The following Fedora 29 Security updates need testing:
Age URL
245
https://bodhi.fedoraproject.org/updates/FEDORA-2019-fa5843e0e1
asterisk-16.2.1-1.fc29
231
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c84f291592
WALinuxAgent-2.2.38-1.fc29
226
https://bodhi.fedoraproject.org/updates/FEDORA-2019-7528388823
chicken-5.0.0-2.fc29
186
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9839aded3f
python-gnupg-0.4.4-1.fc29
182
https://bodhi.fedoraproject.org/updates/FEDORA-2019-35cb5a4785
kubernetes-1.13.5-1.fc29
120
https://bodhi.fedoraproject.org/updates/FEDORA-2019-32f7cd9b66
dosbox-0.74.3-2.fc29
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-758824a3ff
python2-2.7.17-1.fc29 python2-docs-2.7.17-1.fc29
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d2856deb1f
firefox-70.0-1.fc29
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e4c45e113c nspr-4.23.0-1.fc29
nss-3.47.0-2.fc29
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-18036b898e file-5.34-15.fc29
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9fffac5168
t1utils-1.41-1.fc29
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d81be00640
java-latest-openjdk-13.0.1.9-2.rolling.fc29
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8952d0f014
thunderbird-68.2.0-1.fc29
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-bfb407659e rssh-2.3.4-15.fc29
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-703e299870
samba-4.9.15-0.fc29
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-65509aac53
wpa_supplicant-2.7-2.fc29
The following Fedora 29 Critical Path updates have yet to be approved:
Age URL
158
https://bodhi.fedoraproject.org/updates/FEDORA-2019-06a2d1c7fb
anaconda-29.24.7-3.fc29
155
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4cefd3161a
nfs-utils-2.3.3-4.rc2.fc29
129
https://bodhi.fedoraproject.org/updates/FEDORA-2019-583d9d5a56
mutter-3.30.2-3.fc29
115
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6f13c38d0d
python-urllib3-1.24.3-2.fc29
112
https://bodhi.fedoraproject.org/updates/FEDORA-2019-62e681b68b ipset-7.2-1.fc29
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-18036b898e file-5.34-15.fc29
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-5c6a86b128 libldb-1.4.8-1.fc29
samba-4.9.14-0.fc29
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e4c45e113c nspr-4.23.0-1.fc29
nss-3.47.0-2.fc29
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-186f908f45
linux-firmware-20191022-103.fc29
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3a920ca5ea
pungi-4.1.40-1.fc29
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-a746c4f59d
libreport-2.11.2-1.fc29
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d2856deb1f
firefox-70.0-1.fc29
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-70f23a7a7d
vim-8.1.2198-1.fc29
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-758824a3ff
python2-2.7.17-1.fc29 python2-docs-2.7.17-1.fc29
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3bdedf56fb sssd-2.2.2-3.fc29
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3fcb3b1627
zlib-1.2.11-18.fc29
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-65509aac53
wpa_supplicant-2.7-2.fc29
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-458490f1d7
kernel-5.3.8-100.fc29
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-703e299870
samba-4.9.15-0.fc29
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-885b33bcfd
pcre2-10.33-15.fc29
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8952d0f014
thunderbird-68.2.0-1.fc29
The following builds have been pushed to Fedora 29 updates-testing
Cadence-1.0.0-0.7.20191021git0642494.fc29
R-littler-0.3.9-1.fc29
R-tinytex-0.17-1.fc29
chromium-78.0.3904.70-1.fc29
fntsample-5.3-4.fc29
gd-2.2.5-8.fc29
ibus-typing-booster-2.7.1-1.fc29
koji-1.19.0-1.fc29
mame-0.215-1.fc29
mock-1.4.21-1.fc29
mock-core-configs-31.7-1.fc29
mpc-0.33-1.fc29
openvpn-2.4.8-1.fc29
perl-Getopt-Lucid-1.10-1.fc29
perl-Net-SSLeay-1.85-11.fc29
pipenv-2018.11.26-12.fc29
python-catkin_lint-1.6.2-1.fc29
python-colcon-cd-0.1.1-3.fc29
python-colcon-cmake-0.2.16-1.fc29
python-colcon-common-extensions-0.2.1-1.fc29
python-colcon-core-0.4.3-1.fc29
python-colcon-devtools-0.2.2-1.fc29
python-colcon-package-information-0.3.0-1.fc29
python-colcon-powershell-0.3.6-1.fc29
python35-3.5.8-2.fc29
redhat-rpm-config-121-1.fc29
rpkg-1.59-2.fc29
sane-backends-1.0.28-5.fc29
system-config-printer-1.5.12-3.fc29
vacuum-im-1.3.0-0.16.20191014git9f3952b.fc29
xen-4.11.2-2.fc29
xtl-0.6.8-1.fc29
Details about builds:
================================================================================
Cadence-1.0.0-0.7.20191021git0642494.fc29 (FEDORA-2019-16d587aa04)
