree-optimization/87700, tree-optimization/87745
- fix store merging regression (PR tree-optimization/87859, #1645400)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1645400 - gcc miscompiles bitset code in mesa
https://bugzilla.redhat.com/show_bug.cgi?id=1645400
--------------------------------------------------------------------------------
================================================================================
gnome-shell-extension-media-player-indicator-0-0.22.20181105git813c05a.fc29
(FEDORA-2018-7d5eb92385)
Control MPRIS2 capable media players: Rhythmbox, Banshee, Clementine and more
--------------------------------------------------------------------------------
Update Information:
Update to 0-0.22.20181105git813c05a
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 6 2018 Martin Gansser <martinkg(a)fedoraproject.org> -
0-0.22.20181105git813c05a
- Update to new git snapshot 0-0.22.20181105git813c05a
--------------------------------------------------------------------------------
================================================================================
golang-1.11.2-1.fc29 (FEDORA-2018-8f36b2d188)
The Go Programming Language
--------------------------------------------------------------------------------
Update Information:
Rebase to 1.11.2 ---- Re-base to 1.11.2
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 5 2018 Jakub ��ajka <jcajka(a)redhat.com> - 1.11.2-1
- Rebase to go1.11.2
* Thu Oct 4 2018 Jakub ��ajka <jcajka(a)redhat.com> - 1.11.1-1
- Rebase to go1.11.1
--------------------------------------------------------------------------------
================================================================================
grass-7.4.2-2.fc29 (FEDORA-2018-dec54e09b1)
GRASS GIS - Geographic Resources Analysis Support System
--------------------------------------------------------------------------------
Update Information:
fix to include libgrass_*.so files in grass-libs.rpm ---- new upstream version
GRASS GIS 7.4.2
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 6 2018 Markus Neteler <neteler(a)mundialis.de> - 7.4.2-2
- fix to include libgrass_*.so files in grass-libs.rpm
* Sun Oct 28 2018 Markus Neteler <neteler(a)mundialis.de> - 7.4.2-1
- new upstream version 7.4.2
* Sun Sep 9 2018 Pavel Raiskup <praiskup(a)redhat.com> - 7.4.1-8
- Clean up of PostgreSQL support (PR#4)
--------------------------------------------------------------------------------
================================================================================
hdf-4.2.14-1.fc29 (FEDORA-2018-6efd62758e)
A general purpose library and file format for storing scientific data
--------------------------------------------------------------------------------
Update Information:
- Release 4.2.14
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 3 2018 Antonio Trande <sagitter(a)fedoraproject.org> 4.2.14-1
- Release 4.2.14
--------------------------------------------------------------------------------
================================================================================
ibus-1.5.19-8.fc29 (FEDORA-2018-f5991bd976)
Intelligent Input Bus for Linux OS
--------------------------------------------------------------------------------
Update Information:
Changed ibus-devel-docs.x86_64 to ibus-devel-docs.noarch
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 6 2018 Takao Fujiwara <tfujiwar(a)redhat.com> - 1.5.19-8
- Reverted noarch for devel-docs by mistake
--------------------------------------------------------------------------------
================================================================================
icu-62.1-3.fc29 (FEDORA-2018-db05d9982f)
International Components for Unicode
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2018-18928
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 6 2018 Eike Rathke <erack(a)redhat.com> - 62.1-3
- Resolves: rhbz#1646703 CVE-2018-18928
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1646702 - CVE-2018-18928 icu: integer overflow in
number::impl::DecimalQuantity::toScientificString() in i18n/number_decimalquantity.cpp
https://bugzilla.redhat.com/show_bug.cgi?id=1646702
--------------------------------------------------------------------------------
================================================================================
kvantum-0.10.8-2.fc29 (FEDORA-2018-c22a18a3f9)
SVG-based theme engine for Qt5, KDE and LXQt
--------------------------------------------------------------------------------
Update Information:
Remove dependency to kde-filesystem and plasma-desktop
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1645908 - Kvantum package pulls in unneeded dependencies
https://bugzilla.redhat.com/show_bug.cgi?id=1645908
--------------------------------------------------------------------------------
================================================================================
libmspack-0.9.1-0.1.alpha.fc29 (FEDORA-2018-a5953af115)
Library for CAB and related files compression and decompression
--------------------------------------------------------------------------------
Update Information:
Latest stable releases of libmspack and cabextract, includes security fixes for
CVE-2018-14680, CVE-2018-14681, CVE-2018-14682, CVE-2018-18584, CVE-2018-18585
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 6 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 0.9.1-0.1.alpha
- 0.9.1alpha
- libmspack-0.8-0.1.alpha corrupts extracted cab files (#1647033)
- examples no longer installed (by default)
* Tue Oct 30 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 0.8-0.1.alpha
- 0.8alpha
- use %make_build %make_install %ldconfig_scriptlets %license
- devel: use %{?_isa} to tighten dep on main pkg
- drop deprecated Group: tag
- %files: tighten to include library soname
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1644215 - CVE-2018-18585 libmspack: NULL pointer dereference in
chmd_read_headers in mspack/chmd.c
https://bugzilla.redhat.com/show_bug.cgi?id=1644215
[ 2 ] Bug #1644214 - CVE-2018-18584 libmspack: Out-of-bounds write in mspack/cab.h
https://bugzilla.redhat.com/show_bug.cgi?id=1644214
[ 3 ] Bug #1610896 - CVE-2018-14681 libmspack: out-of-bounds write in kwajd_read_headers
in mspack/kwajd.c
https://bugzilla.redhat.com/show_bug.cgi?id=1610896
[ 4 ] Bug #1610934 - CVE-2018-14680 libmspack: off-by-one error in the CHM chunk number
validity checks
https://bugzilla.redhat.com/show_bug.cgi?id=1610934
[ 5 ] Bug #1610941 - CVE-2018-14682 libmspack: off-by-one error in the TOLOWER() macro
for CHM decompression
https://bugzilla.redhat.com/show_bug.cgi?id=1610941
--------------------------------------------------------------------------------
================================================================================
mingw-SDL2_image-2.0.4-1.fc29 (FEDORA-2018-b38de02132)
MinGW Windows port of the Image loading library for SDL2
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2018-3977
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 6 2018 Pete Walter <pwalter(a)fedoraproject.org> - 2.0.4-1
- Update to 2.0.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1646575 - CVE-2018-3977 SDL2_image: code execution in the XCF image rendering
functionality
https://bugzilla.redhat.com/show_bug.cgi?id=1646575
[ 2 ] Bug #1568142 - CVE-2018-3837 SDL2_image: information disclosure in the PCX image
rendering functionality
https://bugzilla.redhat.com/show_bug.cgi?id=1568142
[ 3 ] Bug #1500450 - CVE-2017-2887 SDL_image: Incorrect XCF property handling
https://bugzilla.redhat.com/show_bug.cgi?id=1500450
--------------------------------------------------------------------------------
================================================================================
mingw-SDL2_mixer-2.0.4-1.fc29 (FEDORA-2018-e1b0b9f906)
MinGW Windows port of Simple DirectMedia Layer's Sample Mixer Library
--------------------------------------------------------------------------------
Update Information:
Update to 2.0.4
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 6 2018 Pete Walter <pwalter(a)fedoraproject.org> - 2.0.4-1
- Update to 2.0.4
--------------------------------------------------------------------------------
================================================================================
nautilus-python-1.2.2-1.fc29 (FEDORA-2018-c01870c2fd)
Python bindings for Nautilus
--------------------------------------------------------------------------------
Update Information:
This update fixes a major packaging bug that made nautilus-python not work at
all in F29. In addition, the binary package is renamed from python2-nautilus
back to nautilus-python, as the package is not a Python module and is not
parallel installable. See the discussion in
https://bugzilla.redhat.com/show_bug.cgi?id=1636626
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 5 2018 Kalev Lember <klember(a)redhat.com> - 1.2.2-1
- Update to 1.2.2
- Rename the binary package back to nautilus-python (#1636626)
- Simplify packaging
- Co-own gtk-doc directories
- Update upstream URLs
- Built against Python 3 starting with F30
* Tue Oct 30 2018 Raphael Groner <projects.rg(a)smart.ms> - 1.2.1-4
- separate properly builds of python2 and python3, rhbz#1636626
- drop obsolete Group tag
- use name macro
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1642927 - open in tilix is not working
https://bugzilla.redhat.com/show_bug.cgi?id=1642927
[ 2 ] Bug #1636626 - Soname mismatch breaking nautilus-python initialization
https://bugzilla.redhat.com/show_bug.cgi?id=1636626
[ 3 ] Bug #1645843 - [abrt] nautilus: new_threadstate(): nautilus killed by SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1645843
--------------------------------------------------------------------------------
================================================================================
nbdkit-1.6.3-2.fc29 (FEDORA-2018-c6b1468010)
NBD server
--------------------------------------------------------------------------------
Update Information:
nbdkit metapackage should depend on versioned -server subpackage etc. ---- New
upstream version 1.6.3.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 6 2018 Richard W.M. Jones <rjones(a)redhat.com> - 1.6.3-2
- nbdkit metapackage should depend on versioned -server subpackage etc.
