The following Fedora 28 Security updates need testing:
Age URL
113
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d510cfd7eb
jgraphx-3.6.0.0-6.fc28
85
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c75a37ae9b
blktrace-1.2.0-6.fc28
73
https://bodhi.fedoraproject.org/updates/FEDORA-2018-202c536f70
gifsicle-1.91-1.fc28
63
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d7aeaa74da
nodejs-brace-expansion-1.1.11-1.fc28
61
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc073fdc1a
nodejs-atob-2.1.1-1.fc28
54
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9dd3f7c013
unrtf-0.21.9-8.fc28
22
https://bodhi.fedoraproject.org/updates/FEDORA-2018-28e9841baf
docker-latest-1.13.1-37.git9cb56fd.fc28
15
https://bodhi.fedoraproject.org/updates/FEDORA-2018-0c586e5178
quazip-0.7.6-1.fc28
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-33fef25ed1
ghc-hakyll-4.10.0.0-3.fc28 pandoc-citeproc-0.12.2.5-4.fc28 ghc-hs-bibutils-6.6.0.0-1.fc28
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7b97e553ff
mingw-gdal-2.2.4-5.fc28 mingw-xerces-c-3.2.1-1.fc28
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e071e178f8
mailman-2.1.29-1.fc28
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-997efe762f
seamonkey-2.49.4-1.fc28
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f17daf1cd6
myrepos-1.20180726-1.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ff8d8c33b1
dpkg-1.18.25-1.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7a9777480c
python-uranium-lulzbot-3.2.23-1.fc28 CuraEngine-lulzbot-3.2.23-1.fc28
cura-lulzbot-3.2.23-1.fc28 lulzbot-marlin-firmware-1.1.8.62-1.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-64955716d6
moodle-3.4.4-1.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f37cbaafdf
mingw-LibRaw-0.18.13-2.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-74fb8b257b qemu-2.11.2-2.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b48e0b8761
libpng15-1.5.30-6.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ddda173f56
libmspack-0.7-0.1.alpha.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9b54497b6e
php-symfony-2.8.44-1.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9c38d1dc1d
php-symfony3-3.4.14-1.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3238d4da59
mingw-glibmm24-2.56.0-1.fc28 mingw-glib2-2.56.1-1.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8b67a5c7e2 exiv2-0.26-12.fc28
The following Fedora 28 Critical Path updates have yet to be approved:
Age URL
12
https://bodhi.fedoraproject.org/updates/FEDORA-2018-167cedbe01
pungi-4.1.26-2.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4b3f72d8c9
perl-5.26.2-413.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-0dd9176f34 pcre2-10.31-8.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-25a251c107
perl-HTTP-Tiny-0.074-1.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-74fb8b257b qemu-2.11.2-2.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8a9a9881fa gdb-8.1.1-1.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-491cb9d82d
libbytesize-1.4-1.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8fc92c9687
libthai-0.1.28-1.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-28271bc6d4
tracker-2.1.1-1.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b66b267b31
libpcap-1.9.0-1.fc28
The following builds have been pushed to Fedora 28 updates-testing
R-pkgload-1.0.0-1.fc28
atomic-reactor-1.6.33-4.fc28
avogadro-1.2.0-19.fc28
bind-9.11.4-4.fc28
cgit-1.1-11.fc28
cockpit-ostree-175-1.fc28
contractor-0.3.4-1.fc28
cryptsetup-2.0.4-1.fc28
fedpkg-1.34-3.fc28
gala-0.3.1-0.6.20180729.git15f722a.fc28
gcab-1.1-3.fc28
golang-github-prometheus-common-0-0.15.20180702git38c53a9.fc28
groonga-8.0.5-1.fc28
i2c-tools-4.0-10.fc28
icaro-1.0.9-2.fc28
java-gnome-4.1.3-18.fc28
knot-resolver-2.4.1-1.fc28
libcgroup-0.41-20.fc28
libxml2-2.9.8-4.fc28
man-pages-4.15-3.fc28
msitools-0.98-1.fc28
open-vm-tools-10.3.0-1.fc28
php-symfony4-4.0.14-1.fc28
php-zendframework-zend-diactoros-1.8.4-1.fc28
php-zendframework-zend-feed-2.10.3-1.fc28
php-zendframework-zend-http-2.8.1-1.fc28
plasma-browser-integration-5.13.3-2.fc28
purple-discord-0-20.20180628git84fe764.fc28
purple-hangouts-0-60.20180731hge4ccf26.fc28
purple-libsteam-1.6.1-23.20180801gitb16a636.fc28
purple-skypeweb-1.5-3.20180720git2290013.fc28
python-moksha-hub-1.5.11-1.fc28
python-pycryptodomex-3.6.4-1.fc28
python-pytelegrambotapi-3.6.4-1.fc28
python2-django1.11-1.11.15-2.fc28
rpkg-util-2.3-1.fc28
s3cmd-2.0.2-1.fc28
scl-utils-2.0.2-7.fc28
trac-1.2.3-1.fc28
ustl-2.7-1.fc28
vagrant-openstack-provider-0.13.0-1.fc28
wireless-regdb-2018.05.31-3.1.fc28
Details about builds:
================================================================================
R-pkgload-1.0.0-1.fc28 (FEDORA-2018-59fd095263)
Simulate Package Installation and Attach
--------------------------------------------------------------------------------
Update Information:
Initial package of pkgload for R.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1610625 - Review Request: R-pkgload - Simulate Package Installation and
Attach
https://bugzilla.redhat.com/show_bug.cgi?id=1610625
--------------------------------------------------------------------------------
================================================================================
atomic-reactor-1.6.33-4.fc28 (FEDORA-2018-fd4c0b69fc)
Improved builder for Docker images
--------------------------------------------------------------------------------
Update Information:
New upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 3 2018 Clement Verna <cverna(a)fedoraproject.org> - 1.6.33-4
- Modify requirements.txt to depend on docker and not docker-py
* Wed Aug 1 2018 Owen Taylor <otaylor(a)redhat.com> - 1.6.33-3
- Add patch to fix compatibility issues with recent docker/docker-py
- Add patch to drop platforms from target tag that aren't in the cluster config
- Add patch to use Flatpak code from flatpak-module-tools, rather than cut-and-paste
* Tue Jul 31 2018 Clement Verna <cverna(a)fedoraproject.org> - 1.6.33-2
- Add patch to manage jsonschema version
* Mon Jul 30 2018 Clement Verna <cverna(a)fedoraproject.org> - 1.6.33-1
- New upstream release
- Drop patches
- Drop stop_autorebuild_if_disabled plugin
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1560118 - atomic-reactor-1.6.33 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1560118
--------------------------------------------------------------------------------
================================================================================
avogadro-1.2.0-19.fc28 (FEDORA-2018-b26667e9e6)
An advanced molecular editor for chemical purposes
--------------------------------------------------------------------------------
Update Information:
- Install Python modules in python_sitearch - Add 'povray' dependency
(bz#1556808)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 1 2018 Antonio Trande <sagitter(a)fedoraproject.org> - 1.2.0-19
- Install Python modules in python_sitearch
* Thu Jul 19 2018 Antonio Trande <sagitter(a)fedoraproject.org> - 1.2.0-18
- Add 'povray' dependency (bz#1556808)
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.0-17
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Tue May 1 2018 Jonathan Wakely <jwakely(a)redhat.com> - 1.2.0-16
- Add BuildRequires: boost-python2-devel
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1556808 - POV-Ray export is unusable
https://bugzilla.redhat.com/show_bug.cgi?id=1556808
--------------------------------------------------------------------------------
================================================================================
bind-9.11.4-4.fc28 (FEDORA-2018-5b6238de95)
The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server