A set of tools useful for audio production
--------------------------------------------------------------------------------
Update Information:
- Remove RR ladish due package is dead ---- Update to
1.0.0-0.6.20191021git0642494
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 31 2019 Martin Gansser <martinkg(a)fedoraproject.org> -
1.0.0-0.7.20191021git0642494
- Remove RR ladish due package is dead
* Wed Oct 30 2019 Martin Gansser <martinkg(a)fedoraproject.org> -
1.0.0-0.6.20191021git0642494
- Update to 1.0.0-0.6.20191021git0642494
* Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> -
1.0.0-0.5.20180827git4a5f5b4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> -
1.0.0-0.4.20180827git4a5f5b4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1767725 - Cadence fails to install in Fedora 31
https://bugzilla.redhat.com/show_bug.cgi?id=1767725
--------------------------------------------------------------------------------
================================================================================
R-littler-0.3.9-1.fc29 (FEDORA-2019-3844a861df)
littler: R at the Command-Line via 'r'
--------------------------------------------------------------------------------
Update Information:
littler 0.3.9.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 31 2019 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 0.3.9-1
- New upstream release 0.3.9
* Thu Sep 19 2019 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 0.3.8-5
- Unify specfile
* Mon Aug 12 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.3.8-4
- Remove explicit dependencies provided by automatic dependency generator
* Mon Aug 12 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.3.8-3
- Rebuild with automatic Provides
* Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.8-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
R-tinytex-0.17-1.fc29 (FEDORA-2019-1075862272)
Helper Functions to Install and Maintain 'TeX Live', and Compile 'LaTeX'
Documents
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 30 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.17-1
- Update to latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1767243 - R-tinytex-0.17 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1767243
--------------------------------------------------------------------------------
================================================================================
chromium-78.0.3904.70-1.fc29 (FEDORA-2019-cdc04140c4)
A WebKit (Blink) powered web browser
--------------------------------------------------------------------------------
Update Information:
Chromium 78. Fixes these: CVE-2019-5870 CVE-2019-5871 CVE-2019-5872
CVE-2019-5874 CVE-2019-5875 CVE-2019-13691 CVE-2019-13692 CVE-2019-5876
CVE-2019-5877 CVE-2019-5878 CVE-2019-5879 CVE-2019-5880 CVE-2019-5881
CVE-2019-13659 CVE-2019-13660 CVE-2019-13661 CVE-2019-13662 CVE-2019-13663
CVE-2019-13664 CVE-2019-13665 CVE-2019-13666 CVE-2019-13667 CVE-2019-13668
CVE-2019-13669 CVE-2019-13670 CVE-2019-13671 CVE-2019-13673 CVE-2019-13674
CVE-2019-13675 CVE-2019-13676 CVE-2019-13677 CVE-2019-13678 CVE-2019-13679
CVE-2019-13680 CVE-2019-13681 CVE-2019-13682 CVE-2019-13683
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 23 2019 Tom Callaway <spot(a)fedoraproject.org> - 78.0.3904.80-1
- update to 78.0.3904.80
* Wed Oct 16 2019 Tom Callaway <spot(a)fedoraproject.org> - 77.0.3865.120-4
- upstream fix for zlib symbol exports with gcc
* Wed Oct 16 2019 Tom Callaway <spot(a)fedoraproject.org> - 77.0.3865.120-3
- silence outdated build noise (bz1745745)
* Tue Oct 15 2019 Tom Callaway <spot(a)fedoraproject.org> - 77.0.3865.120-2
- fix node handling for EPEL-8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1762402 - CVE-2019-13682 chromium-browser: Site isolation bypass
https://bugzilla.redhat.com/show_bug.cgi?id=1762402
[ 2 ] Bug #1762401 - CVE-2019-13681 chromium-browser: Bypass on download restrictions
https://bugzilla.redhat.com/show_bug.cgi?id=1762401
[ 3 ] Bug #1762400 - CVE-2019-13680 chromium-browser: IP address spoofing to servers
https://bugzilla.redhat.com/show_bug.cgi?id=1762400
[ 4 ] Bug #1762399 - CVE-2019-13679 chromium-browser: User gesture needed for printing
https://bugzilla.redhat.com/show_bug.cgi?id=1762399
[ 5 ] Bug #1762398 - CVE-2019-13678 chromium-browser: Download dialog spoofing
https://bugzilla.redhat.com/show_bug.cgi?id=1762398
[ 6 ] Bug #1762397 - CVE-2019-13677 chromium-browser: Chrome web store origin needs to
be isolated
https://bugzilla.redhat.com/show_bug.cgi?id=1762397
[ 7 ] Bug #1762396 - CVE-2019-13676 chromium-browser: Google URI shown for certificate
warning