* Tue Nov 6 2018 Richard W.M. Jones <rjones(a)redhat.com> - 1.6.3-1
- New upstream version 1.6.3.
--------------------------------------------------------------------------------
================================================================================
perl-CPAN-FindDependencies-2.48-1.fc29 (FEDORA-2018-323b80f825)
Find dependencies for modules on CPAN
--------------------------------------------------------------------------------
Update Information:
Updated to the latest version
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 6 2018 Jitka Plesnikova <jplesnik(a)redhat.com> - 2.48-1
- 2.48 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1646993 - Upgrade perl-CPAN-FindDependencies to 2.48
https://bugzilla.redhat.com/show_bug.cgi?id=1646993
--------------------------------------------------------------------------------
================================================================================
perl-RT-Client-REST-0.53-1.fc29 (FEDORA-2018-b8a17ccf7b)
Talk to RT using REST protocol
--------------------------------------------------------------------------------
Update Information:
This release exposes CC and Admin CC adresses on Queues.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 6 2018 Petr Pisar <ppisar(a)redhat.com> - 0.53-1
- 0.53 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1646997 - Upgrade perl-RT-Client-REST to 0.53
https://bugzilla.redhat.com/show_bug.cgi?id=1646997
--------------------------------------------------------------------------------
================================================================================
pgadmin3-1.22.2-8.fc29 (FEDORA-2018-1d31912c46)
Graphical client for PostgreSQL
--------------------------------------------------------------------------------
Update Information:
Fix Fedora builds again. Experimental PG10 support. A few bugs fixed - but the
reports are not easily reproducible. Since pgadmin4 is still not ready, we have
to keep this going in the mean time.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 6 2018 Scott Talbert <swt(a)techie.net> - 1.22.2-8
- Adjust BRs to fix FTBFS
* Tue Nov 6 2018 Stuart Gathman <stuart(a)gathman.org> - 1.22.2-7
- Build against compat-openssl10 Sandro Mani <manisandro(a)gmail.com>
- Fix failure to use EVP_CIPHER_CTX_new()
- Fix broken pgadmin3-nullthis.patch
- Add patch for PG10 support
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.22.2-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.22.2-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Thu Aug 3 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.22.2-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Thu Jul 27 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.22.2-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Sat Feb 11 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.22.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
* Fri Nov 11 2016 Devrim G��nd��z <devrim(a)gunduz.org> 1.22.2-1
- Update to 1.22.2 -- the final release of pgadmin3
- Update patch3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1605430 - pgadmin3: FTBFS in Fedora rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1605430
[ 2 ] Bug #1556111 - pgadmin3: FTBFS in F28
https://bugzilla.redhat.com/show_bug.cgi?id=1556111
--------------------------------------------------------------------------------
================================================================================
phan-1.1.2-1.fc29 (FEDORA-2018-c574af3f16)
A static analyzer for PHP
--------------------------------------------------------------------------------
Update Information:
05 Nov 2018, Phan 1.1.2 ----------------------- **New features (CLI)** + Make
`phan --progress-bar` fit within narrower console widths. (#2096) (Make the
old width into the new **maximum** width) Additionally, use a gradient of
shades for the progress bar. **New features (Analysis):** + Warn when
attempting to read from a write-only real/magic property (or vice-versa) (#595).