--------------------------------------------------------------------------------
Update Information:
- Use OpenSSL for all digest operations. Library functions would be used for
both normal bind and bind-pkcs11 from OpenSSL.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 2 2018 Petr Men����k <pemensik(a)redhat.com> - 32:9.11.4-4
- Support unavailable MD5 in FIPS mode
* Thu Aug 2 2018 Petr Men����k <pemensik(a)redhat.com> - 32:9.11.4-3
- Use OpenSSL for digest operations (#1611537)
* Tue Jul 31 2018 Petr Men����k <pemensik(a)redhat.com> - 32:9.11.4-2
- Install generated manual pages
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1611537 - [RFE] bind: use OpenSSL for digest operations
https://bugzilla.redhat.com/show_bug.cgi?id=1611537
--------------------------------------------------------------------------------
================================================================================
cgit-1.1-11.fc28 (FEDORA-2018-a5a7f83e1b)
A fast web interface for git
--------------------------------------------------------------------------------
Update Information:
Fix directory traversal vulnerability References:
https://lists.zx2c4.com/pipermail/cgit/2018-August/004176.html
https://git.zx2c4.com/cgit/commit/?id=53efaf30b
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 3 2018 Todd Zullinger <tmz(a)pobox.com> - 1.1-11
- Fix directory traversal vulnerability
--------------------------------------------------------------------------------
================================================================================
cockpit-ostree-175-1.fc28 (FEDORA-2018-0effffd2d7)
Cockpit user interface for rpm-ostree
--------------------------------------------------------------------------------
Update Information:
Split out into a separate upstream project
--------------------------------------------------------------------------------
================================================================================
contractor-0.3.4-1.fc28 (FEDORA-2018-ae4a314bb5)
Desktop-wide extension service
--------------------------------------------------------------------------------
Update Information:
Update to version 0.3.4. Release notes:
https://github.com/elementary/contractor/releases/tag/0.3.4
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 2 2018 Fabio Valentini <decathorpe(a)gmail.com> - 0.3.4-1
- Update to version 0.3.4.
--------------------------------------------------------------------------------
================================================================================
cryptsetup-2.0.4-1.fc28 (FEDORA-2018-29d55e19b3)
A utility for setting up encrypted disks
--------------------------------------------------------------------------------
Update Information:
Update to version 2.0.4
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 3 2018 Ondrej Kozina <okozina(a)redhat.com> - 2.0.4-1
- Update to cryptsetup 2.0.4.
--------------------------------------------------------------------------------
================================================================================
fedpkg-1.34-3.fc28 (FEDORA-2018-917188c58d)
Fedora utility for working with dist-git
--------------------------------------------------------------------------------
Update Information:
Require python-openidc-client 0.6.0 as minimum version
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 3 2018 Chenxiong Qi <cqi(a)redhat.com> - 1.34-3
- Require python-openidc-client 0.6.0 as minimum version
* Tue Jul 31 2018 Chenxiong Qi <cqi(a)redhat.com> - 1.34-2
- Fix files section for Python 3 build
--------------------------------------------------------------------------------
================================================================================
gala-0.3.1-0.6.20180729.git15f722a.fc28 (FEDORA-2018-13d50f8943)
Gala window manager
--------------------------------------------------------------------------------
Update Information:
Bump to commit 15f722a, which improves the rendering of window shadows.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 2 2018 Fabio Valentini <decathorpe(a)gmail.com> -
0.3.1-0.6.20180729.git15f722a
- Bump to commit 15f722a.
--------------------------------------------------------------------------------
================================================================================
gcab-1.1-3.fc28 (FEDORA-2018-a2e46e0cf8)
Cabinet file library and tool
--------------------------------------------------------------------------------
Update Information:
gcab may extract garbage when the cabinet file use "rewinding" offsets, which
may be eventually problematic for programs like fwupd if the cabinet wasn't well
tested.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 2 2018 Marc-Andr�� Lureau <marcandre.lureau(a)redhat.com> - 1.1-3
- fix 'rewind' regression rhbz#1608301
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
golang-github-prometheus-common-0-0.15.20180702git38c53a9.fc28 (FEDORA-2018-838e7d0d95)
Go libraries shared across Prometheus components and libraries
--------------------------------------------------------------------------------
Update Information:
Temporarily remove the promlog due to missing
github.com/go-kit/kit dependency
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 10 2018 Jan Chaloupka <jchaloup(a)redhat.com> - 0-0.15.git38c53a9
- Temporarily remove the promlog due to missing
github.com/go-kit/kit dependency
resolves: #1599386
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1599386 - Unable to install package due to missing dependency
https://bugzilla.redhat.com/show_bug.cgi?id=1599386
--------------------------------------------------------------------------------
================================================================================
groonga-8.0.5-1.fc28 (FEDORA-2018-9f1796681c)
An Embeddable Fulltext Search Engine
--------------------------------------------------------------------------------
Update Information:
new upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 3 2018 Kentaro Hayashi <hayashi(a)clear-code.com>
- new upstream release
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 8.0.3-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1583644 - groonga-8.0.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1583644
--------------------------------------------------------------------------------
================================================================================
i2c-tools-4.0-10.fc28 (FEDORA-2018-5b8d94eef2)
A heterogeneous set of I2C tools for Linux
--------------------------------------------------------------------------------
Update Information:
Add upstream patch fixing libi2c license headers ---- Corrected the License
tags
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 3 2018 Ond��ej Lyson��k <olysonek(a)redhat.com> - 4.0-10
- Add upstream patch fixing libi2c license headers
* Tue Jul 31 2018 Ond��ej Lyson��k <olysonek(a)redhat.com> - 4.0-9
- Corrected the License tags
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.0-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Fri Jun 29 2018 Adam Jackson <ajax(a)redhat.com> - 4.0-7
- Use ldconfig scriptlets
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 4.0-6
- Rebuilt for Python 3.7
--------------------------------------------------------------------------------
================================================================================
icaro-1.0.9-2.fc28 (FEDORA-2018-ba4d91cd86)
Robotic Educational Project
--------------------------------------------------------------------------------
Update Information:
Changes to Apicaro to improve stability.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 1 2018 Omar Berroteran <omarberroteranlkf(a)gmail.com> - 1.0.9
- Changes to Apicaro to improve stability.
