The following Fedora 29 Security updates need testing:
Age URL
181
https://bodhi.fedoraproject.org/updates/FEDORA-2019-fa5843e0e1
asterisk-16.2.1-1.fc29
167
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c84f291592
WALinuxAgent-2.2.38-1.fc29
162
https://bodhi.fedoraproject.org/updates/FEDORA-2019-7528388823
chicken-5.0.0-2.fc29
122
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9839aded3f
python-gnupg-0.4.4-1.fc29
118
https://bodhi.fedoraproject.org/updates/FEDORA-2019-35cb5a4785
kubernetes-1.13.5-1.fc29
56
https://bodhi.fedoraproject.org/updates/FEDORA-2019-32f7cd9b66
dosbox-0.74.3-2.fc29
48
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3f5c670a8f
thunderbird-60.8.0-1.fc29
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-155e34df5a
pango-1.42.4-3.fc29
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-373574c5a1
firefox-68.0.2-1.fc29
10
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8eeb8f9d3f
wavpack-5.1.0-16.fc29
10
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d9a2c03662 cups-2.2.8-12.fc29
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-aabcb53ec6
clamav-0.101.4-1.fc29
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d0b1feb995
graphite2-1.3.13-1.fc29
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-5a947d8603
python-slixmpp-1.4.2-1.fc29
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-1f17485159
python-mitogen-0.2.8-1.fc29
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-7a0b45fdc4
nginx-1.16.1-1.fc29
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-5e4316109b
qt5-qtwebengine-5.12.4-5.fc29
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-96516ce0ac
community-mysql-8.0.17-2.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-113d27cb80
chromium-76.0.3809.132-1.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-2dc2b708c6
kernel-5.2.10-100.fc29 kernel-headers-5.2.10-100.fc29 kernel-tools-5.2.10-100.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-65db7ad6c7
golang-1.11.13-1.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e31c2f7d87
seamonkey-2.49.5-1.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c1dac1b3b8 lxc-3.0.4-1.fc29
lxcfs-3.0.4-1.fc29 python3-lxc-3.0.4-1.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-a457303ffc
rdesktop-1.8.6-1.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d04f66e595 bind-9.11.10-1.fc29
bind-dyndb-ldap-11.1-19.fc29 dhcp-4.3.6-34.fc29 dnsperf-2.3.2-1.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-80e5e20cf8
pdfresurrect-0.18-1.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-59d60bd1fa
dovecot-2.3.7.2-1.fc29
The following Fedora 29 Critical Path updates have yet to be approved:
Age URL
94
https://bodhi.fedoraproject.org/updates/FEDORA-2019-06a2d1c7fb
anaconda-29.24.7-3.fc29
92
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4cefd3161a
nfs-utils-2.3.3-4.rc2.fc29
78
https://bodhi.fedoraproject.org/updates/FEDORA-2019-37faa13746
fontconfig-2.13.1-8.fc29
65
https://bodhi.fedoraproject.org/updates/FEDORA-2019-583d9d5a56
mutter-3.30.2-3.fc29
51
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6f13c38d0d
python-urllib3-1.24.3-2.fc29
49
https://bodhi.fedoraproject.org/updates/FEDORA-2019-62e681b68b ipset-7.2-1.fc29
48
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3f5c670a8f
thunderbird-60.8.0-1.fc29
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-0376f70676 ethtool-5.2-1.fc29
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-373574c5a1
firefox-68.0.2-1.fc29
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8a3aa00d5e lorax-29.30-1.fc29
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-155e34df5a
pango-1.42.4-3.fc29
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d4b6ede072 dnf-4.2.5-4.fc29
dnf-plugins-extras-4.0.4-2.fc29 libdnf-0.31.0-6.fc29
11
https://bodhi.fedoraproject.org/updates/FEDORA-2019-2a4d354f9b lz4-1.9.1-1.fc29
10
https://bodhi.fedoraproject.org/updates/FEDORA-2019-7ac161b9d7 fedora-repos-29-6
10
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d9a2c03662 cups-2.2.8-12.fc29
10
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8eeb8f9d3f
wavpack-5.1.0-16.fc29
10
https://bodhi.fedoraproject.org/updates/FEDORA-2019-54815c6381
linux-firmware-20190815-101.fc29
8
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9de7632b6b bluez-5.50-4.fc29
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c85c9971a5
perl-5.28.2-434.fc29
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e8002fd7bf