https://bugzilla.redhat.com/show_bug.cgi?id=1762396
[ 8 ] Bug #1762395 - CVE-2019-13675 chromium-browser: Extensions can be disabled by
trailing slash
https://bugzilla.redhat.com/show_bug.cgi?id=1762395
[ 9 ] Bug #1762394 - CVE-2019-13674 chromium-browser: IDN spoofing
https://bugzilla.redhat.com/show_bug.cgi?id=1762394
[ 10 ] Bug #1762393 - CVE-2019-13673 chromium-browser: Cross-origin information leak
using devtools
https://bugzilla.redhat.com/show_bug.cgi?id=1762393
[ 11 ] Bug #1762392 - CVE-2019-13671 chromium-browser: Dialog box fails to show origin
https://bugzilla.redhat.com/show_bug.cgi?id=1762392
[ 12 ] Bug #1762391 - CVE-2019-13670 chromium-browser: V8 memory corruption in regex
https://bugzilla.redhat.com/show_bug.cgi?id=1762391
[ 13 ] Bug #1762390 - CVE-2019-13669 chromium-browser: HTTP authentication spoof
https://bugzilla.redhat.com/show_bug.cgi?id=1762390
[ 14 ] Bug #1762389 - CVE-2019-13668 chromium-browser: Global window leak via console
https://bugzilla.redhat.com/show_bug.cgi?id=1762389
[ 15 ] Bug #1762388 - CVE-2019-13667 chromium-browser: URI bar spoof when using external
app URIs
https://bugzilla.redhat.com/show_bug.cgi?id=1762388
[ 16 ] Bug #1762387 - CVE-2019-13666 chromium-browser: Side channel using storage size
estimate
https://bugzilla.redhat.com/show_bug.cgi?id=1762387
[ 17 ] Bug #1762386 - CVE-2019-13665 chromium-browser: Multiple file download protection
bypass
https://bugzilla.redhat.com/show_bug.cgi?id=1762386
[ 18 ] Bug #1762385 - CVE-2019-13664 chromium-browser: CSRF bypass
https://bugzilla.redhat.com/show_bug.cgi?id=1762385
[ 19 ] Bug #1762384 - CVE-2019-13663 chromium-browser: IDN spoof
https://bugzilla.redhat.com/show_bug.cgi?id=1762384
[ 20 ] Bug #1762383 - CVE-2019-13662 chromium-browser: CSP bypass
https://bugzilla.redhat.com/show_bug.cgi?id=1762383
[ 21 ] Bug #1762382 - CVE-2019-13661 chromium-browser: Full screen notification spoof
https://bugzilla.redhat.com/show_bug.cgi?id=1762382
[ 22 ] Bug #1762381 - CVE-2019-13660 chromium-browser: Full screen notification overlap
https://bugzilla.redhat.com/show_bug.cgi?id=1762381
[ 23 ] Bug #1762380 - CVE-2019-13659 chromium-browser: URL spoof
https://bugzilla.redhat.com/show_bug.cgi?id=1762380
[ 24 ] Bug #1762379 - CVE-2019-5881 chromium-browser: Arbitrary read in SwiftShader
https://bugzilla.redhat.com/show_bug.cgi?id=1762379
[ 25 ] Bug #1762378 - CVE-2019-5880 chromium-browser: SameSite cookie bypass
https://bugzilla.redhat.com/show_bug.cgi?id=1762378
[ 26 ] Bug #1762377 - CVE-2019-5879 chromium-browser: Extensions can read some local
files
https://bugzilla.redhat.com/show_bug.cgi?id=1762377
[ 27 ] Bug #1762376 - CVE-2019-5878 chromium-browser: Use-after-free in V8
https://bugzilla.redhat.com/show_bug.cgi?id=1762376
[ 28 ] Bug #1762375 - CVE-2019-5877 chromium-browser: Out-of-bounds access in V8
https://bugzilla.redhat.com/show_bug.cgi?id=1762375
[ 29 ] Bug #1762374 - CVE-2019-5876 chromium-browser: Use-after-free in media
https://bugzilla.redhat.com/show_bug.cgi?id=1762374
[ 30 ] Bug #1762373 - CVE-2019-13692 chromium-browser: SOP bypass
https://bugzilla.redhat.com/show_bug.cgi?id=1762373
[ 31 ] Bug #1762372 - CVE-2019-13691 chromium-browser: Omnibox spoof
https://bugzilla.redhat.com/show_bug.cgi?id=1762372
[ 32 ] Bug #1762371 - CVE-2019-5875 chromium-browser: URL bar spoof via download
redirect
https://bugzilla.redhat.com/show_bug.cgi?id=1762371
[ 33 ] Bug #1762370 - CVE-2019-5874 chromium-browser: External URIs may trigger other
browsers
https://bugzilla.redhat.com/show_bug.cgi?id=1762370
[ 34 ] Bug #1762368 - CVE-2019-5872 chromium-browser: Use-after-free in Mojo
https://bugzilla.redhat.com/show_bug.cgi?id=1762368
[ 35 ] Bug #1762367 - CVE-2019-5871 chromium-browser: Heap overflow in Skia
https://bugzilla.redhat.com/show_bug.cgi?id=1762367
[ 36 ] Bug #1762366 - CVE-2019-5870 chromium-browser: Use-after-free in media
https://bugzilla.redhat.com/show_bug.cgi?id=1762366
--------------------------------------------------------------------------------
================================================================================
fntsample-5.3-4.fc29 (FEDORA-2019-b8b76c0915)
A program for making font samples that show Unicode coverage of the font
--------------------------------------------------------------------------------
Update Information:
Resolves:rh#1761556 - Add missing dependency perl(Locale::TextDomain)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 1 2019 Parag Nemade <pnemade AT redhat DOT com> - 5.3-4
- Resolves:rh#1761556 - Add missing dependency perl(Locale::TextDomain)
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.3-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Thu Feb 14 2019 Parag Nemade <pnemade AT redhat DOT com> - 5.3-2
