The following Fedora 28 Security updates need testing:
Age URL
137
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d510cfd7eb
jgraphx-3.6.0.0-6.fc28
86
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d7aeaa74da
nodejs-brace-expansion-1.1.11-1.fc28
85
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc073fdc1a
nodejs-atob-2.1.1-1.fc28
78
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9dd3f7c013
unrtf-0.21.9-8.fc28
46
https://bodhi.fedoraproject.org/updates/FEDORA-2018-28e9841baf
docker-latest-1.13.1-37.git9cb56fd.fc28
31
https://bodhi.fedoraproject.org/updates/FEDORA-2018-33fef25ed1
ghc-hakyll-4.10.0.0-3.fc28 pandoc-citeproc-0.12.2.5-4.fc28 ghc-hs-bibutils-6.6.0.0-1.fc28
12
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b1832101b8
tomcat-8.5.32-1.fc28
12
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9565c0bc9a
unixODBC-2.3.7-1.fc28
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e585e25b72
ntp-4.2.8p12-1.fc28
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-683dfde81a xen-4.10.1-6.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5da38940e3
dolphin-emu-5.0-24.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e6894349c9
bouncycastle-1.60-1.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-77e610115a
mariadb-10.2.17-1.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f2b24ce26e
phpMyAdmin-4.8.3-1.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-38bdbafa96
discount-2.2.4-1.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f67fda3db6
community-mysql-5.7.23-1.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4295467df0
libxkbcommon-0.8.2-1.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-065a7722ee
openssh-7.8p1-1.fc28
The following Fedora 28 Critical Path updates have yet to be approved:
Age URL
12
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6076e25d1e
python-productmd-1.16-1.fc28
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-683dfde81a xen-4.10.1-6.fc28
9
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a20e0e3c74
pungi-4.1.27-1.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-647ccf5185 pcre-8.42-3.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-53e7247359
pcre2-10.31-10.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-16c78b3d92 rpm-4.14.2-1.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-43b2955a9a
libvirt-4.1.0-5.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-065a7722ee
openssh-7.8p1-1.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-19774fcd66
kernel-tools-4.17.19-200.fc28 kernel-headers-4.17.19-1.fc28 kernel-4.17.19-200.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-336e4a0736
libldb-1.4.0-4.fc28.1.3.6 samba-4.8.5-0.fc28
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4295467df0
libxkbcommon-0.8.2-1.fc28
The following builds have been pushed to Fedora 28 updates-testing
crawl-0.22.0-1.fc28
flameshot-0.6.0-1.fc28
ga-5.6.5-3.fc28
iyfct-1.0.2-20160510git.7fe93a4.fc28
kiwi-9.16.12-1.fc28
libzypp-17.6.2-1.fc28
rlwrap-0.43-1.fc28
slibtool-0.5.25-1.fc28
snapd-2.35-1.fc28
snapd-glib-1.43-1.fc28
ucx-1.3.1-1.fc28
zypper-1.14.8-1.fc28
Details about builds:
================================================================================
crawl-0.22.0-1.fc28 (FEDORA-2018-92f79dc5ec)
Roguelike dungeon exploration game
--------------------------------------------------------------------------------
Update Information:
- Update to 0.22.0
--------------------------------------------------------------------------------
ChangeLog:
* Sat Aug 11 2018 Antonio Trande <sagitter(a)fedoraproject.org> - 0.22.0-1
- Update to 0.22.0 (bz#1614779)
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.21.1-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1614779 - crawl-0.22.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1614779
--------------------------------------------------------------------------------
================================================================================
flameshot-0.6.0-1.fc28 (FEDORA-2018-e4dbb2801f)
Powerful and simple to use screenshot software
--------------------------------------------------------------------------------
Update Information:
Features ================== * Allow systray customization with themes. Use
"flameshot-tray" as the name of the icon. * Unification of the desktop file
with actions. * Notification when screenshots are saved in the clipboard. *
Use datetime as default name for pics. * Undo/Redo with Ctrl+z and
Ctrl+Shift+z. * Add "Take Screenshot" option as menu item in the systray. *
Add Side-Panel (open it with Space). * Add autostart to config flags. * Add
Pin tool. * Filename: replace colons with dashes. * Add Text tool. * Delete
Imgur image button after uploading it from the preview window. * Capture single
screen: * flameshot screen (capture the screen containing the mouse) and
* flameshot screen -n 1 (capture the first screen). * Store settings colors in
hexadecimal format. Fixes ================== * flameshot full -c shouldn't
block the desktop. * Now you can overwrite exported configuration with the same
name as a previous exports. * Fix flameshot --raw wait time with delay. * Fix
negative selection geometry bug. * Improved hidpi support with some bugs fixed.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Aug 26 2018 Vitaly Zaitsev <vitaly(a)easycoding.org> - 0.6.0-1
- Updated to version 0.6.0.