perl-Pod-Perldoc-3.28.01-419.fc29
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-68005b454d
vim-8.1.1912-1.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8795529cd2
btrfs-progs-5.2.1-1.fc29
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d0b1feb995
graphite2-1.3.13-1.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c010b35eb6
rpm-4.14.2.1-3.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d04f66e595 bind-9.11.10-1.fc29
bind-dyndb-ldap-11.1-19.fc29 dhcp-4.3.6-34.fc29 dnsperf-2.3.2-1.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-29435c4ed5
samba-4.9.12-0.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-2dc2b708c6
kernel-5.2.10-100.fc29 kernel-headers-5.2.10-100.fc29 kernel-tools-5.2.10-100.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-f93fcb9fbd
pcre2-10.33-13.fc29
The following builds have been pushed to Fedora 29 updates-testing
R-3.6.1-1.fc29
R-rpm-macros-1.1.0-2.fc29
SDL-1.2.15-40.fc29
crudini-0.9.3-1.fc29
golang-github-tdewolff-parse-2.3.9-1.fc29
grafana-6.3.4-1.fc29
httpd-2.4.41-1.fc29
kernel-5.2.11-100.fc29
kernel-headers-5.2.11-100.fc29
kernel-tools-5.2.11-100.fc29
mod_md-2.0.8-3.fc29
perl-Locale-Codes-3.62-1.fc29
php-zendframework-zend-diactoros-1.8.7-1.fc29
python-airspeed-0.5.12-1.fc29
python-colcon-bash-0.4.0-1.fc29
python-colcon-core-0.4.0-1.fc29
python-colcon-output-0.2.5-1.fc29
python-colcon-package-selection-0.2.5-1.fc29
python-colcon-ros-0.3.12-1.fc29
python-colcon-test-result-0.3.6-1.fc29
python-colcon-zsh-0.4.0-1.fc29
python-wikitcms-2.4.3-1.fc29
rkward-0.7.0-9.fc29
roundcubemail-1.3.10-1.fc29
rpki-client-0.2.0-1.fc29
rpy-2.9.5-4.fc29
Details about builds:
================================================================================
R-3.6.1-1.fc29 (FEDORA-2019-32499f9021)
A language for data analysis and graphics
--------------------------------------------------------------------------------
Update Information:
Update R to 3.6.1. ---- Update R to 3.6.0. Rebuild lapack with --no-optimize-
sibling-calls to work around gfortran issues (Fedora 30+ only).
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 16 2019 Tom Callaway <spot(a)fedoraproject.org> - 3.6.1-1
- update to 3.6.1
* Sun Aug 11 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 3.6.0-5
- Remove unused and nonfunctional macros and helper script
* Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.6.0-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Sun Jul 21 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 3.6.0-3
- Add automated dependency generator to R-devel
- Add standard Provides for bundled libraries
* Thu Jun 13 2019 Tom Callaway <spot(a)fedoraproject.org> - 3.6.0-2
- use devtoolset toolchain to compile on el6/el7 for C++11 support
* Wed May 29 2019 Tom Callaway <spot(a)fedoraproject.org> - 3.6.0-1
- update to 3.6.0
- use --no-optimize-sibling-calls for gfortran to work around issues
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1744723 - R-devel requires R-rpm-macros
https://bugzilla.redhat.com/show_bug.cgi?id=1744723
[ 2 ] Bug #1727281 - R-3.6.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1727281
[ 3 ] Bug #1703495 - R-3.6.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1703495
--------------------------------------------------------------------------------
================================================================================
R-rpm-macros-1.1.0-2.fc29 (FEDORA-2019-32499f9021)
Macros to help produce R packages
--------------------------------------------------------------------------------
Update Information:
Update R to 3.6.1. ---- Update R to 3.6.0. Rebuild lapack with --no-optimize-
sibling-calls to work around gfortran issues (Fedora 30+ only).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1744723 - R-devel requires R-rpm-macros
https://bugzilla.redhat.com/show_bug.cgi?id=1744723
[ 2 ] Bug #1727281 - R-3.6.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1727281
[ 3 ] Bug #1703495 - R-3.6.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1703495
--------------------------------------------------------------------------------
================================================================================
SDL-1.2.15-40.fc29 (FEDORA-2019-e08f78d4a6)
A cross-platform multimedia library
--------------------------------------------------------------------------------
Update Information:
This release fixes a heap buffer over-read in BlitNtoN() function when
