The following Fedora 31 Security updates need testing: Age URL 6 https://bodhi.fedoraproject.org/updates/FEDORA-2020-a55b70b4ab php-horde-Horde-Form-2.0.20-1.fc31 4 https://bodhi.fedoraproject.org/updates/FEDORA-2020-90c768a947 libxslt-1.1.34-1.fc31 4 https://bodhi.fedoraproject.org/updates/FEDORA-2020-16268b450d nethack-3.6.6-1.fc31 3 https://bodhi.fedoraproject.org/updates/FEDORA-2020-f6271d7afa chromium-80.0.3987.132-1.fc31 3 https://bodhi.fedoraproject.org/updates/FEDORA-2020-f25793aac4 webkit2gtk3-2.28.0-6.fc31 2 https://bodhi.fedoraproject.org/updates/FEDORA-2020-04ac174fa9 tomcat-9.0.31-2.fc31
The following Fedora 31 Critical Path updates have yet to be approved: Age URL 26 https://bodhi.fedoraproject.org/updates/FEDORA-2020-599bdb7c34 kexec-tools-2.0.20-10.fc31 18 https://bodhi.fedoraproject.org/updates/FEDORA-2020-c1a2fd3585 libpcap-1.9.1-2.fc31 17 https://bodhi.fedoraproject.org/updates/FEDORA-2020-3aedaed7b6 net-snmp-5.8-17.fc31 12 https://bodhi.fedoraproject.org/updates/FEDORA-2020-37d53c9c97 python-setuptools-41.6.0-1.fc31 11 https://bodhi.fedoraproject.org/updates/FEDORA-2020-644f24ed1c cups-2.2.12-6.fc31 11 https://bodhi.fedoraproject.org/updates/FEDORA-2020-4b0528d225 libevdev-1.9.0-1.fc31 10 https://bodhi.fedoraproject.org/updates/FEDORA-2020-717ce1436f ceph-14.2.8-1.fc31 8 https://bodhi.fedoraproject.org/updates/FEDORA-2020-4cecb98c91 koji-1.20.1-1.fc31 7 https://bodhi.fedoraproject.org/updates/FEDORA-2020-d66ed9f32e libinput-1.15.3-2.fc31 6 https://bodhi.fedoraproject.org/updates/FEDORA-2020-c3e19f5098 pulseaudio-13.99.1-1.fc31 4 https://bodhi.fedoraproject.org/updates/FEDORA-2020-90c768a947 libxslt-1.1.34-1.fc31 4 https://bodhi.fedoraproject.org/updates/FEDORA-2020-f91e072f1f supermin-5.2.0-1.fc31 3 https://bodhi.fedoraproject.org/updates/FEDORA-2020-61ddeb7ab4 gnome-shell-3.34.4-2.fc31 mutter-3.34.4-2.fc31 3 https://bodhi.fedoraproject.org/updates/FEDORA-2020-6e5d750f08 perl-Encode-3.04-442.fc31 3 https://bodhi.fedoraproject.org/updates/FEDORA-2020-22a5ae9113 SDL2-2.0.12-1.fc31 mingw-SDL2-2.0.12-1.fc31 3 https://bodhi.fedoraproject.org/updates/FEDORA-2020-aab29ac03c dnsmasq-2.80-12.fc31 2 https://bodhi.fedoraproject.org/updates/FEDORA-2020-19b1d79a02 dtc-1.6.0-1.fc31 2 https://bodhi.fedoraproject.org/updates/FEDORA-2020-f905273b27 python3-3.7.7-1.fc31 python3-docs-3.7.7-1.fc31 2 https://bodhi.fedoraproject.org/updates/FEDORA-2020-b36b25de24 dracut-050-25.git20200313.fc31 2 https://bodhi.fedoraproject.org/updates/FEDORA-2020-48f50b437f mdadm-4.1-4.fc31 2 https://bodhi.fedoraproject.org/updates/FEDORA-2020-90a64eda89 kernel-5.5.9-200.fc31 kernel-headers-5.5.9-200.fc31 kernel-tools-5.5.9-200.fc31
The following builds have been pushed to Fedora 31 updates-testing
autojump-22.5.3-1.fc31 bluez-5.54-1.fc31 ccls-0.20190823.5-2.fc31 composer-1.10.1-1.fc31 five-or-more-3.32.1-1.fc31 geocode-glib-3.26.2-1.fc31 glances-3.1.4-1.fc31 gnome-bluetooth-3.34.1-1.fc31 gnote-3.34.2-1.fc31 http-parser-2.9.3-1.fc31 inxi-3.0.38-1.fc31 libgit2-0.28.4-2.fc31 libldb-2.0.9-1.fc31 mangohud-0.3.0-1.fc31 mozilla-ublock-origin-1.25.2-1.fc31 perl-5.30.2-450.fc31 perl-CPAN-Perl-Releases-5.20200314-1.fc31 perl-Module-CoreList-5.20200314-1.fc31 phan-2.6.1-1.fc31 php-microsoft-tolerant-php-parser-0.0.20-1.fc31 php-pecl-xdebug-2.9.3-1.fc31 php-phpmailer6-6.1.5-1.fc31 postgresql-jdbc-42.2.11-1.fc31 pungi-4.2.1-2.fc31 python-google-auth-1.11.3-1.fc31 realTimeConfigQuickScan-0-1.20190803git4b482db.fc31 redis-5.0.8-1.fc31 samba-4.11.7-0.fc31 sourcextractor++-0.10-1.fc31 texlive-2019-19.fc31 tgbot-cpp-1.2.1-1.fc31 timeshift-20.03-1.fc31 tracker-2.3.4-1.fc31 tracker-miners-2.3.3-1.fc31 vagrant-sshfs-1.3.4-1.fc31 vgrive-1.5.0-1.fc31 xfce4-whiskermenu-plugin-2.4.3-1.fc31
Details about builds:
================================================================================ autojump-22.5.3-1.fc31 (FEDORA-2020-abf87ca5a1) A fast way to navigate your filesystem from the command line -------------------------------------------------------------------------------- Update Information:
Update to 22.5.3 (#1732680) -------------------------------------------------------------------------------- ChangeLog:
* Sun Mar 1 2020 S��rgio Basto sergio@serjux.com - 22.5.3-1 - Update to 22.5.3 (#1732680) * Tue Jan 28 2020 Fedora Release Engineering releng@fedoraproject.org - 22.5.1-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Thu Oct 3 2019 Miro Hron��ok mhroncok@redhat.com - 22.5.1-8 - Rebuilt for Python 3.8.0rc1 (#1748018) * Mon Aug 19 2019 Miro Hron��ok mhroncok@redhat.com - 22.5.1-7 - Rebuilt for Python 3.8 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1732680 - v22.5.3 available, Race condition resolved in the new version https://bugzilla.redhat.com/show_bug.cgi?id=1732680 --------------------------------------------------------------------------------
================================================================================ bluez-5.54-1.fc31 (FEDORA-2020-7773902f15) Bluetooth utilities -------------------------------------------------------------------------------- Update Information:
bluez 5.54 -------------------------------------------------------------------------------- ChangeLog:
* Sun Mar 15 2020 Peter Robinson pbrobinson@fedoraproject.org - 5.54-1 - bluez 5.54 --------------------------------------------------------------------------------
================================================================================ ccls-0.20190823.5-2.fc31 (FEDORA-2020-84975765f2) C/C++/ObjC language server -------------------------------------------------------------------------------- Update Information:
Fix dependency on the current clang version (fix for rhbz#1807574) -------------------------------------------------------------------------------- ChangeLog:
* Sun Mar 15 2020 Dan ��erm��k dan.cermak@cgc-instruments.com - 0.20190823.5-2 - Fix dependency on the current clang version (fix for rhbz#1807574) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1807574 - ccls points to wrong clang resource directory https://bugzilla.redhat.com/show_bug.cgi?id=1807574 --------------------------------------------------------------------------------
================================================================================ composer-1.10.1-1.fc31 (FEDORA-2020-e2aae3a5e3) Dependency Manager for PHP -------------------------------------------------------------------------------- Update Information:
**Version 1.10.1** - 2020-03-13 * Fixed path repository warning on empty path when using wildcards * Fixed superfluous warnings when generating optimized autoloaders ---- **Version 1.10.0** - 2020-03-10 * Added `bearer` auth config to authenticate using `Authorization: Bearer <token>` headers * Added `plugin-api-version` in composer.lock so third-party tools can know which Composer version was used to generate a lock file * Fixed composer fund command and funding info parsing to be more useful * Fixed issue where --no- dev autoload generation was excluding some packages which should not have been excluded * Fixed 1.10-RC regression in create project's handling of absolute paths ---- **Version 1.10.0-RC** - 2020-02-14 * Breaking: `composer global exec ...` now executes the process in the current working directory instead of executing it in the global directory. * Warning: Added a warning when class names are being loaded by a PSR-4 or PSR-0 rule only due to classmap optimization, but would not otherwise be autoloadable. Composer 2.0 will stop autoloading these classes so make sure you fix your autoload configs. * Added new funding key to composer.json to describe ways your package's maintenance can be funded. This reads info from GitHub's FUNDING.yml by default so better configure it there so it shows on GitHub and Composer/Packagist * Added `composer fund` command to show funding info of your dependencies * Added support for --format=json output for show command when showing a single package * Added support for configuring suggestions using config command, e.g. `composer config suggest.foo/bar some text` * Added support for configuring fine-grained preferred-install using config command, e.g. `composer config preferred- install.foo/* dist` * Added `@putenv` script handler to set environment variables from composer.json for following scripts * Added `lock` option that can be set to false, in which case no composer.lock file will be generated * Added --add-repository flag to create-project command which will persist the repo given in --repository into the composer.json of the package being installed * Added support for IPv6 addresses in NO_PROXY * Added package homepage display in the show command * Added debug info about HTTP authentications * Added Symfony 5 compatibility * Added --fixed flag to require command to make it use a fixed constraint instead of a ^x.y constraint when adding the requirement * Fixed exclude-from-classmap matching subsets of directories e.g. foo/ was excluding foobar/ * Fixed archive command to persist file permissions inside the zip files * Fixed init/require command to avoid suggesting packages which are already selected in the search results * Fixed create-project UX issues * Fixed filemtime for vendor/composer/* files is now only changing when the files actually change * Fixed issues detecting docker environment with an active open_basedir -------------------------------------------------------------------------------- ChangeLog:
* Sat Mar 14 2020 Remi Collet remi@remirepo.net - 1.10.1-1 - update to 1.10.1 * Wed Mar 11 2020 Remi Collet remi@remirepo.net - 1.10.0-1 - update to 1.10.0 --------------------------------------------------------------------------------
================================================================================ five-or-more-3.32.1-1.fc31 (FEDORA-2020-e857907427) GNOME "Five or More" game -------------------------------------------------------------------------------- Update Information:
five-or-more 3.32.1 release: * Fixed translations not working -------------------------------------------------------------------------------- ChangeLog:
* Thu Mar 12 2020 Kalev Lember klember@redhat.com - 3.32.1-1 - Update to 3.32.1 --------------------------------------------------------------------------------
================================================================================ geocode-glib-3.26.2-1.fc31 (FEDORA-2020-c1537e3a11) Geocoding helper library -------------------------------------------------------------------------------- Update Information:
geocode-glib 3.26.2 release: - Fix build exporting all the symbols - Allow GIR generation when cross-compiling - Allow unknown parameters inside geo: URL -------------------------------------------------------------------------------- ChangeLog:
* Mon Mar 9 2020 Bastien Nocera bnocera@redhat.com - 3.26.2-1 + geocode-glib-3.26.2-1 - Update to 3.26.2 --------------------------------------------------------------------------------
================================================================================ glances-3.1.4-1.fc31 (FEDORA-2020-a9d61f127d) CLI curses based monitoring tool -------------------------------------------------------------------------------- Update Information:
Please try this new version, I do not have the time to do lots of tests -------------------------------------------------------------------------------- ChangeLog:
* Sat Mar 14 2020 Edouard Bourguignon madko@linuxed.net - 3.1.4-1 - Upgrade to 3.1.4 * Tue Jan 28 2020 Fedora Release Engineering releng@fedoraproject.org - 3.1.0-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Thu Oct 3 2019 Miro Hron��ok mhroncok@redhat.com - 3.1.0-4 - Rebuilt for Python 3.8.0rc1 (#1748018) * Mon Aug 19 2019 Miro Hron��ok mhroncok@redhat.com - 3.1.0-3 - Rebuilt for Python 3.8 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1747073 - glances-3.1.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1747073 --------------------------------------------------------------------------------