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
ga-5.6.5-3.fc28 (FEDORA-2018-d0f6b9b482)
Global Arrays Toolkit
--------------------------------------------------------------------------------
Update Information:
fortran integer casting in ga_diag. Fixes #1613089
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 7 2018 Edoardo Apra <edoardo.apra(a)gmail.com> - 5.6.5-3
- fortran integer casting in ga_diag. Fixes #1613089
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.6.5-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1613089 - Possible bug in GA/NWChem when running a RT-TDDFT
https://bugzilla.redhat.com/show_bug.cgi?id=1613089
--------------------------------------------------------------------------------
================================================================================
iyfct-1.0.2-20160510git.7fe93a4.fc28 (FEDORA-2018-38826b8000)
Side scrolling endless runner game
--------------------------------------------------------------------------------
Update Information:
New package
--------------------------------------------------------------------------------
================================================================================
kiwi-9.16.12-1.fc28 (FEDORA-2018-38f2ce8c26)
Flexible operating system image builder
--------------------------------------------------------------------------------
Update Information:
Upgrade to 9.16.12
--------------------------------------------------------------------------------
ChangeLog:
* Sun Aug 26 2018 Neal Gompa <ngompa13(a)gmail.com> - 9.16.12-1
- Upgrade to 9.16.12 (RH#1591056)
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 9.16.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 9.16.0-2
- Rebuilt for Python 3.7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1591056 - kiwi-9.16.12 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1591056
--------------------------------------------------------------------------------
================================================================================
libzypp-17.6.2-1.fc28 (FEDORA-2018-13f9b69e5c)
A package management library
--------------------------------------------------------------------------------
Update Information:
Update to `libzypp-17.6.2` and `zypper-1.14.8` to fix a vulnerability in which a
malicious mirror could send infinite amounts of data to Zypper and it will
consume it without validating how large the download should be.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Aug 26 2018 Neal Gompa <ngompa13(a)gmail.com> - 17.6.2-1
- Rebase to 17.6.2 (#1552594)
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 17.2.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1615232 - libzypp: Download of files with infinite size from a malicious
mirror
https://bugzilla.redhat.com/show_bug.cgi?id=1615232
--------------------------------------------------------------------------------
================================================================================
rlwrap-0.43-1.fc28 (FEDORA-2018-296da4b838)
Wrapper for GNU readline
--------------------------------------------------------------------------------
Update Information:
### Packaging changes - Update upstream URL - Tests now enabled during build
time ### New features - Filters can now be written in python (thanks to
Hisanobu Okuda) - Filters can respond to hotkeys (i.e. single keypresses bound
to rlwrap-hotkey in .inputrc) ### Bugfixes - rlwrap now always searches
terminfo before termcap. - playing back a readline macro consisting of more than
one line would crash rlwrap. - rlwrap --one-shot could accept more than one line
when input in quick succession.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Aug 25 2018 Michel Alexandre Salim <salimma(a)fedoraproject.org> - 0.43-1
- Update to 0.43
- Update homepage to GitHub
- Run tests
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.42-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1442611 - update rlwrap to 0.43
https://bugzilla.redhat.com/show_bug.cgi?id=1442611
--------------------------------------------------------------------------------
================================================================================
slibtool-0.5.25-1.fc28 (FEDORA-2018-6d77e86bbf)
A skinny libtool implementation, written in C
--------------------------------------------------------------------------------
Update Information:
Update to 0.5.25
--------------------------------------------------------------------------------
ChangeLog:
* Sun Aug 26 2018 Neal Gompa <ngompa13(a)gmail.com> - 0.5.25-1
- Update to 0.5.25
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.24-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1602757 - slibtool-0.5.25 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1602757
--------------------------------------------------------------------------------
================================================================================
snapd-2.35-1.fc28 (FEDORA-2018-5d4624b7af)
A transactional software package manager
--------------------------------------------------------------------------------
Update Information:
Updates to `snapd-2.35` and `snapd-glib-1.43`. #### snapd 2.35 Some highlights:
* Support to build/seed core18 based images * Interface improvements: i2c
(sysfs-name support) * Show verified publishers with a green check mark *
Interface connection via gadget * Hardware watchdog on Ubuntu Core * New dvd
interface * New {contacts,calendar}-service interfaces * Snapd selftest check on
startup #### snapd-glib 1.43 * New API: - `snapd_client_get_snap_async`
- `snapd_client_get_snap_finish` - `snapd_client_get_snap_sync` -
`snapd_client_get_snaps_async` - `snapd_client_get_snaps_finish` -
`snapd_client_get_snap_sync` - `snapd_snap_get_publisher_display_name`
- `snapd_snap_get_publisher_id` - `snapd_snap_get_publisher_username`
- `snapd_snap_get_publisher_validation` -
`snapd_system_information_get_refresh_hold` -
`snapd_system_information_get_refresh_last` -
`snapd_system_information_get_refresh_next` -
`snapd_system_information_get_refresh_schedule` -
`snapd_system_information_get_refresh_timer` -
`snapd_system_information_get_sandbox_features` -
`SNAPD_ERROR_AUTH_CANCELLED` - `SNAPD_FIND_FLAGS_SCOPE_WIDE` * Deprecated
API: - `snapd_client_list_async` - `snapd_client_list_finish`
- `snapd_client_list_sync` * Fix small memory leak * Fix compile warnings
--------------------------------------------------------------------------------
ChangeLog:
* Sat Aug 25 2018 Neal Gompa <ngompa13(a)gmail.com> - 2.35-1
- Release 2.35 to Fedora (RH#1598946)
* Mon Aug 20 2018 Michael Vogt <mvo(a)ubuntu.com>
- New upstream release 2.35
- snapstate: add support for gadget tracks in model assertion
- image: add support for "gadget=track"
- asserts: add support for gadget tracks in the model assertion
- interfaces: add new "sysfs-name" to i2c interfaces code
- overlord: handle sigterm during shutdown better
- wayland: add extra sockets that are used by older toolkits
- snap: fix advice json
- tests: fix autopkgtest failures in cosmic
- store: backward compatible instance-key handling for non-instance
snaps
- snapstate: ensure normal snaps wait for the "snapd" snap on
refresh
- interfaces: add cpu-control for setting CPU tunables
- debian: add missing breaks on comisc
- overlord/devicestate: DTRT w/a snap proxy to reach a serial vault
- devicestate: only run device-hook when fully seeded
- seccomp: conditionally add socketcall() based on system and base
- interfaces/builtin: addtl network-manager resolved DBus fix
- hookstate: simplify some hook tests
- udev: skip TestParseUdevEvent on ppc
- interfaces: miscellaneous policy updates
- debian: add tzdata to build-dep to ensure snapd builds correctly
- interfaces/builtin: network-manager resolved DBus changes
- tests: add spread test for fedora29 base snap
- cmd/libsnap: treat distributions with VARIANT_ID=snappy as "core"
- dirs: fix SnapMountDir inside a Fedora base snap
- tests: fix snapd-failover for core18 with external backend
- overlord/snapstate: always clean SnapState when doing Get()
- overlod/ifacestate: always use a new SnapState when fetching the
snap state
- overlord/devicestate: have the serial request talk to the proxy if
set
- interfaces/hotplug: udevadm output parser
- tests: New test for daemon-notify interface
- image: ensure "core" is ordered early if base: and core is used
- cmd/snap-confine: snap-device-helper parallel installs support
- tests: enable interfaces-framebuffer everywhere
- tests: reduce nc wait time from 2 to 1 second
- snap/snapenv: add snap instance specific variables
- cmd/snap-confine: add minimal test for snap-device-helper
- tests: enable snapctl test on core18
- overlord: added UDevMonitor for future hotplug support
- wrappers: do not glob when removing desktop files
- tests: add dbus monitor log to interfaces-accounts-service
- tests: add core-18 systems to external backend
- wrappers: account for changed app wrapper in parallel installed
snaps
- wrappers: make sure that the tests pass on non-Ubuntu too
- many: add snapd snap failure handling
- tests: new test for dvb interface
- configstate: accept refresh.timer=managed
- tests: new test for snap logs command
- wrapper: generate all the snapd unit files when generating
wrappers
- store: keep all files with link-count > 1 in the cache
- store: be less verbose in the common refresh case of "no updates"
- snap-confine: update snappy-app-dev path
- debian: ensure dependency on fixed apt on 18.04
- snapd: add initial software watchdog for snapd
- daemon, systemd: change journalctl -n=all to --no-tail
- systemd: fix snapd.apparmor.service.in dependencies
- snapstate: refuse to remove bases or core if snaps need them
- snap: introduce package-level helpers for building snap related
directory/file paths
- overlord/devicestate: deny parallel install of kernel or gadget
snaps
- store: clean up parallel-install TODOs in store tests
- timeutil: fix first weekday of the month schedule
- interfaces: match all possible tty but console
- tests: shellchecks part 5
- cmd/snap-confine: allow ptrace read for 4.18 kernels
- advise: make the bolt database do the atomic rename dance
- tests/main/apt-hooks: debug dump of commands.db
- tests/lib/prepare-restore: update Arch Linux kernel LOCALVERSION
handling
- snap: validate instance name as part of Validate()
- daemon: if a snap is inactive, don't ask systemd about its
services.