- Changes all uDev to icaro.rules
- Add new Blocks
- Add Samples
- Remove Obsolete scritplets
- Changes Tortucaro
- Bump to the new upstream version (April 10, 2017)
- rebuilt
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.8-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1226689 - icaro udev rules should be moved to /usr/lib/udev/rules.d
https://bugzilla.redhat.com/show_bug.cgi?id=1226689
[ 2 ] Bug #1604354 - icaro: FTBFS in Fedora rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1604354
--------------------------------------------------------------------------------
================================================================================
java-gnome-4.1.3-18.fc28 (FEDORA-2018-cb375a01a5)
Java GNOME bindings
--------------------------------------------------------------------------------
Update Information:
Rebuild for F28
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 31 2018 Alexander Bostr��m <abo(a)root.snowtree.se> - 4.1.3-18
- Add perl build requirement
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.1.3-17
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Thu Mar 15 2018 Iryna Shcherbina <ishcherb(a)redhat.com> - 4.1.3-16
- Update Python 2 dependency declarations to new packaging standards
(See
https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.1.3-15
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Wed Aug 2 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.1.3-14
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.1.3-13
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1555905 - java-gnome: FTBFS in F28
https://bugzilla.redhat.com/show_bug.cgi?id=1555905
--------------------------------------------------------------------------------
================================================================================
knot-resolver-2.4.1-1.fc28 (FEDORA-2018-b7d774a7c1)
Caching full DNS Resolver
--------------------------------------------------------------------------------
Update Information:
Knot Resolver 2.4.1 (2018-08-02) ================================ Security
-------- - fix CVE-2018-10920: Improper input validation bug in DNS resolver
component (security!7, security!9) Bugfixes -------- - cache: fix TTL
overflow in packet due to min_ttl (#388, security!8) - TLS session resumption:
avoid bad scheduling of rotation (#385) - HTTP module: fix a regression in 2.4.0
which broke custom certs (!632) - cache: NSEC3 negative cache even without NS
record (#384) This fixes lower hit rate in NSEC3 zones (since 2.4.0). - minor
TCP and TLS fixes (!623, !624, !626)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 2 2018 Tomas Krizek <tomas.krizek(a)nic.cz> - 2.4.1-1
Knot Resolver 2.4.1 (2018-08-02)
================================
Security
--------
- fix CVE-2018-10920: Improper input validation bug in DNS resolver component
(security!7, security!9)
Bugfixes
--------
- cache: fix TTL overflow in packet due to min_ttl (#388, security!8)
- TLS session resumption: avoid bad scheduling of rotation (#385)
- HTTP module: fix a regression in 2.4.0 which broke custom certs (!632)
- cache: NSEC3 negative cache even without NS record (#384)
This fixes lower hit rate in NSEC3 zones (since 2.4.0).
- minor TCP and TLS fixes (!623, !624, !626)
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.4.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1610951 - CVE-2018-10920 knot-resolver: Improper input validation bug in DNS
resolver component
https://bugzilla.redhat.com/show_bug.cgi?id=1610951
--------------------------------------------------------------------------------
================================================================================
libcgroup-0.41-20.fc28 (FEDORA-2018-f6adf1cb62)
Library to control and monitor control groups
--------------------------------------------------------------------------------
Update Information:
Fix for **CVE-2018-14348**.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 2 2018 Nikola Forr�� <nforro(a)redhat.com> - 0.41-20
- resolves: #1611121
fix CVE-2018-14348
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.41-19
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Thu Jun 28 2018 Nikola Forr�� <nforro(a)redhat.com> - 0.41-18
- remove ldconfig scriptlets
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1611121 - CVE-2018-14348 libcgroup: cgrulesengd creates log files with
insecure permissions [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1611121
--------------------------------------------------------------------------------
================================================================================
libxml2-2.9.8-4.fc28 (FEDORA-2018-3b782350ff)
Library providing XML and HTML support
--------------------------------------------------------------------------------
Update Information:
Fix few CVEs
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 2 2018 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 2.9.8-4
- Backport patches from upstream
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.9.8-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 2.9.8-2
- Rebuilt for Python 3.7
* Tue Apr 3 2018 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 2.9.8-1
- Update to 2.9.8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1595986 - CVE-2018-14404 libxml2: NULL pointer dereference in
xpath.c:xmlXPathCompOpEval() can allow attackers to cause a denial of service
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1595986
[ 2 ] Bug #1565321 - CVE-2018-9251 libxml2: infinite loop in xz_decomp function in
xzlib.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1565321
--------------------------------------------------------------------------------
================================================================================
man-pages-4.15-3.fc28 (FEDORA-2018-236a0a8e67)
Linux kernel and C library user-space interface documentation
--------------------------------------------------------------------------------
Update Information:
Removed man pages deprecated by `libxcrypt`.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 3 2018 Nikola Forr�� <nforro(a)redhat.com> - 4.15-3
- remove man pages deprecated by libxcrypt
resolves #1610307
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.15-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1610307 - Wrong crypt(3) manual page installed
https://bugzilla.redhat.com/show_bug.cgi?id=1610307
--------------------------------------------------------------------------------
================================================================================
msitools-0.98-1.fc28 (FEDORA-2018-ab2cb1e736)
Windows Installer tools
--------------------------------------------------------------------------------
Update Information:
Update to 0.98
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 2 2018 Victor Toso <victortoso(a)redhat.com> - 0.98-1
- Update to 0.98
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.97-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1609241 - wxi files contain references to many non-existant files
https://bugzilla.redhat.com/show_bug.cgi?id=1609241
--------------------------------------------------------------------------------
================================================================================
open-vm-tools-10.3.0-1.fc28 (FEDORA-2018-8a0c5f9d35)
Open Virtual Machine Tools for virtual machines hosted on VMware
--------------------------------------------------------------------------------
Update Information:
Package new upstream version open-vm-tools-10.3.0-8931395.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 2 2018 Ravindra Kumar <ravindrakumar(a)vmware.com> - 10.3.0-1
- Package new upstream version open-vm-tools-10.3.0-8931395.