================================================================================ gnome-bluetooth-3.34.1-1.fc31 (FEDORA-2020-1420bcced5) Bluetooth graphical utilities -------------------------------------------------------------------------------- Update Information:
gnome-bluetooth 3.34.1 release: - Prefer "Alias" adapter name to "Name" - Fix some memory leaks - Updated translations -------------------------------------------------------------------------------- ChangeLog:
* Mon Mar 9 2020 Bastien Nocera bnocera@redhat.com - 3.34.1-1 + gnome-bluetooth-3.34.1-1 - Update to 3.34.1 --------------------------------------------------------------------------------
================================================================================ gnote-3.34.2-1.fc31 (FEDORA-2020-6be6a2e4bd) Note-taking application -------------------------------------------------------------------------------- Update Information:
gnote 3.34.2 release: * Fix possible crash when removing tags * Updated translations -------------------------------------------------------------------------------- ChangeLog:
* Mon Mar 16 2020 Kalev Lember klember@redhat.com - 3.34.2-1 - Update to 3.34.2 --------------------------------------------------------------------------------
================================================================================ http-parser-2.9.3-1.fc31 (FEDORA-2020-d3edca71be) HTTP request/response parser for C -------------------------------------------------------------------------------- Update Information:
Fix the upgrade path from F30 that has http-parser 2.9.3. -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 29 2020 Fedora Release Engineering releng@fedoraproject.org - 2.9.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ inxi-3.0.38-1.fc31 (FEDORA-2020-9c9049516e) A full featured system information script -------------------------------------------------------------------------------- Update Information:
Update to 3.0.38. -------------------------------------------------------------------------------- ChangeLog:
* Mon Mar 16 2020 Vasiliy N. Glazov vascom2@gmail.com - 3.0.38-1 - Update to 3.0.38 * Wed Jan 29 2020 Fedora Release Engineering releng@fedoraproject.org - 3.0.37-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ libgit2-0.28.4-2.fc31 (FEDORA-2020-2dbb206ef9) C implementation of the Git core methods as a library with a solid API -------------------------------------------------------------------------------- Update Information:
Correctly obsolete libgit2_0.28 compat package -------------------------------------------------------------------------------- ChangeLog:
* Sun Mar 15 2020 Pete Walter pwalter@fedoraproject.org - 0.28.4-2 - Bump libgit2_0.28 obsoletes versions --------------------------------------------------------------------------------
================================================================================ libldb-2.0.9-1.fc31 (FEDORA-2020-5c3c93a400) A schema-less, ldap like, API and database -------------------------------------------------------------------------------- Update Information:
Update to Samba 4.11.7 -------------------------------------------------------------------------------- ChangeLog:
* Fri Mar 13 2020 Lukas Slebodnik lslebodn@fedoraproject.org - 2.0.9-1 - New upstream release 2.0.9 --------------------------------------------------------------------------------
================================================================================ mangohud-0.3.0-1.fc31 (FEDORA-2020-b4ddaa2f91) Vulkan overlay layer for monitoring FPS, temperatures, CPU/GPU load and more -------------------------------------------------------------------------------- Update Information:
Update to latest version -------------------------------------------------------------------------------- ChangeLog:
* Sun Mar 15 2020 Artem Polishchuk ego.cordatus@gmail.com - 0.3.0-1 - Update to 0.3.0 --------------------------------------------------------------------------------
================================================================================ mozilla-ublock-origin-1.25.2-1.fc31 (FEDORA-2020-30eb0bf44f) An efficient blocker for Firefox -------------------------------------------------------------------------------- Update Information:
## Changes since 1.24.2 ### Changes: uBO requires a new permission, dns, which is required to solve issue 780. This may triggers a new permission warning from Firefox when uBO updates to the latest dev build, specifically "Access IP address and hostname information", even though this was already possible for uBO to access that information. From now on uBO will CNAME-uncloak network requests. CNAME-uncloaked network requests will appear as blue entries in the popup panel and the logger. The uncloaked entries in the popup panel will also show the related aliases (in smaller characters underneath the canonical names). Network requests which were blocked, redirected, or excepted by a filter/rule are not uncloaked. Canonical hostnames which are first party to the associated alias hostname are not fed back into uBO's filtering engine. Warning: CNAME- aliased hostnames exist most likely for content delivery purpose, i.e. legitimate. ### Closed as fixed: * In Element Zapper, support Mac keyboards��� Delete key (pull request from @roryokane) * Uncaught (in promise) ReferenceError: WebAssembly is not defined * Accessing localStorage delays startup * Need to whitelist Microsoft Edge internal page * Reverse lookup of filter fails with wildcard-leading patterns * Search Bar is partially hidden on list pages * "0" prefixes are currently not accepted