- udev: skip TestParseUdevEvent on s390x
- tests: switch core-amd64-18 to use `kernel: pc-kernel=18`
- asserts,image: add support for new kernel=track syntax
- tests: new gce image for fedora 27
- interfaces/apparmor: use the cache in mtime-resilient way
- store, overlord/snapstate: introduce instance name in store APIs
- tests: drive-by cleanup of redudant pkgname matching
- tests: ensure apt-hook is only run after catalog update ran
- tests: use pkill instead of kilall
- tests/main: another bunch of updates for Amazon Linux 2
- tests/lib/snaps: avoid using relative command paths that go up in
the directory tree
- tests: disable/fix more tests for Amazon Linux 2
- overlord: introduce InstanceKey to SnapState and SnapSetup,
renames
- daemon: make sure most change generating handlers can produce
errors with kinds
- tests/main/interfaces-calendar-service: skip the test on AMZN2
- tests/lib/snaps: avoid using relative command paths that go up in
the directory tree
- cmd/snap: add a green check mark to verified publishers
- cmd/snap: fix two issues in the cmd/snap unit tests
- packaging/fedora: fix target path of /snap symlink
- cmd/snap: support `--last=<type>?` to mean "no error on empty"
- cmd/snap-confine: (nvidia) pick up libnvidia-glvkspirv.so
- strutil: detect and bail out of Unmarshal on duplicate key
- packaging/fedora(amzn2): disable SELinux, drop dependency on
squashfuse for AMZN2
- spread, tests: add support for Amazon Linux 2
- packaging/fedora: Add Amazon Linux 2 support
- many: make Wait/Stop optional on StateManagers
- snap/squashfs: stop printing unsquashfs info to stderr
- snap: add support for `snap advise-snap --from-apt`
- overlord/ifacestate: ignore connect if already connected
- tests: change the service snap used instead of network-bind-
consumer
- interfaces/network-control: update for wpa-supplicant and ifupdown
- tests: fix raciness in stop mode tests
- logger: try to not have double dates
- debian: use deb-systemd-invoke instead of systemctl directly
- tests: run all main tests on core18
- many: finish sharing a single TaskRunner with all the the managers
- interfaces/repo: added AllHotplugInterfaces helper
- snapstate: ensure kernel-track is honored on switch/refresh
- overlord/ifacestate: support implicit slots on snapd
- image: add support for "kernel-track" in `snap prepare-image`
- tests: add test that ensures we do not boot any system in degraded
state
- tests: update tests to work on core18
- cmd/snap: check for typographic dashes in command
- tests: fix tests expecting old email address
- client: add some existing error kinds that were not listed in
client.go
- tests: add missing slots in classic and core provider test snaps
- overlord,daemon,cmd: re-map snap names around the edges of snapd
- tests: use install_local in snap-run-hooks
- coreconfig: add support for `snap set system network.disable-
ipv6`
- overlord/snapstate: dedupe default content providers
- osutil/udev: sync with upstream
- debian: do not ship snapd.apparmor.service on ubuntu
- overlord: have SnapManager use a passed in TaskRunner created by
Overlord
- many: streamline the generic conflict check mechanisms
- tests: remove unneeded setup code in snap-run-symlink
- cmd/snap: print unset license as "unset", instead of "unknown"
- asserts: add (optional) kernel-track to model assertion
- snap/squashfs, tests: pass -n[o-progress] to {mk,un}squashfs
- interfaces/pulseaudio: be clear that the interface allows playback
and record
- snap: support hook environment
- interfaces: fix typo "daemonNotify" (add missing "n")
- interfaces: tweak tests of daemon-notify, use common naming
- interfaces: allow invoking systemd-notify when daemon-notify is
connected
- store: make snap blobs be 0600
- interfaces,daemon: move JSON types to the daemon
- tests: prepare needs to handle bin/snapctl being a symlink
- tests: do not mask errors in interfaces-timezone-control (#5405)
- packaging: put snapctl into /usr/lib/snapd and symlink in usr/bin
- tests: add basic integration test for spread hold
- overlord/snapstate: improve PlugsOnly comment
- many: assorted shellcheck fixes
- store, daemon, client, cmd/snap: expose "scope", default to wide
- snapstate: allow setting "refresh.timer=managed"
- cmd/snap: display a link to data privacy notice for interactive
snap login
- client, cmd/snap: pass snap instance name when installing from
file
- cmd/snap: add 'debug paths' command
- snapstate: make sure all *link-*snap tasks carry a snap type and
further hints
- devicestate: fix race when refreshing a snap with snapd-control
- tests: fix tests on arch
- tests: start active system units on reset
- tests: new test for joystick interface
- tests: moving install of dependencies to pkgdb helper
- tests: enable new fedora image with test dependencies installed
- tests: start using the new opensuse image with test dependencies
- tests: check catalog refresh before and after restart snapd
- tests: stop restarting journald service on prepare
- interfaces: make core-support a no-op interface
- interfaces: prefer "snapd" when resolving implicit connections
- interfaces/hotplug: add hotplug Specification and
HotplugDeviceInfo
- many: lessen the use of core-support
- tests: fixes for the autopkgtest failures in cosmic
- tests: remove extra ' which breaks interfaces-bluetooth-control
test
- dirs: fix antergos typo
- tests: use grep to avoid non-matching messages from MATCH
- dirs: improve distro detection for Antegros
- vendor: switch to latest bson
- interfaces/builtin: create can-bus interface
- tests: "snap connect" is idempotent so just connect
- many: use extra "releases" information on store "revision-not-
found" errors to produce better errors
- interfaces: treat "snapd" snap as type:os
- interfaces: tweak tests to have less repetition of "core" and
"ubuntu���
- tests: simplify econnreset test
- snap: add helper for renaming slots
- devicestate: fix panic in firstboot code when no snaps are seeded
- tests: add artful for sru validation on google backend
- snap,interfaces: move interface name validation to snap
- overlord/snapstate: introduce path to fake backend ops
- cmd/snap-confine: fix snaps running on core18
- many: expose publisher's validation throughout the API