- Remove previously added patch as pango is fixed
* Sun Feb 3 2019 Parag Nemade <pnemade AT redhat DOT com> - 5.3-1
- Update to 5.3 version
- Added missing glib2-devel while linking in CMakeFiles.txt
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.2-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1761556 - fntsample missing dependency on perl-libintl-perl
https://bugzilla.redhat.com/show_bug.cgi?id=1761556
--------------------------------------------------------------------------------
================================================================================
gd-2.2.5-8.fc29 (FEDORA-2019-d7f8995451)
A graphics library for quick creation of PNG or JPEG images
--------------------------------------------------------------------------------
Update Information:
fixed multiple security bugs
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 1 2019 odubaj(a)redhat.com - 2.2.5-8
- Fixed heap based buffer overflow in gd_color_match.c:gdImageColorMatch() in libgd as
used in imagecolormatch()
- Resolves: RHBZ#1678104 (CVE-2019-6977)
- Fixed potential double-free in gdImage*Ptr()
- Resolves: RHBZ#1671391 (CVE-2019-6978)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1672210 - CVE-2019-6977 gd: heap based buffer overflow in
gd_color_match.c:gdImageColorMatch() in libgd as used in imagecolormatch() [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1672210
[ 2 ] Bug #1671391 - CVE-2019-6978 gd: double free in the gdImage*Ptr in gd_gif_out.c,
gd_jpeg.c, and gd_wbmp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1671391
--------------------------------------------------------------------------------
================================================================================
ibus-typing-booster-2.7.1-1.fc29 (FEDORA-2019-7ec2dcb525)
A completion input method
--------------------------------------------------------------------------------
Update Information:
Update to 2.7.1; Many translations updated, some new translations, some
bugfixes.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 31 2019 Mike FABIAN <mfabian(a)redhat.com> - 2.7.1-1
- Update to 2.7.1
- Update Chinese (Simplified) translations from Weblate (13.5% translated)
- Update Spanish translations from Weblate (92.2% translated)
- Update Catalan translations from Weblate (12.4% translated)
- Add Hebrew translation from Weblate (67.4% translated)
- Add Arabic translation from Weblate (28.0% translated)
- Update Ukrainian translations from Weblate (100.0% translated)
- Update German translations from Weblate (100.0% translated)
- Update Japanese translations from Weblate (35.2% translated)
- Update French translations from Weblate (93.8% translated)
- Add Hungarian translation from Weblate (58.0% translated)
- Add Odia translations from Weblate (2.6% translated)
- Improve compose file parsing to get results containing \" correct
- More test cases for compose sequences
- Change README.md to refer to Weblate for translations instead of Zanata
- Fix display of code points in emoji-picker when running in or_IN.UTF-8 locale
--------------------------------------------------------------------------------
================================================================================
koji-1.19.0-1.fc29 (FEDORA-2019-c77daad60e)
Build system tools
--------------------------------------------------------------------------------
Update Information:
Upstream bugfix release 1.19.0. See
https://docs.pagure.org/koji/release_notes_1.19/ for more info
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 1 2019 Mohan Boddu <mboddu(a)bhujji.com> - 1.19.0-1
- Rebase to 1.19.0
- Removing downstream patch 1613
* Wed Oct 9 2019 Patrick Uiterwijk <patrick(a)puiterwijk.org> - 1.18.1-1
- Rebase to 1.18.1 for CVE-2019-17109
* Wed Sep 18 2019 Jiri Popelka <jpopelka(a)redhat.com> - 1.18.0-6
- Fix macro added in previous change.
* Tue Sep 17 2019 Kevin Fenzi <kevin(a)scrye.com> - 1.18.0-5
- Add provides for python3 subpackage. Fixes bug #1750391
* Sat Aug 17 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 1.18.0-4
- Rebuilt for Python 3.8
* Fri Aug 16 2019 Kevin Fenzi <kevin(a)scrye.com> - 1.18.0-3
- Fix pkgsurl/topurl default mistake.
* Fri Aug 16 2019 Kevin Fenzi <kevin(a)scrye.com> - 1.18.0-2
- Fix mergerepos conditional for f30.
* Fri Aug 16 2019 Kevin Fenzi <kevin(a)scrye.com> - 1.18.0-1
- Update to 1.18.0.
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.17.0-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Thu May 30 2019 Kevin Fenzi <kevin(a)scrye.com> - 1.17.0-7
- Add patch to fix koji kerberos auth with python3.