as valid hosts entries * [Regression] Show requests blocked in the logger as a result of csp= option * Source list of entity filter with subdomain is not looked up correctly * Fanboy's Cookie List moved to better place * Cosmetic filtering issue with Shadow DOM/tree/root * "::" entry in notracking hosts file blocks URLs containing "::" * Adsbygoogle.js injectable does not validate whether iframe going to be injected is already exist or not * Allow clicking on domain to expand it to show hosts * Fix token position value when removing leading wildcard ### Notable commits with no entry in issue tracker: * Allow re- entrance in abort-current-inline-script * Make element picker mind that network filters are case-insensitive * Support loading of benchmark dataset in published versions * Wrap long hostnames in popup panel * New way to convey IDN and CNAME info in popup panel * Harden abort-current-inline-script scriplet * Remove "uBlock filters -- Experimental" from stock lists * Fix unescaped attr value in generated CSS selector * Fix regex-like filter representation in logger * Improve neutered Google Analytics replacement scriptlet -------------------------------------------------------------------------------- ChangeLog:
* Sat Mar 14 2020 Dominik Mierzejewski rpm@greysector.net - 1.25.2-1 - update to 1.25.2 (#1797341) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1797341 - mozilla-ublock-origin-1.25.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1797341 --------------------------------------------------------------------------------
================================================================================ perl-5.30.2-450.fc31 (FEDORA-2020-64ac8a1df1) Practical Extraction and Report Language -------------------------------------------------------------------------------- Update Information:
5.30.2 bump (see https://metacpan.org/pod/release/SHAY/perl-5.30.2/pod/perldelta.pod for release notes) -------------------------------------------------------------------------------- ChangeLog:
* Mon Mar 16 2020 Jitka Plesnikova jplesnik@redhat.com - 4:5.30.2-451 - 5.30.2 bump (see https://metacpan.org/pod/release/SHAY/perl-5.30.2/pod/perldelta.pod for release notes) --------------------------------------------------------------------------------
================================================================================ perl-CPAN-Perl-Releases-5.20200314-1.fc31 (FEDORA-2020-cf95f89bd2) Mapping Perl releases on CPAN to the location of the tarballs -------------------------------------------------------------------------------- Update Information:
Updated to the latest version -------------------------------------------------------------------------------- ChangeLog:
* Mon Mar 16 2020 Jitka Plesnikova jplesnik@redhat.com - 5.20200314-1 - 5.20200314 bump -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1813602 - perl-CPAN-Perl-Releases-5.20200314 is available https://bugzilla.redhat.com/show_bug.cgi?id=1813602 --------------------------------------------------------------------------------
================================================================================ perl-Module-CoreList-5.20200314-1.fc31 (FEDORA-2020-47f1b57e23) What modules are shipped with versions of perl -------------------------------------------------------------------------------- Update Information:
This release brings data about Perl 5.30.2. -------------------------------------------------------------------------------- ChangeLog:
* Mon Mar 16 2020 Petr Pisar ppisar@redhat.com - 1:5.20200314-1 - 5.20200314 bump -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1813603 - perl-Module-CoreList-5.20200314 is available https://bugzilla.redhat.com/show_bug.cgi?id=1813603 --------------------------------------------------------------------------------
================================================================================ phan-2.6.1-1.fc31 (FEDORA-2020-deb0db214b) A static analyzer for PHP -------------------------------------------------------------------------------- Update Information:
Mar 07 2020, **Phan 2.6.0** **New features (CLI, Configs):** + Show empty union types as `(empty union type)` in issue messages instead of as an empty string. + Add a new CLI option `--analyze-twice` to run the analysis phase twice (#3743) Phan infers additional type information for properties, return types, etc. while analyzing, and this will help it detect more potential errors. (on the first run, it would analyze files before some of those types were inferred) + Add a CLI option `--analyze-all-files` to analyze all files, ignoring `exclude_analysis_file_list`. This is potentially useful if third party dependencies are missing type information (also see `--analyze-twice`). + Add `--dump-analyzed-file-list` to dump all files Phan would analyze to stdout. + Add `allow_overriding_vague_return_types` to allow Phan to add inferred return types to functions/closures/methods declared with `@return mixed` or `@return object`. This is disabled by default. When this is enabled, it can be disabled for individual methods by adding `@phan-hardcode-return-type` to the comment of the method. (if the method has any type declarations such as `@return mixed`) Previously, Phan would only add inferred return types if there was no return type declaration. (also see `--analyze-twice`) + Also emit the code fragment for the argument in question in the `PhanTypeMismatchArgument` family of issue messages (#3779) + Render a few more AST node kinds in code fragments in issue messages. **New features (Analysis):** + Support parsing php 8.0 union types (and the static return type) in the polyfill. (#3419, #3634) + Emit `PhanCompatibleUnionType` and `PhanCompatibleStaticType` when the target php version is less than 8.0 and union types or static return types are seen. (#3419, #3634) + Be