- Updated cloud-init.patch for 10.3.0.
- Removed use-tirpc.patch which is no longer needed.
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 10.2.5-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
php-symfony4-4.0.14-1.fc28 (FEDORA-2018-732f45d43e)
Symfony PHP framework (version 4)
--------------------------------------------------------------------------------
Update Information:
## 4.0.14 (2018-08-01) * security #cve-2018-14774 [HttpKernel] fix trusted
headers management in HttpCache and InlineFragmentRenderer (nicolas-grekas) *
security #cve-2018-14773 [HttpFoundation] Remove support for legacy and risky
HTTP headers (nicolas-grekas) * bug #28003 [HttpKernel] Fixes invalid
REMOTE_ADDR in inline subrequest when configuring trusted proxy with subnet
(netiul) * bug #28007 [FrameworkBundle] fixed guard event names for transitions
(destillat) * bug #28045 [HttpFoundation] Fix Cookie::isCleared (ro0NL) * bug
#28080 [HttpFoundation] fixed using _method parameter with invalid type
(Phobetor) * bug #28052 [HttpKernel] Fix merging bindings for controllers'
locators (nicolas-grekas) ## 4.0.13 (2018-07-23) * bug #28005 [HttpKernel]
Fixed templateExists on parse error of the template name (yceruto) * bug #27997
Serbo-Croatian has Serbian plural rule (kylekatarnls) * bug #26193 Fix false-
positive deprecation notices for TranslationLoader and WriteCheckSessionHandler
(iquito) * bug #27941 [WebProfilerBundle] Fixed icon alignment issue using
Bootstrap 4.1.2 (jmsche) * bug #27937 [HttpFoundation] reset callback on
StreamedResponse when setNotModified() is called (rubencm) * bug #27927
[HttpFoundation] Suppress side effects in 'get' and 'has' methods of
NamespacedAttributeBag (webnet-fr) * bug #27923 [Form/Profiler] Massively
reducing memory footprint of form profiling pages... (VincentChalnot) * bug
#27918 [Console] correctly return parameter's default value on "--"
(seschwar)
* bug #27904 [Filesystem] fix lock file permissions (fritzmg) * bug #27903
[Lock] fix lock file permissions (fritzmg) * bug #27889 [Form] Replace
.initialism with .text-uppercase. (vudaltsov) * bug #27902 Fix the detection of
the Process new argument (stof) * bug #27885 [HttpFoundation] don't encode
cookie name for BC (nicolas-grekas) * bug #27782 [DI] Fix dumping ignore-on-
uninitialized references to synthetic services (nicolas-grekas) * bug #27435
[OptionResolver] resolve arrays (Doctrs) * bug #27728 [TwigBridge] Fix missing
path and separators in loader paths list on debug:twig output (yceruto) * bug
#27837 [PropertyInfo] Fix dock block lookup fallback loop (DerManoMann) * bug
#27758 [WebProfilerBundle] Prevent toolbar links color override by css (alcalyn)
* bug #27847 [Security] Fix accepting null as $uidKey in LdapUserProvider
(louhde) * bug #27834 [DI] Don't show internal service id on binding errors
(nicolas-grekas) * bug #27831 Check for Hyper terminal on all operating
systems. (azjezz) * bug #27794 Add color support for Hyper terminal . (azjezz)
* bug #27809 [HttpFoundation] Fix tests: new message for status 425 (dunglas) *
bug #27618 [PropertyInfo] added handling of nullable types in PhpDoc (oxan) *
bug #27659 [HttpKernel] Make AbstractTestSessionListener compatible with
CookieClearingLogoutHandler (thewilkybarkid) * bug #27752 [Cache] provider does
not respect option maxIdLength with versioning enabled (Constantine Shtompel) *
bug #27776 [ProxyManagerBridge] Fix support of private services (bis) (nicolas-
grekas) * bug #27714 [HttpFoundation] fix session tracking counter (nicolas-
grekas, dmaicher) * bug #27747 [HttpFoundation] fix registration of session
proxies (nicolas-grekas) * bug #27722 Redesign the Debug error page in prod
(javiereguiluz) * bug #27716 [DI] fix dumping deprecated service in yaml
(nicolas-grekas) ## 4.0.12 (2018-06-25) * bug #27626 [TwigBundle][DX] Only
add the Twig WebLinkExtension if the WebLink component is enabled
(thewilkybarkid) * bug #27701 [SecurityBundle] Dont throw if
"security.http_utils" is not found (nicolas-grekas) * bug #27690 [DI] Resolve
env placeholder in logs (ro0NL) * bug #26534 allow_extra_attributes does not
throw an exception as documented (deviantintegral) * bug #27668 [Lock] use 'r+'
for fopen (fixes issue on Solaris) (fritzmg) * bug #27669 [Filesystem] fix file
lock on SunOS (fritzmg) * bug #27662 [HttpKernel] fix handling of nested Error
instances (xabbuh) * bug #26845 [Config] Fixing GlobResource when inside phar
archive (vworldat) * bug #27382 [Form] Fix error when rendering a
DateIntervalType form with exactly 0 weeks (krixon) * bug #27309 Fix surrogate
not using original request (Toflar) * bug #27467 [HttpKernel] fix session
tracking in surrogate master requests (nicolas-grekas) * bug #27630
[Validator][Form] Remove BOM in some xlf files (gautierderuette) * bug #27596
[Framework][Workflow] Added support for interfaces (vudaltsov) * bug #27593
[ProxyManagerBridge] Fixed support of private services (nicolas-grekas) * bug
#27591 [VarDumper] Fix dumping ArrayObject and ArrayIterator instances (nicolas-
grekas) * bug #27581 Fix bad method call with guard authentication + session
migration (weaverryan) * bug #27576 [Cache] Fix expiry comparisons in array-
based pools (nicolas-grekas) * bug #27556 Avoiding session migration for
stateless firewall UsernamePasswordJsonAuthenticationListener (weaverryan) *
bug #27452 Avoid migration on stateless firewalls (weaverryan) * bug #27568
[DI] Deduplicate generated proxy classes (nicolas-grekas) * bug #27326
[Serializer] deserialize from xml: Fix a collection that contains the only one
element (webnet-fr) * bug #27567 [PhpUnitBridge] Fix error on some Windows OS
(Nsbx) * bug #27357 [Lock] Remove released semaphore (jderusse) * bug #27416
TagAwareAdapter over non-binary memcached connections corrupts memcache (Aleksey
Prilipko) * bug #27514 [Debug] Pass previous exception to FatalErrorException
(pmontoya) * bug #27516 Revert "bug #26138 [HttpKernel] Catch HttpExceptions
when templating is not installed (cilefen)" (nicolas-grekas) * bug #27318
[Cache] memcache connect should not add duplicate entries on sequential calls