- Drop internal mergerepos so we can go all python3. Fixes bug #1715257
* Wed May 29 2019 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 1.17.0-7
- Expose dynamic_buildrequires mock setting
* Tue May 28 2019 Kevin Fenzi <kevin(a)scrye.com> - 1.17.0-6
- Switch kojid back to python3 as imagefactory and oz have moved.
- Backport patch to download only repomd.xml instead of all repodata.
- Backport patch to allow 'bare' repo merging for modularity.
- Backport patch to allow for seperate srpm repos in buildroot repos.
--------------------------------------------------------------------------------
================================================================================
mame-0.215-1.fc29 (FEDORA-2019-45f2dfb7f9)
Multiple Arcade Machine Emulator
--------------------------------------------------------------------------------
Update Information:
An update to the latest upstream release: *
https://www.mamedev.org/?p=475
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 30 2019 Julian Sikorski <belegdol(a)fedoraproject.org> - 0.215-1
- Update to 0.215
- Do not extract 3rdparty code not needed on Linux
--------------------------------------------------------------------------------
================================================================================
mock-1.4.21-1.fc29 (FEDORA-2019-ad7ecf205b)
Builds packages inside chroots
--------------------------------------------------------------------------------
Update Information:
- copy distribution-gpg-keys if this is boostrap and we use container image -
move podman initialization to buildroot.py [GH#380] - bootstrap: fix --install
and --installdeps [RHBZ#1447627] - selinuxfs, one more fix for nspawn
[RHBZ#1756972] - fix broken rpmbuildstate [GH#349]
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 1 2019 Miroslav Such�� <msuchy(a)redhat.com> 1.4.21-1
- copy distribution-gpg-keys if this is boostrap and we use container image
- move podman initialization to buildroot.py [GH#380]
- bootstrap: fix --install and --installdeps [RHBZ#1447627]
- mock: selinuxfs, one more fix for nspawn [RHBZ#1756972]
- mock: fix broken rpmbuildstate [GH#349]
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1447627 - mock --installdeps or --install can't find rpm to install with
--bootstrap-chroot
https://bugzilla.redhat.com/show_bug.cgi?id=1447627
[ 2 ] Bug #1756972 - building Fedora 31 packages on Fedora 30 cause SELinux contexts to
be unmapped
https://bugzilla.redhat.com/show_bug.cgi?id=1756972
--------------------------------------------------------------------------------
================================================================================
mock-core-configs-31.7-1.fc29 (FEDORA-2019-7f5744fed8)
Mock core config files basic chroots
--------------------------------------------------------------------------------
Update Information:
- Add configs for epel8-playground - add 3 base packages to epel-playground
buildroot [RHBZ#1764445] - add 3 base packages to epel buildroot [RHBZ#1764445]
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 1 2019 Miroslav Such�� <msuchy(a)redhat.com> 31.7-1
- Add configs for epel8-playground (mmathesi(a)redhat.com)
- add 3 base packages to epel-playground buildroot [RHBZ#1764445]
- add 3 base packages to epel buildroot [RHBZ#1764445]
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1764445 - Packages missing in EPEL 8 mock buildroot
https://bugzilla.redhat.com/show_bug.cgi?id=1764445
--------------------------------------------------------------------------------
================================================================================
mpc-0.33-1.fc29 (FEDORA-2019-825750ebfa)
Command-line client for MPD
--------------------------------------------------------------------------------
Update Information:
Update to 0.33.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 1 2019 Vasiliy Glazov <vascom2(a)gmail.com> - 0.33-1
- Update to 0.33
--------------------------------------------------------------------------------
================================================================================
openvpn-2.4.8-1.fc29 (FEDORA-2019-a7d5349837)
A full-featured SSL VPN solution
--------------------------------------------------------------------------------
Update Information:
Update to latest OpenVPN 2.4.8 release. See [Release notes](https://community.op
envpn.net/openvpn/wiki/ChangesInOpenvpn24#OpenVPN2.4.8) for more details.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 1 2019 David Sommerseth <dazo(a)eurephia.org> - 2.4.8-1
- Updating to upstream OpenVPN 2.4.8
--------------------------------------------------------------------------------
================================================================================
perl-Getopt-Lucid-1.10-1.fc29 (FEDORA-2019-852e533d7b)
Clear, readable syntax for command line processing
--------------------------------------------------------------------------------
Update Information:
This release corrects misspellings in a documentation.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 31 2019 Petr Pisar <ppisar(a)redhat.com> - 1.10-1
- 1.10 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1765773 - perl-Getopt-Lucid-1.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1765773
--------------------------------------------------------------------------------
================================================================================
perl-Net-SSLeay-1.85-11.fc29 (FEDORA-2019-aa0d14547a)
Perl extension for using OpenSSL
--------------------------------------------------------------------------------
Update Information:
This update addresses a problem that the package failed to rebuild from source
with the openssl packages in the updates repository, which no longer have a
dependency on the zlib-devel package. The Net-SSLeay build scripts assume that
OpenSSL is linked against zlib, which is no longer the case, and this caused the
failure to build. The update fixes this by checking at build time which
libraries need to be linked against for OpenSSL.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 1 2019 Paul Howarth <paul(a)city-fan.org> - 1.85-11
- Get libraries to link against from pkg-config (#1704785)
Adapted from
https://github.com/radiator-software/p5-net-ssleay/pull/127
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.85-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1704785 - perl-Net-SSLeay-1.85-9.fc29 FTBFS: /usr/bin/ld: cannot find -lz