more consistent about warning about issues in values of class constants, global constants, and property defaults. + Infer key and element types from `iterator_to_array()` + Infer that modification of or reading from static properties all use the same property declaration. (#3760) Previously, Phan would track the static property's type separately for each subclass. (static properties from traits become different instances, in each class using the trait) + Make assignments to properties of the declaring class affect type inference for those properties when accessed on subclasses (#3760) Note that Phan is only guaranteed to analyze files once, so if type information is missing, the only way to ensure it's available is to add it to phpdoc (`UnknownElementTypePlugin` can help) or use `--analyze-twice`. + Make internal checks if generic array types are strict subtypes of other types more accurate. (e.g. `object[]` is not a strict subtype of `stdClass[]`, but `stdClass[]` is a strict subtype of `object[]`) **Plugins:** + Add `UnknownClassElementAccessPlugin` to warn about cases where Phan can't infer which class an instance method is being called on. (To work correctly, this plugin requires that Phan use a single analysis process) + Add `MoreSpecificElementTypePlugin` to warn about functions/methods where the phpdoc/actual return type is vaguer than the types that are actually returned by a method. (#3751) This is a work in progress, and has a lot of false positives. (To work correctly, this plugin requires that Phan use a single analysis process) + Fix crash in `PrintfCheckerPlugin` when analyzing code where `fprintf()` was passed an array instead of a format string. + Emit `PhanTypeMissingReturnReal` instead of `PhanTypeMissingReturn` when there is a real return type signature. (#3716) + Fix bug running `InvokePHPNativeSyntaxCheckPlugin` on Windows when PHP binary is in a path containing spaces. (#3766) **Bug fixes:** + Fix bug causing Phan to fail to properly recursively analyze parameters of inherited methods (#3740) (i.e. when the methods are called on the subclass) + Fix ambiguity in the way `Closure():T[]` and `callable():T[]` are rendered in error messages. (#3731) Either render it as `(Closure():T)[]` or `Closure():(T[])` + Don't include both `.` and `vendor/x/y/` when initializing Phan configs with settings such as `--init --init-analyze-dir=.` (#3699) + Be more consistent about resolving `static` in generators and template types. + Infer the iterable value type for `Generator<V>`. It was previously only inferred when there were 2 or more template args in phpdoc. + Don't let less specific type signatures such as `@param object $x` override the real type signature of `MyClass $x` (#3749) + Support PHP 7.4's `??=` null coalescing assignment operator in the polyfill. + Fix crash analyzing invalid nodes such as `2 = $x` in `RedundantAssignmentPlugin`. + Fix crash inferring type of `isset ? 2 : 3` with `--use-fallback-parser` (#3767) + Fix false positive unreferenced method warnings for methods from traits when the methods were referenced in base classes or interfaces of classes using those traits. **Language Server/Daemon mode:** + Various performance improvements for the language server/daemon with or without pcntl (#3758, #3769, #3771) -------------------------------------------------------------------------------- ChangeLog:
* Sat Mar 14 2020 Remi Collet remi@remirepo.net - 2.6.1-1 - update to 2.6.1 - allow netresearch/jsonmapper 2.0 * Mon Mar 9 2020 Remi Collet remi@remirepo.net - 2.6.0-1 - update to 2.6.0 - raise dependency on microsoft/tolerant-php-parser 0.0.20 - raise dependency on ast 1.0.6 --------------------------------------------------------------------------------
================================================================================ php-microsoft-tolerant-php-parser-0.0.20-1.fc31 (FEDORA-2020-deb0db214b) Tolerant PHP-to-AST parser -------------------------------------------------------------------------------- Update Information:
Mar 07 2020, **Phan 2.6.0** **New features (CLI, Configs):** + Show empty union types as `(empty union type)` in issue messages instead of as an empty string. + Add a new CLI option `--analyze-twice` to run the analysis phase twice (#3743) Phan infers additional type information for properties, return types, etc. while analyzing, and this will help it detect more potential errors. (on the first run, it would analyze files before some of those types were inferred) + Add a CLI option `--analyze-all-files` to analyze all files, ignoring `exclude_analysis_file_list`. This is potentially useful if third party dependencies are missing type information (also see `--analyze-twice`). + Add `--dump-analyzed-file-list` to dump all files Phan would analyze to stdout. + Add `allow_overriding_vague_return_types` to allow Phan to add inferred return types to functions/closures/methods declared with `@return mixed` or `@return object`. This is disabled by default. When this is enabled, it can be disabled for individual methods by adding `@phan-hardcode-return-type` to the comment of the method. (if the method has any type declarations such as `@return mixed`) Previously, Phan would only add inferred return types if there was no return type declaration. (also see `--analyze-twice`) + Also emit the code fragment for the argument in question in the `PhanTypeMismatchArgument` family of issue messages (#3779) + Render a few more AST node kinds in code fragments in issue messages. **New features (Analysis):** + Support parsing php 8.0 union types (and the static return type) in the polyfill. (#3419, #3634) + Emit `PhanCompatibleUnionType` and `PhanCompatibleStaticType` when the target php version is less than 8.0 and union types or static return types are seen. (#3419, #3634) + Be more consistent about warning about