processing an invalid BMP image. It also updates a URL in the RPM metadata.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 30 2019 Petr Pisar <ppisar(a)redhat.com> - 1.2.15-40
- Fix CVE-2019-13616 (a heap buffer over-read in BlitNtoN) (bug #1747237)
* Fri Aug 2 2019 Petr Pisar <ppisar(a)redhat.com> - 1.2.15-39
- Fix Windows drivers broken with a patch for CVE-2019-7637 (bug #1677152)
- Update URL to use secured HTTP protocol
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1747237 - CVE-2019-13616 SDL: Heap-based buffer over-read in BlitNtoN in
video/SDL_blit_N.c
https://bugzilla.redhat.com/show_bug.cgi?id=1747237
--------------------------------------------------------------------------------
================================================================================
crudini-0.9.3-1.fc29 (FEDORA-2019-126c3443c1)
A utility for manipulating ini files
--------------------------------------------------------------------------------
Update Information:
Latest upstream: python 3 support
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 30 2019 P��draig Brady <P(a)draigBrady.com> - 0.9.3-1
- Latest upstream: python 3 support
* Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Wed Jun 26 2019 P��draig Brady <P(a)draigBrady.com> - 0.9-7
- Add missing test dependencies
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Mon Mar 26 2018 Iryna Shcherbina <ishcherb(a)redhat.com> - 0.9-4
- Update Python 2 dependency declarations to new packaging standards
(See
https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)
--------------------------------------------------------------------------------
================================================================================
golang-github-tdewolff-parse-2.3.9-1.fc29 (FEDORA-2019-d19da4979a)
Go parsers for web formats
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 30 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 2.3.9-1
- Update to latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1744849 - golang-github-tdewolff-parse-2.3.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1744849
--------------------------------------------------------------------------------
================================================================================
grafana-6.3.4-1.fc29 (FEDORA-2019-77d612eab4)
Metrics dashboard and graph editor
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2019-15043
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 30 2019 Mark Goodwin <mgoodwin(a)redhat.com> 6.3.4-1
- add patch for uaparser on 32bit systems
- update to latest upstream community sources, see CHANGELOG
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1746945 - CVE-2019-15043 grafana: incorrect access control in snapshot HTTP
API leads to denial of service
https://bugzilla.redhat.com/show_bug.cgi?id=1746945
--------------------------------------------------------------------------------
================================================================================
httpd-2.4.41-1.fc29 (FEDORA-2019-e00c65ec6f)
Apache HTTP Server
--------------------------------------------------------------------------------
Update Information:
This update includes the latest release of the Apache HTTP Server, version
`2.4.41`, fixing various security issues. Several major enhancements are also
included in this update: * `mod_md` is now packaged from upstream *github*
releases. * `mod_cgid` stderr handling has been improved See
http://www.apache.org/dist/httpd/CHANGES_2.4.41 for a full list of changes since
the previous release of `httpd`.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 15 2019 Joe Orton <jorton(a)redhat.com> - 2.4.41-1
- update to 2.4.41
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.4.39-13
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Tue Jul 23 2019 Joe Orton <jorton(a)redhat.com> - 2.4.39-12
- drop /var/lib/dav directory, since mod_dav_fs uses statedir
* Wed Jul 17 2019 Joe Orton <jorton(a)redhat.com> - 2.4.39-11
- mod_cgid: use fd passing to fix script stderr handling (#1591157)
* Mon Jul 8 2019 Joe Orton <jorton(a)redhat.com> - 2.4.39-10
- htpasswd: add SHA-256/512 support
- apachectl: restore -V/-v/-t support (#1727434)
* Fri Jun 21 2019 Joe Orton <jorton(a)redhat.com> - 2.4.39-9
- create instance-specific StateDir in httpd@.service, instance.conf
* Thu Jun 20 2019 Joe Orton <jorton(a)redhat.com> - 2.4.39-8
- remove superfluous ap_hack_ symbols from httpd binary
- more verbose %check section
* Thu Jun 13 2019 Lubos Uhliarik <luhliari(a)redhat.com> - 2.4.39-7