https://bugzilla.redhat.com/show_bug.cgi?id=1704785
--------------------------------------------------------------------------------
================================================================================
pipenv-2018.11.26-12.fc29 (FEDORA-2019-b9d986e330)
The higher level Python packaging tool
--------------------------------------------------------------------------------
Update Information:
Fix pipenv for Python 2.7 projects.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 30 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 2018.11.26-12
- Keep pathlib2, scandir, click-completion and backports.* bundled (#1767003)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1767003 - pipenv does not work on Fedora 31 with Python 2.7
https://bugzilla.redhat.com/show_bug.cgi?id=1767003
--------------------------------------------------------------------------------
================================================================================
python-catkin_lint-1.6.2-1.fc29 (FEDORA-2019-c835f2122e)
Check catkin packages for common errors
--------------------------------------------------------------------------------
Update Information:
Update to 1.6.2
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 31 2019 Scott K Logan <logans(a)cottsay.net> - 1.6.2-1
- Update to 1.6.2 (rhbz#1767353)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1767353 - python-catkin_lint-1.6.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1767353
--------------------------------------------------------------------------------
================================================================================
python-colcon-cd-0.1.1-3.fc29 (FEDORA-2019-89b0ea1ffb)
Extension for colcon to change the current working directory
--------------------------------------------------------------------------------
Update Information:
Initial release of `colcon-cd`
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1767216 - Review Request: python-colcon-cd - Extension for colcon to change
the current working directory
https://bugzilla.redhat.com/show_bug.cgi?id=1767216
--------------------------------------------------------------------------------
================================================================================
python-colcon-cmake-0.2.16-1.fc29 (FEDORA-2019-fd19ff6991)
Extension for colcon to support CMake packages
--------------------------------------------------------------------------------
Update Information:
Update to latest `colcon-*` releases
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.2.16-1
- Update to 0.2.16 (rhbz#1762084)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1763461 - python-colcon-devtools-0.2.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1763461
[ 2 ] Bug #1762532 - python-colcon-powershell-0.3.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1762532
[ 3 ] Bug #1765938 - python-colcon-package-information-0.3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1765938
[ 4 ] Bug #1762084 - python-colcon-cmake-0.2.16 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1762084
[ 5 ] Bug #1762548 - python-colcon-core-0.4.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1762548
[ 6 ] Bug #1763100 - python-colcon-common-extensions-0.2.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1763100
--------------------------------------------------------------------------------
================================================================================
python-colcon-common-extensions-0.2.1-1.fc29 (FEDORA-2019-fd19ff6991)
Meta package aggregating colcon-core and common extensions
--------------------------------------------------------------------------------
Update Information:
Update to latest `colcon-*` releases
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 1 2019 Scott K Logan <logans(a)cottsay.net> - 0.2.1-1
- Update to 0.2.1 (rhbz#1763100)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1763461 - python-colcon-devtools-0.2.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1763461
[ 2 ] Bug #1762532 - python-colcon-powershell-0.3.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1762532
[ 3 ] Bug #1765938 - python-colcon-package-information-0.3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1765938
[ 4 ] Bug #1762084 - python-colcon-cmake-0.2.16 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1762084
[ 5 ] Bug #1762548 - python-colcon-core-0.4.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1762548
[ 6 ] Bug #1763100 - python-colcon-common-extensions-0.2.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1763100
--------------------------------------------------------------------------------
================================================================================
python-colcon-core-0.4.3-1.fc29 (FEDORA-2019-fd19ff6991)
Command line tool to build sets of software packages
--------------------------------------------------------------------------------
Update Information:
Update to latest `colcon-*` releases
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.4.3-1
- Update to 0.4.3 (rhbz#1762548)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1763461 - python-colcon-devtools-0.2.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1763461
[ 2 ] Bug #1762532 - python-colcon-powershell-0.3.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1762532
[ 3 ] Bug #1765938 - python-colcon-package-information-0.3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1765938
[ 4 ] Bug #1762084 - python-colcon-cmake-0.2.16 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1762084
[ 5 ] Bug #1762548 - python-colcon-core-0.4.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1762548
[ 6 ] Bug #1763100 - python-colcon-common-extensions-0.2.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1763100
--------------------------------------------------------------------------------
================================================================================
python-colcon-devtools-0.2.2-1.fc29 (FEDORA-2019-fd19ff6991)
Extension for information about colcon extensibility
--------------------------------------------------------------------------------
Update Information:
Update to latest `colcon-*` releases
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.2.2-1