(Aleksey Prilipko) * bug #27389 [Serializer] Fix serializer tries to
denormalize null values on nullable properties (ogizanagi) * bug #27272
[FrameworkBundle] Change priority of AddConsoleCommandPass to
TYPE_BEFORE_REMOVING (upyx) * bug #27396 [HttpKernel] fix registering IDE links
(nicolas-grekas) * bug #26973 [HttpKernel] Set first trusted proxy as
REMOTE_ADDR in InlineFragmentRenderer. (kmadejski) * bug #27303 [Process]
Consider "executable" suffixes first on Windows (sanmai) * bug #27297
Triggering RememberMe's loginFail() when token cannot be created (weaverryan) *
bug #27344 [HttpKernel] reset kernel start time on reboot (kiler129) * bug
#27365 [Serializer] Check the value of enable_max_depth if defined (dunglas) *
bug #27358 [PhpUnitBridge] silence some stderr outputs (ostrolucky) * bug
#27366 [DI] never inline lazy services (nicolas-grekas)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 2 2018 Shawn Iwinski <shawn(a)iwin.ski> - 4.0.14-1
- Update to 4.0.14 (CVE-2018-14773 / CVE-2018-14774)
- Add conflict php-composer(phpdocumentor/type-resolver) < 0.3.0
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.0.11-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
php-zendframework-zend-diactoros-1.8.4-1.fc28 (FEDORA-2018-4a606489ae)
PSR HTTP Message implementations
--------------------------------------------------------------------------------
Update Information:
## 1.8.4 - 2018-08-01 ### Added - Nothing. ### Changed - This release
modifies how `ServerRequestFactory` marshals the request URI. In prior
releases, we would attempt to inspect the `X-Rewrite-Url` and `X-Original-Url`
headers, using their values, if present. These headers are issued by the
ISAPI_Rewrite module for IIS (developed by HeliconTech). However, we have no
way of guaranteeing that the module is what issued the headers, making it an
unreliable source for discovering the URI. As such, we have removed this
feature in this release of Diactoros. If you are developing a middleware
application, you can mimic the functionality via middleware as follows: ```
use Psr\Http\Message\ResponseInterface; use
Psr\Http\Message\ServerRequestInterface; use
Psr\Http\Server\RequestHandlerInterface; use Zend\Diactoros\Uri; public
function process(ServerRequestInterface $request, RequestHandlerInterface
$handler) : ResponseInterface { $requestUri = null;
$httpXRewriteUrl = $request->getHeaderLine('X-Rewrite-Url'); if
($httpXRewriteUrl !== null) { $requestUri = $httpXRewriteUrl; }
$httpXOriginalUrl = $request->getHeaderLine('X-Original-Url'); if
($httpXOriginalUrl !== null) { $requestUri = $httpXOriginalUrl;
} if ($requestUri !== null) { $request = $request->withUri(new
Uri($requestUri)); } return $handler->handle($request); } ```
If you use middleware such as the above, make sure you also instruct your web
server to strip any incoming headers of the same name so that you can
guarantee they are issued by the ISAPI_Rewrite module. ### Deprecated -
Nothing. ### Removed - Nothing. ### Fixed - Nothing. ## 1.8.3 - 2018-07-24
### Added - Nothing. ### Changed - Nothing. ### Deprecated - Nothing. ###
Removed - Nothing. ### Fixed - [#321](https://github.com/zendframework/zend-
diactoros/pull/321) updates the logic in `Uri::withPort()` to ensure that it
checks that the value provided is either an integer or a string integer, as
only those values may be cast to integer without data loss. -
[#320](https://github.com/zendframework/zend-diactoros/pull/320) adds checking
within `Response` to ensure that the provided reason phrase is a string; an
`InvalidArgumentException` is now raised if it is not. This change ensures the
class adheres strictly to the PSR-7 specification. -
[#319](https://github.com/zendframework/zend-diactoros/pull/319) provides a fix
to `Zend\Diactoros\Response` that ensures that the status code returned is
_always_ an integer (and never a string containing an integer), thus ensuring
it strictly adheres to the PSR-7 specification. ## 1.8.2 - 2018-07-19 ###
Added - Nothing. ### Changed - Nothing. ### Deprecated - Nothing. ###
Removed - Nothing. ### Fixed - [#318](https://github.com/zendframework/zend-
diactoros/pull/318) fixes the logic for discovering whether an HTTPS scheme is
in play to be case insensitive when comparing header and SAPI values, ensuring
no false negative lookups occur. - [#314](https://github.com/zendframework
/zend-diactoros/pull/314) modifies error handling around opening a file resource
within `Zend\Diactoros\Stream::setStream()` to no longer use the second
argument to `set_error_handler()`, and instead check the error type in the
handler itself; this fixes an issue when the handler is nested inside another
error handler, which currently has buggy behavior within the PHP engine. ##
1.8.1 - 2018-07-09 ### Added - Nothing. ### Changed -
[#313](https://github.com/zendframework/zend-diactoros/pull/313) changes the
reason phrase associated with the status code 425 to "Too Early",
corresponding to a new definition of the code as specified by the IANA. ###
Deprecated - Nothing. ### Removed - Nothing. ### Fixed -
[#312](https://github.com/zendframework/zend-diactoros/pull/312) fixes how the
`normalizeUploadedFiles()` utility function handles nested trees of uploaded
files, ensuring it detects them properly. ## 1.8.0 - 2018-06-27 ### Added -
[#307](https://github.com/zendframework/zend-diactoros/pull/307) adds the
following functions under the `Zend\Diactoros` namespace, each of which may be
used to derive artifacts from SAPI supergloabls for the purposes of generating
a `ServerRequest` instance: - `normalizeServer(array $server, callable
$apacheRequestHeaderCallback = null) : array` (main purpose is to aggregate
the `Authorization` header in the SAPI params when under Apache) -
`marshalProtocolVersionFromSapi(array $server) : string` -
`marshalMethodFromSapi(array $server) : string` - `marshalUriFromSapi(array
$server, array $headers) : Uri` - `marshalHeadersFromSapi(array $server) :
array` - `parseCookieHeader(string $header) : array` -
`createUploadedFile(array $spec) : UploadedFile` (creates the instance from
a normal `$_FILES` entry) - `normalizeUploadedFiles(array $files) :
