The following Fedora 29 Security updates need testing:
Age URL
53
https://bodhi.fedoraproject.org/updates/FEDORA-2019-49f80a78bc
mingw-sqlite-3.26.0.0-1.fc29
34
https://bodhi.fedoraproject.org/updates/FEDORA-2019-fa5843e0e1
asterisk-16.2.1-1.fc29
28
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4d83e78ad8
libu2f-host-1.1.8-1.fc29
28
https://bodhi.fedoraproject.org/updates/FEDORA-2019-f781d5c4c6
ntp-4.2.8p13-1.fc29
20
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c84f291592
WALinuxAgent-2.2.38-1.fc29
15
https://bodhi.fedoraproject.org/updates/FEDORA-2019-7528388823
chicken-5.0.0-2.fc29
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-fa61af95b3
aria2-1.34.0-4.fc29
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-fa59f1ed49
clamav-0.101.2-1.fc29
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-a66789a334 glpi-9.3.3-2.fc29
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-817ff2201f pspp-1.2.0-2.fc29
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d05bc7e3df
golang-1.11.6-1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9e67979b2a
python-notebook-5.7.8-1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e4405b4c9f
checkstyle-8.0-4.1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b3bfc61567
libvirt-4.7.0-2.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-da36d5d484 php-7.2.17-1.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-119b14075a
httpd-2.4.39-2.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-36ce1cb623
nodejs-simple-markdown-0.4.4-1.fc29
The following Fedora 29 Critical Path updates have yet to be approved:
Age URL
24
https://bodhi.fedoraproject.org/updates/FEDORA-2019-940d3922ce koji-1.17.0-5.fc29
23
https://bodhi.fedoraproject.org/updates/FEDORA-2019-5329292fc2
fedfind-4.2.2-1.fc29 python-productmd-1.20-1.fc29
20
https://bodhi.fedoraproject.org/updates/FEDORA-2019-96c964d319 sddm-0.18.0-4.fc29
15
https://bodhi.fedoraproject.org/updates/FEDORA-2019-f4b2308023
iproute-5.0.0-2.fc29
8
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d04731547a
python3-3.7.3-1.fc29
8
https://bodhi.fedoraproject.org/updates/FEDORA-2019-412c8b4a63 pcre2-10.32-9.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b3bfc61567
libvirt-4.7.0-2.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-bb2c136543
openjpeg2-2.3.1-1.fc29 mingw-openjpeg2-2.3.1-1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-f9d5f00a26 quota-4.04-11.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-bb5f7ef22b
pungi-4.1.35-1.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d67ec97b0b gtk3-3.24.1-3.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b9b45d34a2
hostname-3.20-7.fc29
The following builds have been pushed to Fedora 29 updates-testing
ansible-2.7.10-1.fc29
beakerlib-1.18-2.fc29
cldr-emoji-annotation-35.12.14971_0-1.fc29
dgit-8.4-1.fc29
e2fsprogs-1.44.6-1.fc29
fedora-messaging-1.6.0-1.fc29
feh-3.1.3-1.fc29
freeipa-healthcheck-0.1-2.fc29
fuse-2.9.9-2.fc29
glibc-2.28-27.fc29
hydrogen-0.9.7-9.fc29
kernel-5.0.6-200.fc29
kernel-headers-5.0.6-200.fc29
kernel-tools-5.0.6-200.fc29
libfullock-1.0.32-1.fc29
livecd-tools-26.1-3.fc29
lua-cqueues-20171014-3.fc29
mariadb-java-client-2.4.1-1.fc29
module-build-service-2.19.0-1.fc29
pdd-1.4-1.fc29
perl-GitLab-API-v4-0.18-1.fc29
php-theseer-tokenizer-1.1.2-1.fc29
python-ipdb-0.12-1.fc29
rssguard-3.5.7-1.fc29
sane-backends-1.0.27-23.fc29
sos-collector-1.7-2.fc29
swift-lang-5.0-0.53.20190325gitba33f9e.fc29
umr-1.0-2.20190403git1139876.fc29
Details about builds:
================================================================================
ansible-2.7.10-1.fc29 (FEDORA-2019-5166bd25a3)
SSH-based configuration management, deployment, and task execution system
--------------------------------------------------------------------------------
Update Information:
Update to 2.7.10 bugfix release. See
https://github.com/ansible/ansible/blob/stable-2.7/changelogs/CHANGELOG-v...