- remove bundled mod_md module
* Thu Jun 13 2019 Joe Orton <jorton(a)redhat.com> - 2.4.39-6
- mod_ssl: fix "httpd -L" (etc) before httpd-init.service runs
* Wed Jun 12 2019 Joe Orton <jorton(a)redhat.com> - 2.4.39-5
- fixes for StateDir directive (upstream r1857731, r1857731)
* Thu May 2 2019 Lubos Uhliarik <luhliari(a)redhat.com> - 2.4.39-4
- httpd dependency on initscripts is unspecified (#1705188)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1727434 - Fedora apachectl script behaves differently than authors design it
https://bugzilla.redhat.com/show_bug.cgi?id=1727434
[ 2 ] Bug #1743961 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1743961
[ 3 ] Bug #1743957 - CVE-2019-10092 httpd: limited cross-site scripting in mod_proxy
error page [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1743957
[ 4 ] Bug #1591157 - Unusable entries in error_log when event MPM is activated
https://bugzilla.redhat.com/show_bug.cgi?id=1591157
[ 5 ] Bug #1743997 - CVE-2019-10097 httpd: null-pointer dereference in mod_remoteip
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1743997
--------------------------------------------------------------------------------
================================================================================
kernel-5.2.11-100.fc29 (FEDORA-2019-97380355ae)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 5.2.11 stable kernel update contains a number of important fixes across the
tree.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 29 2019 Justin M. Forbes <jforbes(a)fedoraproject.org> - 5.2.11-100
- Linux v5.2.11
- Fix CVE-2019-15504 (rhbz 1746725 1746726)
- Fix CVE-2019-15505 (rhbz 1746732 1746734)
- Fix CVE-2019-15538 (rhbz 1746777 1746779)
* Wed Aug 28 2019 Justin M. Forbes <jforbes(a)fedoraproject.org>
- Fix mwifiex CVE-2019-14814 CVE-2019-14815 CVE-2019-14816
- (rhbz 1744130 1744137 1744149 1746566 1746567)
* Mon Aug 26 2019 Justin M. Forbes <jforbes(a)fedoraproject.org> - 5.2.10-100
- Linux v5.2.10
* Fri Aug 16 2019 Justin M. Forbes <jforbes(a)fedoraproject.org> - 5.2.9-100
- Linux v5.2.9
* Sat Aug 10 2019 Justin M. Forbes <jforbes(a)redhat.com> - 5.2.8-100
- Linux v5.2.8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1746777 - CVE-2019-15538 kernel: denial of service in in xfs_setattr_nonsize
in fs/xfs/xfs_iops.c
https://bugzilla.redhat.com/show_bug.cgi?id=1746777
[ 2 ] Bug #1746732 - CVE-2019-15505 kernel: out of bounds read in
drivers/media/usb/dvb-usb/technisat-usb2.c
https://bugzilla.redhat.com/show_bug.cgi?id=1746732
[ 3 ] Bug #1746725 - CVE-2019-15504 kernel: double free in
drivers/net/wireless/rsi/rsi_91x_usb.c via crafted USB device
https://bugzilla.redhat.com/show_bug.cgi?id=1746725
[ 4 ] Bug #1744149 - CVE-2019-14816 kernel: heap overflow in mwifiex_update_vs_ie()
function of Marvell Wifi Driver leading to a DoS
https://bugzilla.redhat.com/show_bug.cgi?id=1744149
[ 5 ] Bug #1744137 - CVE-2019-14815 kernel: heap-overflow in mwifiex_set_wmm_params()
function of Marvell Wifi Driver leading to DoS
https://bugzilla.redhat.com/show_bug.cgi?id=1744137
[ 6 ] Bug #1744130 - CVE-2019-14814 kernel: heap overflow in mwifiex_set_uap_rates()
function of Marvell Wifi Driver leading to DoS
https://bugzilla.redhat.com/show_bug.cgi?id=1744130
--------------------------------------------------------------------------------
================================================================================
kernel-headers-5.2.11-100.fc29 (FEDORA-2019-97380355ae)
Header files for the Linux kernel for use by glibc
--------------------------------------------------------------------------------
Update Information:
The 5.2.11 stable kernel update contains a number of important fixes across the
tree.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 29 2019 Justin M. Forbes <jforbes(a)fedoraproject.org> - 5.2.11-100
- Linux v5.2.11
* Mon Aug 26 2019 Justin M. Forbes <jforbes(a)fedoraproject.org> - 5.2.10-100
- Linux v5.2.10
* Fri Aug 16 2019 Justin M. Forbes <jforbes(a)fedoraproject.org> - 5.2.9-100
- Linux v5.2.9
* Sat Aug 10 2019 Justin M. Forbes <jforbes(a)redhat.com> - 5.2.8-100
- Linux v5.2.8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1746777 - CVE-2019-15538 kernel: denial of service in in xfs_setattr_nonsize
in fs/xfs/xfs_iops.c
https://bugzilla.redhat.com/show_bug.cgi?id=1746777
[ 2 ] Bug #1746732 - CVE-2019-15505 kernel: out of bounds read in
drivers/media/usb/dvb-usb/technisat-usb2.c