* Fri Jul 27 2018 Michael Vogt <mvo(a)ubuntu.com>
- New upstream release 2.34.3
- interfaces/apparmor: use the cache in mtime-resilient way
- cmd/snap-confine: (nvidia) pick up libnvidia-glvkspirv.so
- snapstate: allow setting "refresh.timer=managed"
- spread: switch Fedora and openSUSE images
* Thu Jul 19 2018 Michael Vogt <mvo(a)ubuntu.com>
- New upstream release 2.34.2
- packaging: fix bogus date in fedora snapd.spec
- tests: fix tests expecting old email address
* Tue Jul 17 2018 Michael Vogt <mvo(a)ubuntu.com>
- New upstream release 2.34.1
- tests: cherry-pick test fixes from master for 2.34
- coreconfig: add support for `snap set system network.disable-
ipv6`
- debian: do not ship snapd.apparmor.service on ubuntu
- overlord/snapstate: dedupe default content providers
- interfaces/builtin: create can-bus interface
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.33.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Fri Jul 6 2018 Michael Vogt <mvo(a)ubuntu.com>
- New upstream release 2.34
- store, daemon, client, cmd/snap: expose "scope", default to wide*
- tests: fix arch tests
- snapstate: make sure all *link-*snap tasks carry a snap type and
further hints
- snapstate: allow setting "refresh.timer=managed"
- cmd/snap: display a link to data privacy notice for interactive
snap login
- devicestate: fix race when refreshing a snap with snapd-control
- tests: skip interfaces-framebuffer when no /dev/fb0 is found
- tests: run interfaces-contacts-service only where test-snapd-eds
is available
- many: expose publisher's validation throughout the API
- many: use extra "releases" information on store "revision-not-
found" errors to produce better errors
- dirs: improve distro detection for Antegros
- Revert "dirs: improve identification of Arch Linux like systems"
- devicestate: fix panic in firstboot code when no snaps are seeded
- i18n: use xgettext-go --files-from to avoid running into cmdline
size limits
- interfaces: move ValidateName helper to utils
- snapstate,ifstate: wait for pending restarts before auto-
connecting
- snap: account for parallel installs in wrappers, place info and
tests
- configcore: fix incorrect handling of keys with numbers (like
gpu_mem_512)
- tests: fix tests when no keyboard input detected
- overlord/configstate: add watchdog options
- snap-mgmt: fix for non-existent dbus system policy dir,
shellchecks
- tests/main/snapd-notify: use systemd's service properties rater
than the journal
- snapstate: allow removal of snap.TypeOS when using a model with a
base
- interfaces: make findSnapdPath smarter
- tests: run "arp" tests only if arp is available
- spread: increase the number of auto retries for package downloads
in opensuse
- cmd/snap-confine: fix nvidia support under lxd
- corecfg: added experimental.hotplug feature flag
- image: block installation of parallel snap instances
- interfaces: moved normalize method to interfaces/utils and made it
public
- api/snapctl: allow -h and --help for regular users.
- interfaces/udisks2: also implement implicit classic slot
- cmd/snap-confine: include CUDA runtime libraries
- tests: disable auto-refresh test on core18
- many: switch to account validation: unproven|verified
- overlord/ifacestate: get/set connection state only via helpers
- tests: adding extra check to validate journalctl is showing
current test data
- data: add systemd environment configuration
- i18n: handle write errors in xgettext-go
- snap: helper for validating snap instance names
- snap{/snaptest}: set instance key based on snap name
- userd: fix running unit tests on KDE
- tests/main/econnreset: limit ingress traffic to 512kB/s
- snap: introduce a struct Channel to represent store channels, and
helpers to work with it
- tests: add fedora to distro_clean_package_cache function
- many: rename snap.Info.StoreName() to snap.Info.SnapName()
- tests: add spread test to ensure snapd/core18 are not removable
- tests: tweaks for running the main tests on core18
- overlord/{config,snap}state: introduce experimental.parallel-
instances feature flag
- strutil: support iteration over almost clean paths
- strutil: add PathIterator.Rewind
- tests: update interfaces-timeserver-control to core18
- tests: add halt-timeout to google backend
- tests: skip security-udev-input-subsystem without /dev/input/by-
path
- snap: introduce the instance key field
- packaging/opensuse: remaining packaging updates for 2.33.1
- overlord/snapstate: disallow installing snapd on baseless models
- tests: disable core tests on all core systems (16 and 18)
- dirs: improve identification of Arch Linux like systems
- many: expose full publisher info over the snapd API
- tests: disable core tests on all core systems (16 and 18)
- tests/main/xdg-open: restore or clean up xdg-open
- tests/main/interfaces-firewall-control: shellcheck fix
- snapstate: sort "snapd" first
- systemd: require snapd.socket in snapd.seeded.service; make sure
snapd.seeded
- spread-shellcheck: use the latest shellcheck available from snaps
- tests: use "ss" instead of "netstat" (netstat is not available in
core18)
- data/complete: fix three out of four shellcheck warnings in
data/complete
- packaging/opensuse: fix typo, missing assignment
- tests: initial core18 spread image building
- overlord: introduce a gadget-connect task and use it at first boot
- data/completion: fix inconsistency in +x and shebang
- firstboot: mark essential snaps as "Required" in the state
- spread-shellcheck: use a whitelist of files that are allowed to
fail validation
- packaging/opensuse: build position-independent binaries
- ifacestate: prevent running interface hooks twice when self-
connecting on autoconnect
- data: remove /bin/sh from snapd.sh
- tests: fix shellcheck 0.5.0 warnings
- packaging/opensuse: snap-confine should be 06755
- packaging/opensuse: ship apparmor integration if enabled
- interfaces/udev,misc: only trigger udev events on input subsystem
as needed
- packaging/opensuse: add missing bits for snapd.seeded.service
- packaging/opensuse: don't use in comments
- tests: shellchecks part 4
- many: rename snap.Info.Name() to snap.Info.InstanceName(), leave
parallel-install TODOs
- store: drop unused: channel map types, and details fixture.