UploadedFileInterface[]` (traverses a potentially nested array of uploaded
file instances and/or `$_FILES` entries, including those aggregated under
mod_php, php-fpm, and php-cgi in order to create a flat array of
`UploadedFileInterface` instances to use in a request) ### Changed -
Nothing. ### Deprecated - [#307](https://github.com/zendframework/zend-
diactoros/pull/307) deprecates `ServerRequestFactory::normalizeServer()`; the
method is no longer used internally, and users should instead use
`Zend\Diactoros\normalizeServer()`, to which it proxies. -
[#307](https://github.com/zendframework/zend-diactoros/pull/307) deprecates
`ServerRequestFactory::marshalHeaders()`; the method is no longer used
internally, and users should instead use
`Zend\Diactoros\marshalHeadersFromSapi()`, to which it proxies. -
[#307](https://github.com/zendframework/zend-diactoros/pull/307) deprecates
`ServerRequestFactory::marshalUriFromServer()`; the method is no longer used
internally. Users should use `marshalUriFromSapi()` instead. -
[#307](https://github.com/zendframework/zend-diactoros/pull/307) deprecates
`ServerRequestFactory::marshalRequestUri()`. the method is no longer used
internally, and currently proxies to `marshalUriFromSapi()`, pulling the
discovered path from the `Uri` instance returned by that function. Users
should use `marshalUriFromSapi()` instead. -
[#307](https://github.com/zendframework/zend-diactoros/pull/307) deprecates
`ServerRequestFactory::marshalHostAndPortFromHeaders()`; the method is no
longer used internally, and currently proxies to `marshalUriFromSapi()`,
pulling the discovered host and port from the `Uri` instance returned by that
function. Users should use `marshalUriFromSapi()` instead. -
[#307](https://github.com/zendframework/zend-diactoros/pull/307) deprecates
`ServerRequestFactory::getHeader()`; the method is no longer used internally.
Users should copy and paste the functionality into their own applications if
needed, or rely on headers from a fully-populated `Uri` instance instead. -
[#307](https://github.com/zendframework/zend-diactoros/pull/307) deprecates
`ServerRequestFactory::stripQueryString()`; the method is no longer used
internally, and users can mimic the functionality via the expression `$path =
explode('?', $path, 2)[0];`. - [#307](https://github.com/zendframework/zend-
diactoros/pull/307) deprecates `ServerRequestFactory::normalizeFiles()`; the
functionality is no longer used internally, and users can use
`normalizeUploadedFiles()` as a replacement. -
[#303](https://github.com/zendframework/zend-diactoros/pull/303) deprecates
`Zend\Diactoros\Response\EmitterInterface` and its various implementations.
These are now provided via the [zendframework/zend-
httphandlerrunner](https://docs.zendframework.com/zend-httphandlerrunner)
package as 1:1 substitutions. - [#303](https://github.com/zendframework/zend-
diactoros/pull/303) deprecates the `Zend\Diactoros\Server` class. Users are
directed to the `RequestHandlerRunner` class from the [zendframework/zend-
httphandlerrunner](https://docs.zendframework.com/zend-httphandlerrunner)
package as an alternative. ### Removed - Nothing. ### Fixed - Nothing.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 2 2018 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 1.8.4-1
- Update to 1.8.4 (RHBZ #1504401 / ZF2018-01 / CVE-2018-14773 / CVE-2018-14774)
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.7.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1504401 - php-zendframework-zend-diactoros-1.8.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1504401
--------------------------------------------------------------------------------
================================================================================
php-zendframework-zend-feed-2.10.3-1.fc28 (FEDORA-2018-7da5983771)
Zend Framework Feed component
--------------------------------------------------------------------------------
Update Information:
## 2.10.3 - 2018-08-01 ### Added - Nothing. ### Changed - This release
modifies how `Zend\Feed\Pubsubhubbub\AbstractCallback::_detectCallbackUrl()`
marshals the request URI. In prior releases, we would attempt to inspect the
`X-Rewrite-Url` and `X-Original-Url` headers, using their values, if present.
These headers are issued by the ISAPI_Rewrite module for IIS (developed by
HeliconTech). However, we have no way of guaranteeing that the module is what
issued the headers, making it an unreliable source for discovering the URI. As
such, we have removed this feature in this release. The method is not called
internally. If you are calling the method from your own extension and need
support for ISAPI_Rewrite, you will need to override the method as follows:
``` protected function _detectCallbackUrl() { $callbackUrl = null;
if (isset($_SERVER['HTTP_X_REWRITE_URL'])) { $callbackUrl =
$_SERVER['HTTP_X_REWRITE_URL']; } if
(isset($_SERVER['HTTP_X_ORIGINAL_URL'])) { $callbackUrl =
$_SERVER['HTTP_X_ORIGINAL_URL']; } return $callbackUrl ?:
parent::__detectCallbackUrl(); } ``` If you use an approach such as the
above, make sure you also instruct your web server to strip any incoming
headers of the same name so that you can guarantee they are issued by the
ISAPI_Rewrite module. ### Deprecated - Nothing. ### Removed - Nothing. ###
Fixed - Nothing.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 2 2018 Shawn Iwinski <shawn(a)iwin.ski> - 2.10.3-1
- Update to 2.10.3 (ZF2018-01)
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.10.2-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
php-zendframework-zend-http-2.8.1-1.fc28 (FEDORA-2018-71e9650fa9)
Zend Framework Http component
--------------------------------------------------------------------------------
Update Information:
## 2.8.1 - 2018-08-01 ### Added - Nothing. ### Changed - This release
modifies how `Zend\Http\PhpEnvironment\Request` marshals the request URI. In
prior releases, we would attempt to inspect the `X-Rewrite-Url` and `X
-Original-Url` headers, using their values, if present. These headers are
issued by the ISAPI_Rewrite module for IIS (developed by HeliconTech).