https://bugzilla.redhat.com/show_bug.cgi?id=1746732
[ 3 ] Bug #1746725 - CVE-2019-15504 kernel: double free in
drivers/net/wireless/rsi/rsi_91x_usb.c via crafted USB device
https://bugzilla.redhat.com/show_bug.cgi?id=1746725
[ 4 ] Bug #1744149 - CVE-2019-14816 kernel: heap overflow in mwifiex_update_vs_ie()
function of Marvell Wifi Driver leading to a DoS
https://bugzilla.redhat.com/show_bug.cgi?id=1744149
[ 5 ] Bug #1744137 - CVE-2019-14815 kernel: heap-overflow in mwifiex_set_wmm_params()
function of Marvell Wifi Driver leading to DoS
https://bugzilla.redhat.com/show_bug.cgi?id=1744137
[ 6 ] Bug #1744130 - CVE-2019-14814 kernel: heap overflow in mwifiex_set_uap_rates()
function of Marvell Wifi Driver leading to DoS
https://bugzilla.redhat.com/show_bug.cgi?id=1744130
--------------------------------------------------------------------------------
================================================================================
kernel-tools-5.2.11-100.fc29 (FEDORA-2019-97380355ae)
Assortment of tools for the Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 5.2.11 stable kernel update contains a number of important fixes across the
tree.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 29 2019 Justin M. Forbes <jforbes(a)fedoraproject.org> - 5.2.11-100
- Linux v5.2.11
* Mon Aug 26 2019 Justin M. Forbes <jforbes(a)fedoraproject.org> - 5.2.10-100
- Linux v5.2.10
* Fri Aug 16 2019 Justin M. Forbes <jforbes(a)fedoraproject.org> - 5.2.9-100
- Linux v5.2.9
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1746777 - CVE-2019-15538 kernel: denial of service in in xfs_setattr_nonsize
in fs/xfs/xfs_iops.c
https://bugzilla.redhat.com/show_bug.cgi?id=1746777
[ 2 ] Bug #1746732 - CVE-2019-15505 kernel: out of bounds read in
drivers/media/usb/dvb-usb/technisat-usb2.c
https://bugzilla.redhat.com/show_bug.cgi?id=1746732
[ 3 ] Bug #1746725 - CVE-2019-15504 kernel: double free in
drivers/net/wireless/rsi/rsi_91x_usb.c via crafted USB device
https://bugzilla.redhat.com/show_bug.cgi?id=1746725
[ 4 ] Bug #1744149 - CVE-2019-14816 kernel: heap overflow in mwifiex_update_vs_ie()
function of Marvell Wifi Driver leading to a DoS
https://bugzilla.redhat.com/show_bug.cgi?id=1744149
[ 5 ] Bug #1744137 - CVE-2019-14815 kernel: heap-overflow in mwifiex_set_wmm_params()
function of Marvell Wifi Driver leading to DoS
https://bugzilla.redhat.com/show_bug.cgi?id=1744137
[ 6 ] Bug #1744130 - CVE-2019-14814 kernel: heap overflow in mwifiex_set_uap_rates()
function of Marvell Wifi Driver leading to DoS
https://bugzilla.redhat.com/show_bug.cgi?id=1744130
--------------------------------------------------------------------------------
================================================================================
mod_md-2.0.8-3.fc29 (FEDORA-2019-e00c65ec6f)
Certificate provisioning using ACME for the Apache HTTP Server
--------------------------------------------------------------------------------
Update Information:
This update includes the latest release of the Apache HTTP Server, version
`2.4.41`, fixing various security issues. Several major enhancements are also
included in this update: * `mod_md` is now packaged from upstream *github*
releases. * `mod_cgid` stderr handling has been improved See
http://www.apache.org/dist/httpd/CHANGES_2.4.41 for a full list of changes since
the previous release of `httpd`.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1727434 - Fedora apachectl script behaves differently than authors design it
https://bugzilla.redhat.com/show_bug.cgi?id=1727434
[ 2 ] Bug #1743961 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1743961
[ 3 ] Bug #1743957 - CVE-2019-10092 httpd: limited cross-site scripting in mod_proxy
error page [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1743957
[ 4 ] Bug #1591157 - Unusable entries in error_log when event MPM is activated
https://bugzilla.redhat.com/show_bug.cgi?id=1591157
[ 5 ] Bug #1743997 - CVE-2019-10097 httpd: null-pointer dereference in mod_remoteip
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1743997
--------------------------------------------------------------------------------
================================================================================
perl-Locale-Codes-3.62-1.fc29 (FEDORA-2019-3d48221f72)
Distribution of modules to handle locale codes
--------------------------------------------------------------------------------
Update Information:
This release fixes name2code() and code2name() return value in case of an error.