- store: have a basic test about the unmarshalling of /search
results
- tests: show executed tests on current system when a test fails
- tests: fix for the download of the big snap
- interfaces/apparmor: add chopTree
- tests: remove double debug: | entry in tests and add more checks
- cmd/snap-update-ns: introduce mimicRequired helper
- interfaces: move assertions around for better failure line number
- store: log a nice clear "download succeeded" message
- snap: run snap-confine from the re-exec location
- snapstate: support restarting snapd from the snapd snap on core18
- tests: show status of the partial test-snapd-huge snap in
econnreset test
- tests: fix interfaces-calendar-service test when gvfsd-metadata
loks the xdg dirctory
- store: switch store.SnapInfo to use the new v2/info endpoint
- interfaces: add Repository.AllInterfaces
- snapstate: stop using evolving SnapSpec internally, use an
internal-only snapSpec instead
- cmd/libsnap-confine-private: introduce a helper for splitting snap
name
- tests: econnreset/retry tweaks
- store, et al: kill dead code that uses the bulk endpoint
- tests/lib/prepare-restore: fix upgrade/reboot handling on arch
- cmd/snap-update-ns,strutil: move PathIterator to strutil, add
Depth helper
- data/systemd/snapd.run-from-snap: ensure snapd tooling is
available
- store: switch connectivity check to use v2/info
- devicestate: support seeding from a base snap instead of core
- snapstate,ifacestate: remove core-phase-2 handling
- interfaces/docker-support: update for docker 18.05
- tests: enable fedora 28 again
- overlord/ifacestate: simplify checkConnectConflicts and also
connect signature
- snap: parse connect instructions in gadget.yaml
- tests: fix snapd-repair.timer on ubuntu-core-snapd-run- from-snap
test
- interfaces/apparmor: allow killing snap-update-ns
- tests: skip "try" test on s390x
- store, image: have 'snap download' use v2/refresh action=download
- interfaces/policy: test that base policy can be parsed
- tests: publish test-snapd-appstreamid for any architecture
- snap: don't include newline in hook environment
- cmd/snap-update-ns: use RCall with SyscallsEqual
- cmd/snap-update-ns: add IsSnapdCreatedPrivateTmpfs and tests
- tests: skip security-dev-input-event-denied on s390x/arm64
- interfaces: add the dvb interface
- daemon: paging is not a thing.