However, we have no way of guaranteeing that the module is what issued the
headers, making it an unreliable source for discovering the URI. As such, we
have removed this feature in this release of zend-http. If you are developing
a zend-mvc application, you can mimic the functionality by adding a bootstrap
listener like the following: ``` public function onBootstrap(MvcEvent
$mvcEvent) { $request = $mvcEvent->getRequest(); $requestUri =
null; $httpXRewriteUrl = $request->getHeader('X-Rewrite-Url'); if
($httpXRewriteUrl) { $requestUri = $httpXRewriteUrl->getFieldValue();
} $httpXOriginalUrl = $request->getHeader('X-Original-Url'); if
($httpXOriginalUrl) { $requestUri =
$httpXOriginalUrl->getFieldValue(); } if ($requestUri) {
$request->setUri($requestUri) } } ``` If you use a listener such as
the above, make sure you also instruct your web server to strip any incoming
headers of the same name so that you can guarantee they are issued by the
ISAPI_Rewrite module. ### Deprecated - Nothing. ### Removed - Nothing. ###
Fixed - Nothing.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 2 2018 Shawn Iwinski <shawn(a)iwin.ski> - 2.8.1-1
- Update to 2.8.1 (ZF2018-01)
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.8.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
plasma-browser-integration-5.13.3-2.fc28 (FEDORA-2018-7fc9c6c251)
plasma-browser-integration provides components necessary to integrate browsers into the
Plasma Desktop
--------------------------------------------------------------------------------
Update Information:
A new package as part of plasma-5.13 releases. mentioned on
https://www.kde.org/announcements/plasma-5.13.0.php
--------------------------------------------------------------------------------
================================================================================
purple-discord-0-20.20180628git84fe764.fc28 (FEDORA-2018-7359c7d3cc)
Discord plugin for libpurple
--------------------------------------------------------------------------------
Update Information:
Updated purple plugins to latest snapshots.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 3 2018 Vitaly Zaitsev <vitaly(a)easycoding.org> - 0-20.20180628git84fe764
- Updated to latest snapshot.
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
0-19.20180515gitb895521
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
purple-hangouts-0-60.20180731hge4ccf26.fc28 (FEDORA-2018-7359c7d3cc)
Hangouts plugin for libpurple
--------------------------------------------------------------------------------
Update Information:
Updated purple plugins to latest snapshots.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 3 2018 Vitaly Zaitsev <vitaly(a)easycoding.org> - 1:0-60.20180731hge4ccf26
- Updated to latest snapshot.
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
1:0-59.20180419hg9d008f2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
purple-libsteam-1.6.1-23.20180801gitb16a636.fc28 (FEDORA-2018-7359c7d3cc)
Steam plugin for Pidgin/Adium/libpurple
--------------------------------------------------------------------------------
Update Information:
Updated purple plugins to latest snapshots.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 3 2018 Vitaly Zaitsev <vitaly(a)easycoding.org> -
1.6.1-23.20180801gitb16a636
- Updated to latest snapshot.
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
1.6.1-22.20180514git4a09c08
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
purple-skypeweb-1.5-3.20180720git2290013.fc28 (FEDORA-2018-7359c7d3cc)
Adds support for Skype to Pidgin
--------------------------------------------------------------------------------
Update Information:
Updated purple plugins to latest snapshots.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 3 2018 Vitaly Zaitsev <vitaly(a)easycoding.org> - 1.5-3.20180720git2290013
- Updated to latest snapshot.
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
1.5-2.20180525gitcf65095
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
python-moksha-hub-1.5.11-1.fc28 (FEDORA-2018-e8433d16be)
Hub components for Moksha
--------------------------------------------------------------------------------
Update Information:
Latest upstream.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 2 2018 Ralph Bean <rbean(a)redhat.com> - 1.5.11-1
- new version
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5.10-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
python-pycryptodomex-3.6.4-1.fc28 (FEDORA-2018-158926a911)
A self-contained cryptographic library for Python
--------------------------------------------------------------------------------
Update Information:
# 3.6.4 (10 July 2018) New features ------------ * Build Python 3.7 wheels on
Linux, Windows and Mac. Resolved issues --------------- * GH#178: Rename
``_cpuid`` module to make upgrades more robust. * More meaningful exceptions in
case of mismatch in IV length (CBC/OFB/CFB modes). * Fix compilation issues on
Solaris 10/11. # 3.6.3 (21 June 2018) Resolved issues --------------- *
GH#175: Fixed incorrect results for CTR encryption/decryption with more than 8
blocks.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 3 2018 Mohamed El Morabity <melmorabity(a)fedoraproject.org> - 3.6.4-1
- Update to 3.6.4
* Tue Jun 19 2018 Mohamed El Morabity <melmorabity(a)fedoraproject.org> - 3.6.2-1
- Update to 3.6.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1592840 - python-pycryptodomex-3.6.4x is available
https://bugzilla.redhat.com/show_bug.cgi?id=1592840
--------------------------------------------------------------------------------
================================================================================
python-pytelegrambotapi-3.6.4-1.fc28 (FEDORA-2018-200f3787bd)
Python Telegram bot API
--------------------------------------------------------------------------------
Update Information:
Updated to upstream release 3.6.4.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 3 2018 Vitaly Zaitsev <vitaly(a)easycoding.org> - 3.6.4-1
- Updated to version 3.6.4.
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.6.3-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Mon Jul 2 2018 Vitaly Zaitsev <vitaly(a)easycoding.org> - 3.6.3-3
- Fixed build under Python 3.7.