It also fixes various error mssages. It also updates the locale code database.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 30 2019 Petr Pisar <ppisar(a)redhat.com> - 3.62-1
- 3.62 bump
- Package tests
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1747182 - perl-Locale-Codes-3.62 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747182
--------------------------------------------------------------------------------
================================================================================
php-zendframework-zend-diactoros-1.8.7-1.fc29 (FEDORA-2019-19f3833a5b)
PSR HTTP Message implementations
--------------------------------------------------------------------------------
Update Information:
**Version 1.8.7** - 2019-08-06 **Fixed** -
[#364](https://github.com/zendframework/zend-diactoros/issues/364) modifies
detection of HTTPS schemas via the `$_SERVER['HTTPS']` value such that an
empty HTTPS-key will result in a scheme of `http` and not `https`.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 30 2019 Remi Collet <remi(a)remirepo.net> - 1.8.7-1
- update to 1.8.7
* Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.8.6-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Sat Feb 2 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.8.6-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
python-airspeed-0.5.12-1.fc29 (FEDORA-2019-74b7f7e213)
A lightweight template engine compatible with Velocity
--------------------------------------------------------------------------------
Update Information:
Upgraded to v0.5.12
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 29 2019 Aniket Pradhan <aniket17133(a)iiitd.ac.in> - 0.5.12-1
- Upgraded to v0.5.12
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 0.5.11-3
- Rebuilt for Python 3.8
* Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.11-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1742253 - python-airspeed-0.5.12 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1742253
--------------------------------------------------------------------------------
================================================================================
python-colcon-bash-0.4.0-1.fc29 (FEDORA-2019-865395fad4)
Extension for colcon to provide Bash scripts
--------------------------------------------------------------------------------
Update Information:
Update to latest colcon releases
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 29 2019 Scott K Logan <logans(a)cottsay.net> - 0.4.0-1
- Update to 0.4.0 (rhbz#1747247)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1747250 - python-colcon-ros-0.3.12 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747250
[ 2 ] Bug #1747247 - python-colcon-bash-0.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747247
[ 3 ] Bug #1747248 - python-colcon-core-0.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747248
[ 4 ] Bug #1747249 - python-colcon-package-selection-0.2.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747249
[ 5 ] Bug #1747252 - python-colcon-zsh-0.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747252
[ 6 ] Bug #1747251 - python-colcon-test-result-0.3.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747251
[ 7 ] Bug #1744679 - python-colcon-output-0.2.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1744679
--------------------------------------------------------------------------------
================================================================================
python-colcon-core-0.4.0-1.fc29 (FEDORA-2019-865395fad4)
Command line tool to build sets of software packages
--------------------------------------------------------------------------------
Update Information:
Update to latest colcon releases
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 29 2019 Scott K Logan <logans(a)cottsay.net> - 0.4.0-1
- Update to 0.4.0 (rhbz#1747248)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1747250 - python-colcon-ros-0.3.12 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747250
[ 2 ] Bug #1747247 - python-colcon-bash-0.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747247
[ 3 ] Bug #1747248 - python-colcon-core-0.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747248
[ 4 ] Bug #1747249 - python-colcon-package-selection-0.2.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747249
[ 5 ] Bug #1747252 - python-colcon-zsh-0.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747252
[ 6 ] Bug #1747251 - python-colcon-test-result-0.3.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747251
[ 7 ] Bug #1744679 - python-colcon-output-0.2.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1744679
--------------------------------------------------------------------------------
================================================================================
python-colcon-output-0.2.5-1.fc29 (FEDORA-2019-865395fad4)
Extension for colcon to customize the output in various ways
--------------------------------------------------------------------------------
Update Information:
Update to latest colcon releases
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 27 2019 Scott K Logan <logans(a)cottsay.net> - 0.2.5-1
- Update to 0.2.5 (rhbz#1744679)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1747250 - python-colcon-ros-0.3.12 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747250
[ 2 ] Bug #1747247 - python-colcon-bash-0.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747247
[ 3 ] Bug #1747248 - python-colcon-core-0.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747248
[ 4 ] Bug #1747249 - python-colcon-package-selection-0.2.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747249
[ 5 ] Bug #1747252 - python-colcon-zsh-0.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747252
[ 6 ] Bug #1747251 - python-colcon-test-result-0.3.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747251
[ 7 ] Bug #1744679 - python-colcon-output-0.2.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1744679
--------------------------------------------------------------------------------
================================================================================
python-colcon-package-selection-0.2.5-1.fc29 (FEDORA-2019-865395fad4)
Extension for colcon to select the packages to process
--------------------------------------------------------------------------------