- Update to 0.2.2 (rhbz#1763461)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1763461 - python-colcon-devtools-0.2.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1763461
[ 2 ] Bug #1762532 - python-colcon-powershell-0.3.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1762532
[ 3 ] Bug #1765938 - python-colcon-package-information-0.3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1765938
[ 4 ] Bug #1762084 - python-colcon-cmake-0.2.16 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1762084
[ 5 ] Bug #1762548 - python-colcon-core-0.4.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1762548
[ 6 ] Bug #1763100 - python-colcon-common-extensions-0.2.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1763100
--------------------------------------------------------------------------------
================================================================================
python-colcon-package-information-0.3.0-1.fc29 (FEDORA-2019-fd19ff6991)
Extension for colcon to output package information
--------------------------------------------------------------------------------
Update Information:
Update to latest `colcon-*` releases
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.3.0-1
- Update to 0.3.0 (rhbz#1765938)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1763461 - python-colcon-devtools-0.2.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1763461
[ 2 ] Bug #1762532 - python-colcon-powershell-0.3.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1762532
[ 3 ] Bug #1765938 - python-colcon-package-information-0.3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1765938
[ 4 ] Bug #1762084 - python-colcon-cmake-0.2.16 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1762084
[ 5 ] Bug #1762548 - python-colcon-core-0.4.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1762548
[ 6 ] Bug #1763100 - python-colcon-common-extensions-0.2.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1763100
--------------------------------------------------------------------------------
================================================================================
python-colcon-powershell-0.3.6-1.fc29 (FEDORA-2019-fd19ff6991)
Extension for colcon to provide PowerShell scripts
--------------------------------------------------------------------------------
Update Information:
Update to latest `colcon-*` releases
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 30 2019 Scott K Logan <logans(a)cottsay.net> - 0.3.6-1
- Update to 0.3.6 (rhbz#1762532)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1763461 - python-colcon-devtools-0.2.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1763461
[ 2 ] Bug #1762532 - python-colcon-powershell-0.3.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1762532
[ 3 ] Bug #1765938 - python-colcon-package-information-0.3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1765938
[ 4 ] Bug #1762084 - python-colcon-cmake-0.2.16 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1762084
[ 5 ] Bug #1762548 - python-colcon-core-0.4.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1762548
[ 6 ] Bug #1763100 - python-colcon-common-extensions-0.2.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1763100
--------------------------------------------------------------------------------
================================================================================
python35-3.5.8-2.fc29 (FEDORA-2019-d202cda4f8)
Version 3.5 of the Python programming language
--------------------------------------------------------------------------------
Update Information:
Python 3.5 has now entered "security fixes only" mode, and as such the only
changes since Python 3.5.4 are security fixes.
https://www.python.org/downloads/release/python-358/
https://docs.python.org/3.5/whatsnew/changelog.html#python-3-5-8 Security fix
for CVE-2019-9740, CVE-2019-10160, CVE-2019-16935, CVE-2019-18348 ,
CVE-2019-16056.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 30 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 3.5.8-2
- Use the correct upstream tarball
-
https://mail.python.org/archives/list/python-dev@python.org/message/OYNQS...
* Tue Oct 29 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 3.5.8-1
- Update to 3.5.8
* Sat Oct 12 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 3.5.8~rc2-1
- Update to 3.5.8rc2
* Mon Sep 9 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 3.5.8~rc1-1
- Update to 3.5.8rc1
* Sat Aug 10 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 3.5.7-4
- Build against OpenSSL 1.1.x, not 1.0.x
* Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.5.7-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Tue Apr 2 2019 Victor Stinner <vstinner(a)redhat.com> - 3.5.7-2
- Skip test_ssl and test_asyncio tests failing with OpenSSL 1.1.1 (rhbz#1685609)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1749839 - CVE-2019-16056 python: email.utils.parseaddr wrongly parses email
addresses
https://bugzilla.redhat.com/show_bug.cgi?id=1749839
[ 2 ] Bug #1727276 - CVE-2019-18348 python: CRLF injection via the host part of the url
passed to urlopen()
https://bugzilla.redhat.com/show_bug.cgi?id=1727276
[ 3 ] Bug #1763229 - CVE-2019-16935 python: XSS vulnerability in the documentation
XML-RPC server in server_title field
https://bugzilla.redhat.com/show_bug.cgi?id=1763229
[ 4 ] Bug #1718388 - CVE-2019-10160 python: regression of CVE-2019-9636 due to
functional fix to allow port numbers in netloc
https://bugzilla.redhat.com/show_bug.cgi?id=1718388
[ 5 ] Bug #1688169 - CVE-2019-9740 python: CRLF injection via the query part of the url
passed to urlopen()
https://bugzilla.redhat.com/show_bug.cgi?id=1688169
--------------------------------------------------------------------------------
================================================================================
redhat-rpm-config-121-1.fc29 (FEDORA-2019-e5d246aa34)
Red Hat specific rpm configuration files
--------------------------------------------------------------------------------
Update Information:
Simplify the API of %gpgverify.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 1 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 121-1
- Fix the simple API of %gpgverify.
* Thu Oct 31 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 120-1
- Simplify the API of %gpgverify.