- cmd/snap-mgmt: remove system key on purge
- testutil: syscall sequence checker
- cmd/snap-update-ns: fix a leaking file descriptor in MkSymlink
- packaging: use official bolt in the errtracker on fedora
- many: add `snap debug connectivity` command* many: add `snap debug
connectivity` command
- configstate: deny configuration of base snaps and for the "snapd"
snap
- interfaces/raw-usb: also allow usb serial devices
- snap: reject more layout locations
- errtracker: do not send duplicated reports
- httputil: extra debug if an error is not retried
- cmd/snap-update-ns: improve wording in many errors
- cmd/snap: use snaptest.MockSnapCurrent in `snap run` tests
- cmd/snap-update-ns: add helper for checking for read-only
filesystems
- interfaces/builtin/docker: use commonInterface over specific
struct
- testutil: add test support for Fstatfs
- cmd/snap-update-ns: discard the concept of segments
- cmd/libsnap-confine-private: helper for extracting store snap name
from local-name
- tests: fix flaky test for hooks undo
- interfaces: add {contacts,calendar}-service interfaces
- tests: retry 'restarting into..' match in the snap-confine-from-
core test
- systemd: adjust TestWriteMountUnitForDirs() to use
squashfs.MockUseFuse(false)
- data: add helper that can generate/start/stop the snapd service
- sefltest: advise reboot into 4.4 on trusty running 3.13
- selftest: add new selftest package that tests squashfs mounting
- store, jsonutil: move store.getStructFields to
jsonutil.StructFields
- ifacestate: improved conflict and error handling when creating
autoconnect tasks
- cmd/snap-confine: applied make fmt
- interfaces/udev: call 'udevadm settle --timeout=10' after
triggering events
- tests: wait more time until snap start to be downloaded on
econnreset test
- snapstate: ensure fakestore returns TypeOS for the core snap
- tests: fix lxd test which hangs on restore
- cmd/snap-update-ns: add PathIterator
- asserts,image: add support for models with bases
- tests: shellchecks part 3
- overlord/hookstate: support undo for hooks
- interfaces/tpm: Allow access to the kernel resource manager
- tests: skip appstream-id test for core systems 32 bits
- interfaces/home: remove redundant common interface assignment
- tests: reprioritise a few tests that are known to be slow
- cmd/snap: small help tweaks and fixes
- tests: add test to ensure /dev/input/event* for non-joysticks is
denied
- spread-shellcheck: silly fix & pep8
- spread: switch fedora 28 to manual
- client,cmd/snap,daemon,tests: expose base of a snap over API, show
it in snap info --verbose
- tests: fix lxd test - --auto now sets up networking
- tests: adding fedora-28 to spread.yaml
- interfaces: add juju-client-observe interface
- client, daemon: add a "mounted-from" entry to local snaps' JSON
- image: set model.DisplayName() in bootenv as "snap_menuentry"
- packaging/opensuse: Refactor packaging to support all openSUSE
targets
- interfaces/joystick: force use of the device cgroup with joystick
interface
- interfaces/hardware-observe: allow access to /etc/sensors* for
libsensors
- interfaces: remove Plug/Slot types
- interface hooks: update old AutoConnect methods
- snapcraft: run with DEB_BUILD_OPTIONS=nocheck
- overlord/{config,snap}state: the number of inactive revisions is
config
- cmd/snap: check with snapd for unknown sections
- tests: moving test helpers from sh to bash
- data/systemd: add snapd.apparmor.service
- many: expose AppStream IDs (AKA common ID)
- many: hold refresh when on metered connections
- interfaces/joystick: also support modern evdev joysticks and
gamepads
- xdgopenproxy: skip TestOpenUnreadableFile when run as root
- snapcraft: use dpkg-buildpackage options that work in xenial
- spread: openSUSE LEAP 42.2 was EOLd in January, remove it
- get-deps: work with an unset GOPATH too
- interfaces/apparmor: use strict template on openSUSE tumbleweed
- packaging: filter out verbose flags from "dh-golang"
- packaging: fix description
- snapcraft.yaml: add minimal snapcraft.yaml with custom build
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1610781 - snapd-glib-1.43 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1610781
[ 2 ] Bug #1572714 - SELinux is preventing ssh-keygen from 'open' accesses on
the plik /etc/passwd.
https://bugzilla.redhat.com/show_bug.cgi?id=1572714
[ 3 ] Bug #1572713 - SELinux is preventing ssh-keygen from 'getattr' accesses on
the plik /etc/passwd.
https://bugzilla.redhat.com/show_bug.cgi?id=1572713
[ 4 ] Bug #1567933 - SELinux is preventing snapd from 'map' accesses on the
Datei /var/cache/snapd/commands.db.
https://bugzilla.redhat.com/show_bug.cgi?id=1567933
[ 5 ] Bug #1567626 - SELinux is preventing snap-seccomp from 'open' accesses on
the file /var/lib/sss/mc/passwd.
https://bugzilla.redhat.com/show_bug.cgi?id=1567626
[ 6 ] Bug #1562496 - SELinux is preventing snapd from 'getattr' accesses on the
file /usr/bin/ssh-keygen.
https://bugzilla.redhat.com/show_bug.cgi?id=1562496
[ 7 ] Bug #1559253 - SELinux is preventing ssh-keygen from 'map' accesses on the
Datei /usr/bin/ssh-keygen.
https://bugzilla.redhat.com/show_bug.cgi?id=1559253
[ 8 ] Bug #1558850 - SELinux is preventing systemd from 'getattr' accesses on
the lnk_file /var/lib/snapd/snap/core/current.
https://bugzilla.redhat.com/show_bug.cgi?id=1558850
[ 9 ] Bug #1598946 - snapd-2.35 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1598946
[ 10 ] Bug #1572715 - SELinux is preventing ssh-keygen from 'read' accesses on
the plik /etc/passwd.