Update Information:
Update to latest colcon releases
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 29 2019 Scott K Logan <logans(a)cottsay.net> - 0.2.5-1
- Update to 0.2.5 (rhbz#1747249)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1747250 - python-colcon-ros-0.3.12 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747250
[ 2 ] Bug #1747247 - python-colcon-bash-0.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747247
[ 3 ] Bug #1747248 - python-colcon-core-0.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747248
[ 4 ] Bug #1747249 - python-colcon-package-selection-0.2.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747249
[ 5 ] Bug #1747252 - python-colcon-zsh-0.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747252
[ 6 ] Bug #1747251 - python-colcon-test-result-0.3.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747251
[ 7 ] Bug #1744679 - python-colcon-output-0.2.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1744679
--------------------------------------------------------------------------------
================================================================================
python-colcon-ros-0.3.12-1.fc29 (FEDORA-2019-865395fad4)
Extension for colcon to support ROS packages
--------------------------------------------------------------------------------
Update Information:
Update to latest colcon releases
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 29 2019 Scott K Logan <logans(a)cottsay.net> - 0.3.12-1
- Update to 0.3.12 (rhbz#1747250)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1747250 - python-colcon-ros-0.3.12 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747250
[ 2 ] Bug #1747247 - python-colcon-bash-0.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747247
[ 3 ] Bug #1747248 - python-colcon-core-0.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747248
[ 4 ] Bug #1747249 - python-colcon-package-selection-0.2.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747249
[ 5 ] Bug #1747252 - python-colcon-zsh-0.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747252
[ 6 ] Bug #1747251 - python-colcon-test-result-0.3.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747251
[ 7 ] Bug #1744679 - python-colcon-output-0.2.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1744679
--------------------------------------------------------------------------------
================================================================================
python-colcon-test-result-0.3.6-1.fc29 (FEDORA-2019-865395fad4)
Extension for colcon to provide information about the test results
--------------------------------------------------------------------------------
Update Information:
Update to latest colcon releases
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 29 2019 Scott K Logan <logans(a)cottsay.net> - 0.3.6-1
- Update to 0.3.6 (rhbz#1747251)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1747250 - python-colcon-ros-0.3.12 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747250
[ 2 ] Bug #1747247 - python-colcon-bash-0.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747247
[ 3 ] Bug #1747248 - python-colcon-core-0.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747248
[ 4 ] Bug #1747249 - python-colcon-package-selection-0.2.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747249
[ 5 ] Bug #1747252 - python-colcon-zsh-0.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747252
[ 6 ] Bug #1747251 - python-colcon-test-result-0.3.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747251
[ 7 ] Bug #1744679 - python-colcon-output-0.2.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1744679
--------------------------------------------------------------------------------
================================================================================
python-colcon-zsh-0.4.0-1.fc29 (FEDORA-2019-865395fad4)
Extension for colcon to provide Z shell scripts
--------------------------------------------------------------------------------
Update Information:
Update to latest colcon releases
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 29 2019 Scott K Logan <logans(a)cottsay.net> - 0.4.0-1
- Update to 0.4.0 (rhbz#1747252)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1747250 - python-colcon-ros-0.3.12 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747250
[ 2 ] Bug #1747247 - python-colcon-bash-0.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747247
[ 3 ] Bug #1747248 - python-colcon-core-0.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747248
[ 4 ] Bug #1747249 - python-colcon-package-selection-0.2.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747249
[ 5 ] Bug #1747252 - python-colcon-zsh-0.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747252
[ 6 ] Bug #1747251 - python-colcon-test-result-0.3.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747251
[ 7 ] Bug #1744679 - python-colcon-output-0.2.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1744679
--------------------------------------------------------------------------------
================================================================================
python-wikitcms-2.4.3-1.fc29 (FEDORA-2019-b8d66c6d02)
Fedora QA wiki test management Python library
--------------------------------------------------------------------------------
Update Information:
This new release of wikitcms tweaks login handling to avoid deprecation warnings
with mwclient 0.10.0. There are no other changes.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 26 2019 Adam Williamson <awilliam(a)redhat.com> - 2.4.3-1
- New release 2.4.3: avoid deprecation warnings with mwclient 0.10.0
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 2.4.2-4
- Rebuilt for Python 3.8
* Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.4.2-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Sat Feb 2 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.4.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rkward-0.7.0-9.fc29 (FEDORA-2019-32499f9021)
Graphical frontend for R language
--------------------------------------------------------------------------------
Update Information:
Update R to 3.6.1. ---- Update R to 3.6.0. Rebuild lapack with --no-optimize-
sibling-calls to work around gfortran issues (Fedora 30+ only).