New issue types: `PhanAccessReadOnlyProperty`,
`PhanAccessReadOnlyMagicProperty`, `PhanAccessWriteOnlyProperty`,
`PhanAccessWriteOnlyMagicProperty`. New annotations: `@phan-read-only` and
`@phan-write-only` (on its own line) in the doc comment of a real property. +
Warn about use statements that are redundant. (#2048). New issue types:
`PhanUseConstantNoEffect`, `PhanUseFunctionNoEffect`,
`PhanUseNormalNamespacedNoEffect`, `PhanUseNormalNoEffect`. By default, this
will only warn about use statements made from the global namespace, of elements
also in the global namespace. To also warn about redundant **namespaced** uses
of classes/namespaces (e.g. `namespace Foo; use Foo\MyClass;`), enable
`warn_about_redundant_use_namespaced_class` + Warn when using a trait as a real
param/return type of a method-like (#2007). New issue types:
`PhanTypeInvalidTraitParam`, `PhanTypeInvalidTraitReturn` + Improve the
polyfill/fallback parser's heredoc and nowdoc lexing (#1537) + Properly warn
about an undefined variable being passed to `array_shift` (it expects an array
but undefined is converted to null) (related to fix for #2100) + Stop adding
generic int/string to the type of a class property when the doc comment mentions
only literal int/string values (#2102) (e.g. `@var 1|2`) + Improve line number
of warning about extra comma in arrays (i.e. empty array elements). (#2066) +
Properly parse [flexible heredoc/nowdoc
syntaxes](https://wiki.php.net/rfc/flexible_heredoc_nowdoc_syntaxes) that were
added in PHP 7.3 (#1537) + Warn about more invalid operands of the binary
operators `^`,`/`,`&` (#1825). Also, fix cases where `PhanTypeArrayOperator`
would not be emitted. New issue types: `PhanTypeInvalidBitwiseBinaryOperator`,
`PhanTypeMismatchBitwiseBinaryOperands` + Indicate when warnings about too many
arguments are caused only by argument unpacking. (#1324). New issue types:
`PhanParamTooManyUnpack`, `PhanParamTooManyUnpackInternal` + Properly warn about
undefined namespaced constants/functions from within a namespace (#2112). Phan
was failing to warn in some cases. + Always infer `int` for `<<` and `>>` +
Support using dynamic values as the name for a `define()` statement (#2116)
**Maintenance:** + Make issue messages more consistent in their syntax used to
describe closures/functions (#1695) + Consistently refer to instance properties
as `Class->propname` and static properties as `Class::$staticpropname` in issue
messages. **Bug fixes:** + Properly type check `static::someMethodName()`.
Previously, Phan would fail to infer types for the results of those method
calls. + Improve handling of `array_shift`. Don't warn when it's used on a
global or superglobal (#2100) + Infer that `self` and `static` in a trait refer
to the methods of that trait. (#2006)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 6 2018 Remi Collet <remi(a)remirepo.net> - 1.1.2-1
- update to 1.1.2
--------------------------------------------------------------------------------
================================================================================
python-rasterio-1.0.9-1.fc29 (FEDORA-2018-65ab5b9d42)
Fast and direct raster I/O for use with Numpy and SciPy
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 5 2018 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 1.0.9-1
- Update to latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1635944 - python-rasterio-1.0.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1635944
--------------------------------------------------------------------------------
================================================================================
subversion-api-docs-1.11.0-1.fc29 (FEDORA-2018-593d5e820e)
Subversion API documentation
--------------------------------------------------------------------------------
Update Information:
Rebuild against the latest version.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 7 2018 Bojan Smojver <bojan(a)rexursive.com> 1.11.0-1
- bump up to 1.11.0
--------------------------------------------------------------------------------
================================================================================
swtpm-0.1.0-0.20181106git05d8160.fc29 (FEDORA-2018-d652045d6d)
TPM Emulator
--------------------------------------------------------------------------------
Update Information:
Fix the ownership of swtpm_setup.sh
--------------------------------------------------------------------------------
================================================================================
syncthing-0.14.52-1.fc29 (FEDORA-2018-105a8ac3d1)
Continuous File Synchronization
--------------------------------------------------------------------------------
Update Information:
Update to version 0.14.52. Release notes:
https://github.com/syncthing/syncthing/releases/tag/v0.14.52
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 6 2018 Fabio Valentini <decathorpe(a)gmail.com> - 0.14.52-1
- Update to version 0.14.52.
--------------------------------------------------------------------------------
================================================================================
twa-1.6.2-1.fc29 (FEDORA-2018-5bf375012c)
Tiny web auditor with strong opinions
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream version
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 6 2018 Artur Iwicki <fedora(a)svgames.pl> - 1.6.2-1
- Update to latest upstream version
--------------------------------------------------------------------------------