https://bugzilla.redhat.com/show_bug.cgi?id=1572715
--------------------------------------------------------------------------------
================================================================================
snapd-glib-1.43-1.fc28 (FEDORA-2018-5d4624b7af)
Library providing a GLib interface to snapd
--------------------------------------------------------------------------------
Update Information:
Updates to `snapd-2.35` and `snapd-glib-1.43`. #### snapd 2.35 Some highlights:
* Support to build/seed core18 based images * Interface improvements: i2c
(sysfs-name support) * Show verified publishers with a green check mark *
Interface connection via gadget * Hardware watchdog on Ubuntu Core * New dvd
interface * New {contacts,calendar}-service interfaces * Snapd selftest check on
startup #### snapd-glib 1.43 * New API: - `snapd_client_get_snap_async`
- `snapd_client_get_snap_finish` - `snapd_client_get_snap_sync` -
`snapd_client_get_snaps_async` - `snapd_client_get_snaps_finish` -
`snapd_client_get_snap_sync` - `snapd_snap_get_publisher_display_name`
- `snapd_snap_get_publisher_id` - `snapd_snap_get_publisher_username`
- `snapd_snap_get_publisher_validation` -
`snapd_system_information_get_refresh_hold` -
`snapd_system_information_get_refresh_last` -
`snapd_system_information_get_refresh_next` -
`snapd_system_information_get_refresh_schedule` -
`snapd_system_information_get_refresh_timer` -
`snapd_system_information_get_sandbox_features` -
`SNAPD_ERROR_AUTH_CANCELLED` - `SNAPD_FIND_FLAGS_SCOPE_WIDE` * Deprecated
API: - `snapd_client_list_async` - `snapd_client_list_finish`
- `snapd_client_list_sync` * Fix small memory leak * Fix compile warnings
--------------------------------------------------------------------------------
ChangeLog:
* Sat Aug 25 2018 Neal Gompa <ngompa13(a)gmail.com> - 1.43-1
- Update to 1.43
- New APIs for getting snaps asynchronously
- New APIs for getting system info and publisher info
- Deprecated async client list APIs
- Fix small memory leak
- Fix compile warnings
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.41-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1610781 - snapd-glib-1.43 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1610781
[ 2 ] Bug #1572714 - SELinux is preventing ssh-keygen from 'open' accesses on
the plik /etc/passwd.
https://bugzilla.redhat.com/show_bug.cgi?id=1572714
[ 3 ] Bug #1572713 - SELinux is preventing ssh-keygen from 'getattr' accesses on
the plik /etc/passwd.
https://bugzilla.redhat.com/show_bug.cgi?id=1572713
[ 4 ] Bug #1567933 - SELinux is preventing snapd from 'map' accesses on the
Datei /var/cache/snapd/commands.db.
https://bugzilla.redhat.com/show_bug.cgi?id=1567933
[ 5 ] Bug #1567626 - SELinux is preventing snap-seccomp from 'open' accesses on
the file /var/lib/sss/mc/passwd.
https://bugzilla.redhat.com/show_bug.cgi?id=1567626
[ 6 ] Bug #1562496 - SELinux is preventing snapd from 'getattr' accesses on the
file /usr/bin/ssh-keygen.
https://bugzilla.redhat.com/show_bug.cgi?id=1562496
[ 7 ] Bug #1559253 - SELinux is preventing ssh-keygen from 'map' accesses on the
Datei /usr/bin/ssh-keygen.
https://bugzilla.redhat.com/show_bug.cgi?id=1559253
[ 8 ] Bug #1558850 - SELinux is preventing systemd from 'getattr' accesses on
the lnk_file /var/lib/snapd/snap/core/current.
https://bugzilla.redhat.com/show_bug.cgi?id=1558850
[ 9 ] Bug #1598946 - snapd-2.35 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1598946
[ 10 ] Bug #1572715 - SELinux is preventing ssh-keygen from 'read' accesses on
the plik /etc/passwd.
https://bugzilla.redhat.com/show_bug.cgi?id=1572715
--------------------------------------------------------------------------------
================================================================================
ucx-1.3.1-1.fc28 (FEDORA-2018-e5be064d57)
UCX is a communication library implementing high-performance messaging
--------------------------------------------------------------------------------
Update Information:
See NEWS for details
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 20 2018 Andrey Maslennikov <andreyma(a)mellanox.com> 1.3.1-1
- See NEWS for details
* Thu Aug 16 2018 Andrey Maslennikov <andreyma(a)mellanox.com> 1.3.0-1
- Explicitly set gcc-c++ as requirements
* Wed Mar 7 2018 Andrey Maslennikov <andreyma(a)mellanox.com> 1.3.0-1
- See NEWS for details
--------------------------------------------------------------------------------
================================================================================
zypper-1.14.8-1.fc28 (FEDORA-2018-13f9b69e5c)
Command line package manager using libzypp
--------------------------------------------------------------------------------
Update Information:
Update to `libzypp-17.6.2` and `zypper-1.14.8` to fix a vulnerability in which a
malicious mirror could send infinite amounts of data to Zypper and it will
consume it without validating how large the download should be.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Aug 26 2018 Neal Gompa <ngompa13(a)gmail.com> - 1.14.8-1
- Update to 1.14.8 (#1555114)
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.14.3-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Thu Jun 28 2018 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.14.3-2
- Perl 5.28 rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1615232 - libzypp: Download of files with infinite size from a malicious
mirror
https://bugzilla.redhat.com/show_bug.cgi?id=1615232
--------------------------------------------------------------------------------