issues in values of class constants, global constants, and property defaults. + Infer key and element types from `iterator_to_array()` + Infer that modification of or reading from static properties all use the same property declaration. (#3760) Previously, Phan would track the static property's type separately for each subclass. (static properties from traits become different instances, in each class using the trait) + Make assignments to properties of the declaring class affect type inference for those properties when accessed on subclasses (#3760) Note that Phan is only guaranteed to analyze files once, so if type information is missing, the only way to ensure it's available is to add it to phpdoc (`UnknownElementTypePlugin` can help) or use `--analyze-twice`. + Make internal checks if generic array types are strict subtypes of other types more accurate. (e.g. `object[]` is not a strict subtype of `stdClass[]`, but `stdClass[]` is a strict subtype of `object[]`) **Plugins:** + Add `UnknownClassElementAccessPlugin` to warn about cases where Phan can't infer which class an instance method is being called on. (To work correctly, this plugin requires that Phan use a single analysis process) + Add `MoreSpecificElementTypePlugin` to warn about functions/methods where the phpdoc/actual return type is vaguer than the types that are actually returned by a method. (#3751) This is a work in progress, and has a lot of false positives. (To work correctly, this plugin requires that Phan use a single analysis process) + Fix crash in `PrintfCheckerPlugin` when analyzing code where `fprintf()` was passed an array instead of a format string. + Emit `PhanTypeMissingReturnReal` instead of `PhanTypeMissingReturn` when there is a real return type signature. (#3716) + Fix bug running `InvokePHPNativeSyntaxCheckPlugin` on Windows when PHP binary is in a path containing spaces. (#3766) **Bug fixes:** + Fix bug causing Phan to fail to properly recursively analyze parameters of inherited methods (#3740) (i.e. when the methods are called on the subclass) + Fix ambiguity in the way `Closure():T[]` and `callable():T[]` are rendered in error messages. (#3731) Either render it as `(Closure():T)[]` or `Closure():(T[])` + Don't include both `.` and `vendor/x/y/` when initializing Phan configs with settings such as `--init --init-analyze-dir=.` (#3699) + Be more consistent about resolving `static` in generators and template types. + Infer the iterable value type for `Generator<V>`. It was previously only inferred when there were 2 or more template args in phpdoc. + Don't let less specific type signatures such as `@param object $x` override the real type signature of `MyClass $x` (#3749) + Support PHP 7.4's `??=` null coalescing assignment operator in the polyfill. + Fix crash analyzing invalid nodes such as `2 = $x` in `RedundantAssignmentPlugin`. + Fix crash inferring type of `isset ? 2 : 3` with `--use-fallback-parser` (#3767) + Fix false positive unreferenced method warnings for methods from traits when the methods were referenced in base classes or interfaces of classes using those traits. **Language Server/Daemon mode:** + Various performance improvements for the language server/daemon with or without pcntl (#3758, #3769, #3771) -------------------------------------------------------------------------------- ChangeLog:
* Tue Feb 25 2020 Remi Collet remi@remirepo.net - 0.0.20-1 - update to 0.0.20 --------------------------------------------------------------------------------
================================================================================ php-pecl-xdebug-2.9.3-1.fc31 (FEDORA-2020-baba387c11) PECL package for debugging PHP scripts -------------------------------------------------------------------------------- Update Information:
Fri, Mar 13, 2020 - **xdebug 2.9.3** **Fixed bugs:** - Fixed issue #1753: Resolved breakpoints use information from wrong files - Fixed issue #1758: Xdebug changes error_get_last results inside a try catch - Fixed issue #1759: User registered opcode handlers should call ones already set by other extensions -------------------------------------------------------------------------------- ChangeLog:
* Mon Mar 16 2020 Remi Collet remi@remirepo.net - 2.9.3-1 - update to 2.9.3 --------------------------------------------------------------------------------
================================================================================ php-phpmailer6-6.1.5-1.fc31 (FEDORA-2020-6485d519fa) Full-featured email creation and transfer class for PHP -------------------------------------------------------------------------------- Update Information:
**Version 6.1.5** (March 14th, 2020 * Reject invalid custom headers that are empty or contain breaks * Various fixes for DKIM issues, especially when using `mail()` transport * Drop the `l=` length tag from DKIM signatures; it's a mild security risk * Ensure CRLF is used explicitly when needed, rather than `static::$LE` * Add a method for trimming header content consistently * Some minor tweaks to resolve static analyser complaints * Check that attachment files are readable both when adding *and* when sending * Work around Outlook bug in mishandling MIME preamble * Danish translation improvements -------------------------------------------------------------------------------- ChangeLog:
* Sat Mar 14 2020 Remi Collet remi@remirepo.net - 6.1.5-1 - update to 6.1.5 --------------------------------------------------------------------------------
================================================================================ postgresql-jdbc-42.2.11-1.fc31 (FEDORA-2020-9855e9a60f) JDBC driver for PostgreSQL -------------------------------------------------------------------------------- Update Information:
Rebased to version 42.2.11 -------------------------------------------------------------------------------- ChangeLog:
* Mon Mar 16 2020 Ondrej Dubaj odubaj@redhat.com - 42.2.11-1 - new upstream release -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1406931 - sync ConnectTimeoutTest fix with upstream https://bugzilla.redhat.com/show_bug.cgi?id=1406931 --------------------------------------------------------------------------------
================================================================================ pungi-4.2.1-2.fc31 (FEDORA-2020-fb0015e7da) Distribution compose tool -------------------------------------------------------------------------------- Update Information:
Fix incorrect detection of debuginfo packages. ---- New upstream release. Performance improvements: * Pkgset phase will reuse entire package set if it was not modified from previous compose. * Gather phase can also reuse results from previous compose. * Better parallelization of small createrepo_c processes. * Extra files phase no longer waits for gathering. Minor fixes: * Options for customizing latest symlink. * Resend message while waiting for ostree ref to be created. * Config validation can accept overrides for schema, making the validation more strict. -------------------------------------------------------------------------------- ChangeLog:
* Mon Mar 16 2020 Lubom��r Sedl���� lsedlar@redhat.com - 4.2.1-2 - Fix false positive debuginfo detection * Fri Mar 13 2020 Lubom��r Sedl���� lsedlar@redhat.com - 4.2.1-1 - New upstream release --------------------------------------------------------------------------------
================================================================================ python-google-auth-1.11.3-1.fc31 (FEDORA-2020-ae21893168) Google Auth Python Library -------------------------------------------------------------------------------- Update Information:
Update. to 1.11.3 -------------------------------------------------------------------------------- ChangeLog:
* Mon Mar 16 2020 Jason Montleon jmontleo@redhat.com - 1:1.11.3-1 - Update to 1.11.3 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1813484 - python-google-auth-1.11.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1813484 --------------------------------------------------------------------------------
================================================================================ realTimeConfigQuickScan-0-1.20190803git4b482db.fc31 (FEDORA-2020-94c99d4ddd) Inspect realtime system settings -------------------------------------------------------------------------------- Update Information:
New sources from github, first source update since 2012 -------------------------------------------------------------------------------- ChangeLog:
* Sun Mar 15 2020 Erich Eickmeyer erich@ericheickmeyer.com - 0-1.20190803git4b482db - New sources from github, first source update since 2012 * Thu Jan 30 2020 Fedora Release Engineering releng@fedoraproject.org - 0-0.28.20120506hg - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1601504 - Can't locate QuickScanEngine.pm in @INC (you may need to install the QuickScanEngine module) https://bugzilla.redhat.com/show_bug.cgi?id=1601504 --------------------------------------------------------------------------------
================================================================================ redis-5.0.8-1.fc31 (FEDORA-2020-4e079a1409) A persistent key-value database -------------------------------------------------------------------------------- Update Information:
Upstream 5.0.8 release. -------------------------------------------------------------------------------- ChangeLog:
* Fri Mar 13 2020 Nathan Scott nathans@redhat.com - 5.0.8-1 - Upstream 5.0.8 release. * Wed Feb 12 2020 Nathan Scott nathans@redhat.com - 5.0.7-3 - Patch extern SDS_NOINIT definition for gcc 10 (RHBZ #1799969) * Thu Jan 30 2020 Fedora Release Engineering releng@fedoraproject.org - 5.0.7-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1812990 - redis-5.0.8 is available https://bugzilla.redhat.com/show_bug.cgi?id=1812990 --------------------------------------------------------------------------------
================================================================================ samba-4.11.7-0.fc31 (FEDORA-2020-5c3c93a400) Server and Client software to interoperate with Windows machines -------------------------------------------------------------------------------- Update Information:
Update to Samba 4.11.7 -------------------------------------------------------------------------------- ChangeLog:
* Tue Mar 10 2020 Guenther Deschner gdeschner@redhat.com - 4.11.7-0 - Update to Samba 4.11.7 --------------------------------------------------------------------------------
================================================================================ sourcextractor++-0.10-1.fc31 (FEDORA-2020-65dc33221e) A program that extracts a catalog of sources from astronomical images, and the successor of SExtractor -------------------------------------------------------------------------------- Update Information:
Update for new upstream release -------------------------------------------------------------------------------- ChangeLog:
* Fri Mar 13 2020 Alejandro Alvarez Ayllon aalvarez@fedoraproject.org 0.10-1 - Update for upstream release 0.10 --------------------------------------------------------------------------------
================================================================================ texlive-2019-19.fc31 (FEDORA-2020-726bbfad03) TeX formatting system -------------------------------------------------------------------------------- Update Information:
Update newtx to fix issue with misnamed file. -------------------------------------------------------------------------------- ChangeLog:
* Fri Mar 13 2020 Tom Callaway spot@fedoraproject.org - 9:2019-19 - bump and rebuild * Sat Feb 1 2020 Tom Callaway spot@fedoraproject.org - 9:2019-18 - update newtx to latest upstream from CTAN to resolve naming issue with ntxsups_T1.enc * Fri Jan 31 2020 Fedora Release Engineering releng@fedoraproject.org - 9:2019-17 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1796550 - None https://bugzilla.redhat.com/show_bug.cgi?id=1796550 --------------------------------------------------------------------------------
================================================================================ tgbot-cpp-1.2.1-1.fc31 (FEDORA-2020-e73dca8757) C++ library for Telegram bot API -------------------------------------------------------------------------------- Update Information:
Updated to version 1.2.1. -------------------------------------------------------------------------------- ChangeLog:
* Sun Mar 15 2020 Vitaly Zaitsev vitaly@easycoding.org - 1.2.1-1 - Updated to version 1.2.1. * Fri Jan 31 2020 Fedora Release Engineering releng@fedoraproject.org - 1.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1813527 - tgbot-cpp-1.2.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1813527 --------------------------------------------------------------------------------
================================================================================ timeshift-20.03-1.fc31 (FEDORA-2020-6b3ae09449) System restore tool for Linux -------------------------------------------------------------------------------- Update Information:
Security fix for CVE-2020-10174 -------------------------------------------------------------------------------- ChangeLog:
* Sun Mar 15 2020 Samuel Rakitni��an samuel.rakitnican@gmail.com 20.03-1 - Update to 20.03 - Rework the uninstall script removal * Fri Jan 31 2020 Fedora Release Engineering releng@fedoraproject.org - 19.08.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Sat Sep 28 2019 Richard Shaw hobbes1069@gmail.com - 19.08.1-1 - Update to 19.08.1. - Add patch to deal with abstract class compile error. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1811684 - CVE-2020-10174 timeshift: Arbitrary local code execution due to unsafe usage of temporary directory in /tmp/timeshift https://bugzilla.redhat.com/show_bug.cgi?id=1811684 --------------------------------------------------------------------------------
================================================================================ tracker-2.3.4-1.fc31 (FEDORA-2020-d8dedabd72) Desktop-neutral metadata database and search tool -------------------------------------------------------------------------------- Update Information:
tracker 2.3.4 release: * Fix race condition during tracker-store shutdown maybe leading to warnings and missed writeback events. * Made fts:offsets stronger against corrupt FTS tables -------------------------------------------------------------------------------- ChangeLog:
* Tue Mar 10 2020 Kalev Lember klember@redhat.com - 2.3.4-1 - Update to 2.3.4 --------------------------------------------------------------------------------
================================================================================ tracker-miners-2.3.3-1.fc31 (FEDORA-2020-0d74467860) Tracker miners and metadata extractors -------------------------------------------------------------------------------- Update Information:
tracker-miners 2.3.3 release: * The secure sandbox for tracker-extract now permits clock_nanosleep() calls, fixing crashes on some systems. * Miners now set nice/scheduler priorities in a way that placates glib. The sched_setscheduler syscall is as a side effect also allowed by the tracker- extract sandbox. -------------------------------------------------------------------------------- ChangeLog:
* Tue Mar 10 2020 Kalev Lember klember@redhat.com - 2.3.3-1 - Update to 2.3.3 --------------------------------------------------------------------------------
================================================================================ vagrant-sshfs-1.3.4-1.fc31 (FEDORA-2020-8509f072cf) A Vagrant synced folder plugin that mounts folders via SSHFS -------------------------------------------------------------------------------- Update Information:
New upstream version: https://github.com/dustymabe/vagrant- sshfs/releases/tag/v1.3.4 -------------------------------------------------------------------------------- ChangeLog:
* Mon Mar 16 2020 Dusty Mabe dusty@dustymabe.com - 1.3.4-1 - new upstream release: 1.3.4 * Fri Jan 31 2020 Fedora Release Engineering releng@fedoraproject.org - 1.3.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ vgrive-1.5.0-1.fc31 (FEDORA-2020-5dd92d4205) Google Drive client for Linux -------------------------------------------------------------------------------- Update Information:
Update to latest version -------------------------------------------------------------------------------- ChangeLog:
* Sun Mar 15 2020 Artem Polishchuk ego.cordatus@gmail.com - 1.5.0-1 - Update to 1.5.0 * Fri Jan 31 2020 Fedora Release Engineering releng@fedoraproject.org - 1.4.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ xfce4-whiskermenu-plugin-2.4.3-1.fc31 (FEDORA-2020-3b3f7db9a3) An alternate application launcher for Xfce -------------------------------------------------------------------------------- Update Information:
- Update to 2.4.3 -------------------------------------------------------------------------------- ChangeLog:
* Sun Mar 15 2020 Filipe Rosset rosset.filipe@gmail.com - 2.4.3-1 - Update to 2.4.3 * Sun Feb 16 2020 Filipe Rosset rosset.filipe@gmail.com - 2.4.2-1 - Update to 2.4.2 * Thu Feb 13 2020 Filipe Rosset rosset.filipe@gmail.com - 2.4.1-1 - Update to 2.4.1 * Mon Feb 10 2020 Filipe Rosset rosset.filipe@gmail.com - 2.4.0-1 - Update to 2.4.0 fixes rhbz#1801462 * Fri Jan 31 2020 Fedora Release Engineering releng@fedoraproject.org - 2.3.5-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild --------------------------------------------------------------------------------