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 3.6.3-2
- Rebuilt for Python 3.7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1611592 - python-pytelegrambotapi-3.6.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1611592
--------------------------------------------------------------------------------
================================================================================
python2-django1.11-1.11.15-2.fc28 (FEDORA-2018-0c85690ba7)
Version 1.11 LTS of Django, a high-level Python Web framework
--------------------------------------------------------------------------------
Update Information:
Update to 1.11.15 security release (CVE-2018-14574) This fixes an open redirect
possibility in CommonMiddleware. Release notes:
https://docs.djangoproject.com/en/2.0/releases/1.11.15/
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 3 2018 Petr Viktorin <pviktori(a)redhat.com> - 1.11.15-1
- Update to 1.11.15 security release (CVE-2018-14574)
CVE-2018-14574: Open redirect possibility in CommonMiddleware
https://docs.djangoproject.com/en/2.0/releases/1.11.15/
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.11.14-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Mon Jun 4 2018 Petr Viktorin <pviktori(a)redhat.com> - 1.11.14-1
- update to 1.11.14, fixing a memory usage regression and a GIS bug
https://docs.djangoproject.com/en/2.0/releases/1.11.14/
--------------------------------------------------------------------------------
================================================================================
rpkg-util-2.3-1.fc28 (FEDORA-2018-097e6da50b)
RPM packaging utility
--------------------------------------------------------------------------------
Update Information:
- tar >= 1.28 condition no longer needed as we dropped --exclude-vcs-ignores -
instead of tar --exclude-vcs-ignores, get the exclude list by git check-ignore -
fix rpkg srpm completion - switch to git_dir_* macros - fix no tagname given for
rpkg tag -d - fix for new pyrpkg - improve git_archive logging info - print help
if no command is given - add comments to the example config file in man pages -
fix name suffixing for git_cwd and git_dir macros on top-level dir - follow
redirects when downloading sources - add __pycache__ into .gitignore - zero
umask before creating /tmp/rpkg, ad. #4a4311a - add log info about path being
packed into git_pack - return back python2 support - create /tmp/rpkg as
writeable by all with sticky bit set - explicitly mention needed version of git
and tar in the spec file - pg#8 rpkg error when EDITOR="gvim -f"
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 2 2018 clime <clime(a)redhat.com> 2.3-1
- tar >= 1.28 condition no longer needed as we dropped --exclude-vcs-ignores
- instead of tar --exclude-vcs-ignores, get the exclude list by git check-ignore
- fix rpkg srpm completion
- switch to git_dir_* macros
- fix no tagname given for rpkg tag -d
- fix for new pyrpkg
- improve git_archive logging info
- print help if no command is given
- add comments to the example config file in man pages
- fix name suffixing for git_cwd and git_dir macros on top-level dir
- follow redirects when downloading sources
- add __pycache__ into .gitignore
- zero umask before creating /tmp/rpkg, ad. #4a4311a
- add log info about path being packed into git_pack
- return back python2 support
- create /tmp/rpkg as writeable by all with sticky bit set
- explicitly mention needed version of git and tar in the spec file
- #8 rpkg error when EDITOR="gvim -f"
--------------------------------------------------------------------------------
================================================================================
s3cmd-2.0.2-1.fc28 (FEDORA-2018-aab24743c0)
Tool for accessing Amazon Simple Storage Service
--------------------------------------------------------------------------------
Update Information:
Update to 2.0.2
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 3 2018 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 2.0.2-1
- Update to 2.0.2
- Update URL
- Fixes in packaging
- Update License
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.1-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 2.0.1-3
- Rebuilt for Python 3.7
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1573526 - s3cmd 2.01 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1573526
[ 2 ] Bug #1601290 - s3cmd-2.0.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1601290
--------------------------------------------------------------------------------
================================================================================
scl-utils-2.0.2-7.fc28 (FEDORA-2018-d83f3160e4)
Utilities for alternative packaging
--------------------------------------------------------------------------------
Update Information:
Don't enforce modulefile ownership. This enables backward compatibility with
scl-utils 1.x.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 24 2018 V��t Ondruch <vondruch(a)redhat.com> - 1:2.0.2-7
- Don't enforce modulefile ownership.
--------------------------------------------------------------------------------
================================================================================
trac-1.2.3-1.fc28 (FEDORA-2018-f59fb14337)
Enhanced wiki and issue tracking system
--------------------------------------------------------------------------------
Update Information:
https://trac.edgewall.org/wiki/TracDev/ReleaseNotes/1.2#MaintenanceRelease
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 2 2018 Gwyn Ciesla <limburgher(a)gmail.com> - 1.2.3-1
- 1.2.3
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.2-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Fri Jul 6 2018 Felix Schwarz <fschwarz(a)fedoraproject.org> - 1.2.2-4
- use Python 2-specific macros to fix build in rawhide ("F29")
--------------------------------------------------------------------------------
================================================================================
ustl-2.7-1.fc28 (FEDORA-2018-eb9fc83684)
A size-optimized STL implementation
--------------------------------------------------------------------------------
Update Information:
v2.7 --- - Make vector resize take a second argument for fill value. - vector
dtor should not call dtors when linked. - exchange algo should be c++14 only. -
Add required explicit scoping for swap in pair and smart pointers. - Make swap
implementation shared with c++98. - Fix some warnings from -Weffc++. - Fix new
warnings and errors from gcc 8.1. - Add workaround for gcc 8.1 bug 85695. -
ifdef out _long4grain alignof spec on 32bit platforms. - Replace C-style casts
with C++-style casts. - Remove obsolete --without-mmx configure flag. v2.6 ---
- Fix erase cow sometimes truncating strings. - Fix hang in istringstream
read_number at end of stream. - Fix test failures new with gcc 7.2. - Fix
configure directory detection with new gcc. - Remove operator<< and
operator>>
templates for ustl types. - Add pkg-config file - Do not use memcpy in fallback
implementation of copy_n_fast. - Remove -march=native from default compiler
flags. - Add configure --with-native flag.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 2 2018 Denis Fateyev <denis(a)fateyev.com> - 2.7-1
- Update to 2.7 version
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.5-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.5-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1556523 - ustl: FTBFS in F28
https://bugzilla.redhat.com/show_bug.cgi?id=1556523
[ 2 ] Bug #1606625 - ustl: FTBFS in Fedora rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1606625
[ 3 ] Bug #1525748 - ustl-2.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1525748
--------------------------------------------------------------------------------
================================================================================
vagrant-openstack-provider-0.13.0-1.fc28 (FEDORA-2018-e7689aca65)
Vagrant plugin for OpenStack provider
--------------------------------------------------------------------------------
Update Information:
New upstream version 0.13.0
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 3 2018 Greg Hellings <greg.hellings(a)gmail.com> - 0.13.0-1
- New upstream version 0.13.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1610070 - vagrant-openstack-provider-0.13.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1610070
--------------------------------------------------------------------------------
================================================================================
wireless-regdb-2018.05.31-3.1.fc28 (FEDORA-2018-df72277989)
Regulatory database for 802.11 wireless networking
--------------------------------------------------------------------------------
Update Information:
Replace Obsoletes with Conflicts for desired installation behavior ---- Add
wireless-regdb package, intended to replace crda package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1607392 - insane provides/obsoletes (crda / wreless-tools)
https://bugzilla.redhat.com/show_bug.cgi?id=1607392
[ 2 ] Bug #1598921 - Review Request: wireless-regdb - Regulatory database for 802.11
wireless networking
https://bugzilla.redhat.com/show_bug.cgi?id=1598921
--------------------------------------------------------------------------------