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 16 2019 Tom Callaway <spot(a)fedoraproject.org> - 0.7.0-9
- rebuild for R 3.6.1
* Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.7.0-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Thu May 30 2019 Tom Callaway <spot(a)fedoraproject.org> - 0.7.0-7
- rebuild for R 3.6.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1744723 - R-devel requires R-rpm-macros
https://bugzilla.redhat.com/show_bug.cgi?id=1744723
[ 2 ] Bug #1727281 - R-3.6.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1727281
[ 3 ] Bug #1703495 - R-3.6.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1703495
--------------------------------------------------------------------------------
================================================================================
roundcubemail-1.3.10-1.fc29 (FEDORA-2019-d9c2f1ec70)
Round Cube Webmail is a browser-based multilingual IMAP client
--------------------------------------------------------------------------------
Update Information:
**Version 1.3.10** - Managesieve: Fix so "Create filter" option does not show
up when Filters menu is disabled (#6723) - Enigma: Fix bug where revoked
users/keys were not greyed out in key info - Enigma: Fix error message when
trying to encrypt with a revoked key (#6607) - Enigma: Fix "decryption oracle"
bug [CVE-2019-10740] (#6638) - Fix compatibility with kolab/net_ldap3 > 1.0.7
(#6785) - Fix bug where bmp images couldn't be displayed on some systems (#6728)
- Fix bug in parsing vCard data using PHP 7.3 due to an invalid regexp (#6744) -
Fix bug where bold/strong text was converted to upper-case on html-to-text
conversion (6758) - Fix bug in rcube_utils::parse_hosts() where %t, %d, %z could
return only tld (#6746) - Fix bug where Next/Prev button in mail view didn't
work with multi-folder search result (#6793) - Fix bug where selection of
columns on messages list wasn't working - Fix bug in converting multi-page Tiff
images to Jpeg (#6824) - Fix wrong messages order after returning to a multi-
folder search result (#6836) - Fix PHP 7.4 deprecation: implode() wrong
parameter order (#6866) - Fix bug where it was possible to bypass the
position:fixed CSS check in received messages (#6898) - Fix bug where some
strict remote URIs in url() style were unintentionally blocked (#6899) - Fix bug
where it was possible to bypass the CSS jail in HTML messages using :root
pseudo-class (#6897) - Fix bug where it was possible to bypass href URI check
with data:application/xhtml+xml URIs (#6896)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 29 2019 Remi Collet <remi(a)remirepo.net> - 1.3.10-1
- update to 1.3.10
- use range dependencies
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1747321 - CVE-2019-15237 roundcube: mishandling of Punycode xn-- domain name
leads to homograph attack
https://bugzilla.redhat.com/show_bug.cgi?id=1747321
--------------------------------------------------------------------------------
================================================================================
rpki-client-0.2.0-1.fc29 (FEDORA-2019-9a53205654)
RPKI client implementation
--------------------------------------------------------------------------------
Update Information:
rpki-client is an implementation of RPKI (Resource Public Key Infrastructure),
specified by RFC 6480. It implements the client side of RPKI, which is
responsible for downloading, validating and converting ROAs (Route Origin
Authorisations) into VRPs (Validated ROA Payloads). The client's output (VRPs)
can be used to perform BGP Origin Validation (RFC 6811). The design focus of
rpki-client is simplicity and security. To wit, it implements RPKI components
necessary for validating route statements and omits superfluities (such as, for
example, which X509 certificate sections must be labelled "Critical").
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1745770 - Review Request: rpki-client - RPKI client implementation
https://bugzilla.redhat.com/show_bug.cgi?id=1745770
--------------------------------------------------------------------------------
================================================================================
rpy-2.9.5-4.fc29 (FEDORA-2019-32499f9021)
Python interface to the R language
--------------------------------------------------------------------------------
Update Information:
Update R to 3.6.1. ---- Update R to 3.6.0. Rebuild lapack with --no-optimize-
sibling-calls to work around gfortran issues (Fedora 30+ only).
--------------------------------------------------------------------------------
ChangeLog:
* Sat Aug 17 2019 Tom Callaway <spot(a)fedoraproject.org> - 2.9.5-4
- R 3.6.1
* Fri May 31 2019 Tom Callaway <spot(a)fedoraproject.org> - 2.9.5-3
- R 3.6.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1744723 - R-devel requires R-rpm-macros
https://bugzilla.redhat.com/show_bug.cgi?id=1744723
[ 2 ] Bug #1727281 - R-3.6.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1727281
[ 3 ] Bug #1703495 - R-3.6.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1703495
--------------------------------------------------------------------------------