--------------------------------------------------------------------------------
================================================================================
rpkg-1.59-2.fc29 (FEDORA-2019-f7857e3660)
Python library for interacting with rpm+git
--------------------------------------------------------------------------------
Update Information:
Backporting some fixes and features ### container-build: add new arguments
to the subcommand: --isolated Isolated builds will only update the
{version}-{release} unique tag and the primary tag in the target container
registry. Also, OSBS's bump_release plugin will ignore isolated builds.
Users must specify a --build-release argument when the use the --isolated
argument. --koji-parent-build OSBS allows users to dynamically override the
Dockerfile's "FROM" image at build time. This allows you to build your
container
against a specific parent image without pushing changes to dist-git. ### Reuse
koji_cli.lib.unique_path Call this method instead of constructing the path by
rpkg itself. ### Pass skip_build option to buildContainer (fix)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 25 2019 Ondrej Nosek <onosek(a)redhat.com> - 1.59-2
- Backport: container-build: add --isolated and --koji-parent-build arguments
- Backport: Pass skip_build option to buildContainer
- Backport: Reuse koji_cli.lib.unique_path
--------------------------------------------------------------------------------
================================================================================
sane-backends-1.0.28-5.fc29 (FEDORA-2019-3b65c609e8)
Scanner access software
--------------------------------------------------------------------------------
Update Information:
1761530 - apply upstream patch
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 31 2019 Zdenek Dohnal <zdohnal(a)redhat.com> - 1.0.28-5
- 1761530 - apply upstream patch
--------------------------------------------------------------------------------
================================================================================
system-config-printer-1.5.12-3.fc29 (FEDORA-2019-2145947b10)
A printer administration tool
--------------------------------------------------------------------------------
Update Information:
whole fix for #1765915
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 31 2019 Zdenek Dohnal <zdohnal(a)redhat.com> - 1.5.12-3
- whole fix for #1765915
* Tue Oct 29 2019 Zdenek Dohnal <zdohnal(a)redhat.com> - 1.5.12-2
- 1765915 - abrt in udev-configure-printer
--------------------------------------------------------------------------------
================================================================================
vacuum-im-1.3.0-0.16.20191014git9f3952b.fc29 (FEDORA-2019-0fbadc07d7)
XMPP/Jabber client
--------------------------------------------------------------------------------
Update Information:
Update to 1.3.0-0.16.20191014git9f3952b
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 31 2019 Martin Gansser <martinkg(a)fedoraproject.org> -
1.3.0-0.16.20191014git9f3952b
- Update to 1.3.0-0.16.20191014git9f3952b
* Sat Jul 27 2019 Fedora Release Engineering <releng(a)fedoraproject.org> -
1.3.0-0.15.20181129git52c2a8c
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Sun Feb 3 2019 Fedora Release Engineering <releng(a)fedoraproject.org> -
1.3.0-0.14.20181129git52c2a8c
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
xen-4.11.2-2.fc29 (FEDORA-2019-865bb16900)
Xen is a virtual machine monitor
--------------------------------------------------------------------------------
Update Information:
VCPUOP_initialise DoS [XSA-296, CVE-2019-18420] missing descriptor table limit
checking in x86 PV emulation [XSA-298, CVE-2019-18425] Issues with restartable
PV type change operations [XSA-299, CVE-2019-18421] (#1767726) add-to-physmap
can be abused to DoS Arm hosts [XSA-301, CVE-2019-18423] passed through PCI
devices may corrupt host memory after deassignment [XSA-302, CVE-2019-18424]
(#1767731) ARM: Interrupts are unconditionally unmasked in exception handlers
[XSA-303, CVE-2019-18422]
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 1 2019 Michael Young <m.a.young(a)durham.ac.uk> - 4.11.2-2
- VCPUOP_initialise DoS [XSA-296, CVE-2019-18420]
- missing descriptor table limit checking in x86 PV emulation [XSA-298,
CVE-2019-18425]
- Issues with restartable PV type change operations [XSA-299, CVE-2019-18421]
(#1767726)
- add-to-physmap can be abused to DoS Arm hosts [XSA-301, CVE-2019-18423]
- passed through PCI devices may corrupt host memory after deassignment
[XSA-302, CVE-2019-18424] (#1767731)
- ARM: Interrupts are unconditionally unmasked in exception handlers
[XSA-303, CVE-2019-18422]
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1765043 - CVE-2019-18421 xen: a malicious PV guest administrator may be able
to escalate their privilege to that of the host
https://bugzilla.redhat.com/show_bug.cgi?id=1765043
[ 2 ] Bug #1767730 - CVE-2019-18424 xen: passed through PCI devices may corrupt host
memory after deassignment leading to privilege escalation
https://bugzilla.redhat.com/show_bug.cgi?id=1767730
--------------------------------------------------------------------------------
================================================================================
xtl-0.6.8-1.fc29 (FEDORA-2019-e9c1b9caba)
QuantStack tools library
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 31 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.6.8-1
- Update to latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1767641 - xtl-0.6.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1767641
--------------------------------------------------------------------------------