for detailed information.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 4 2019 Kevin Fenzi <kevin(a)scrye.com> - 2.7.10-1
- Update to 2.7.10. Fixes bug #1696379
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1696379 - ansible-2.7.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1696379
--------------------------------------------------------------------------------
================================================================================
beakerlib-1.18-2.fc29 (FEDORA-2019-93d136fb75)
A shell-level integration testing library
--------------------------------------------------------------------------------
Update Information:
rebase to beakerlib-1.18 - support for dnf/dnf download - support direct
systemctl call - netstat replaced by ss - ability to run without python (no
journal.xml) - better handling of reboots - better handling of persistent data -
final report polishing - better compatibility with old bash - <prefix>LibraryDir
variable pointing to the library directory for all imported libraries - fallback
to curl if wget is not available - updated documentation
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 4 2019 Dalibor Pospisil <dapospis(a)redhat.com> - 1.18-2
- rebase to beakerlib-1.18
- support for dnf/dnf download
- support direct systemctl call
- netstat replaced by ss
- ability to run without python (no journal.xml)
- better handling of reboots
- better handling of persistent data
- final report polishing
- better compatibility with old bash
- <prefix>LibraryDir variable pointing to the library directory for all imported
libraries
- fallback to curl if wget is not available
- updated documentation
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.17-20
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
cldr-emoji-annotation-35.12.14971_0-1.fc29 (FEDORA-2019-0850d45202)
Emoji annotation files in CLDR
--------------------------------------------------------------------------------
Update Information:
Update Emoji 12 and CLDR release 35.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 4 2019 Takao Fujiwara <tfujiwar(a)gmail.com> - 35.12.14971_0-1
- Integrated release-35
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1696104 - cldr-emoji-annotation-35.12.14971_0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1696104
--------------------------------------------------------------------------------
================================================================================
dgit-8.4-1.fc29 (FEDORA-2019-945ac1d763)
Integration between git and Debian-style archives
--------------------------------------------------------------------------------
Update Information:
- new upstream version 8.4, fixes rhbz #1684723
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 4 2019 Filipe Rosset <rosset.filipe(a)gmail.com> - 8.4-1
- new upstream version 8.4, fixes rhbz #1684723
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 8.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1684723 - dgit-8.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1684723
--------------------------------------------------------------------------------
================================================================================
e2fsprogs-1.44.6-1.fc29 (FEDORA-2019-b4207428d3)
Utilities for managing ext2, ext3, and ext4 file systems
--------------------------------------------------------------------------------
Update Information:
Use 64-bit counters to track the number of files that are defragmented using in
e4defrag, to avoid overflows when more than 2**32 files are defragmented.
Correctly translate Posix ACL's. This was a regression introduced in v1.44.
Use the online free block counts so e2freefrag's percentages are correct. Fix a
false warning that tune2fs will take long time to change a UUID if the
metadata_csum feature is not enabled. E2fsck will only offer to set the
inline_data feature flag when the inline flag is set on the inode, *and* the
system.data xattr is present. E4defrag will handle the case where it is running
as root and it can't find the file system to open more gracefully. Fix a bug
where resize2fs was failing to update the extent tree checksums in an corner
case. Fix fuse2fs's command line parsing when options are specified after the
target device/image. Fix a bug which could cause e2fsprogs tools to segfault on
a corrupted file system where the journal's s_nr_users is impossibly large.
E2image now includes the mmp block (if needed) when creating a metadata-only
image. Fix various Verity handling bugs which made it completely unusable in
e2fsprogs 1.44.4. Fix a bug in tune2fs where it would dereference of freed
memory after replaying the journal. If files are created while e4defrag is
running, it's quite possible for succeed_cnt to be larger than total_count, in
which case the number of failures (calculated via total_count - succeed_cnt)
will overflow and become a very large unsigned number. Fix e2fsck so it can
correctly handle directories > 2 GiB when the largedir feature is enabled. Fix
mke2fs's hugefile creation so that we correctly reserve enough metadata blocks
for a given file system size. Otherwise for certain unfortunately sized
disks/partitions, the hugefile creation would fail. Fix the libext2fs library
to be more robust against invalid block group descriptors to prevent e2fsprogs
from crashing (or possibly being p0wned) by maliciously modified file systems.
Fix mke2fs and debugfs so they can correctly copy in files > 2 GiB. Fix debugfs
so its stat command can correct supportly display directory sizes > 2 GiB. Fix
memory leaks in debugfs, mke2fs, and e2freefrag.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 6 2019 Lukas Czerner <lczerner(a)redhat.com> 1.44.6-1
- New upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1642281 - [abrt] e2fsprogs: e2p_is_null_uuid(): dumpe2fs killed by SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1642281
[ 2 ] Bug #1612449 - inode 7 frequently have problem when I run fsck
https://bugzilla.redhat.com/show_bug.cgi?id=1612449
[ 3 ] Bug #1687003 - Verity bit incorrectly reported by e2fsprogs-1.44.4-1.fc29
https://bugzilla.redhat.com/show_bug.cgi?id=1687003
[ 4 ] Bug #1602119 - Some old issues may be experimented due to the availability of an
old packaged release ��� Documentation lacks accuracy
https://bugzilla.redhat.com/show_bug.cgi?id=1602119
--------------------------------------------------------------------------------
================================================================================
fedora-messaging-1.6.0-1.fc29 (FEDORA-2019-cdde3892f8)
Set of tools for using Fedora's messaging infrastructure
--------------------------------------------------------------------------------
Update Information:
Update to fedora-messaging v1.6.0
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 4 2019 Jeremy Cline <jcline(a)redhat.com> - 1.6.0-1
- Update to v1.6.0
--------------------------------------------------------------------------------
================================================================================
feh-3.1.3-1.fc29 (FEDORA-2019-4ea73d0c4d)
Fast command line image viewer using Imlib2
--------------------------------------------------------------------------------
Update Information:
- update to 3.1.3 fixes rhbz #1674926
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 4 2019 Filipe Rosset <rosset.filipe(a)gmail.com> - 3.1.3-1
- update to 3.1.3 fixes rhbz #1674926
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1674926 - feh-3.1.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1674926
--------------------------------------------------------------------------------
================================================================================
freeipa-healthcheck-0.1-2.fc29 (FEDORA-2019-97d426364a)
Health check tool for FreeIPA
--------------------------------------------------------------------------------
Update Information:
First build of freeipa-healthcheck for f29
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1695323 - Review Request: freeipa-healthcheck - Health check tool for
FreeIPA
https://bugzilla.redhat.com/show_bug.cgi?id=1695323
--------------------------------------------------------------------------------
================================================================================
fuse-2.9.9-2.fc29 (FEDORA-2019-efa6b41d3f)
File System in Userspace (FUSE) v2 utilities
--------------------------------------------------------------------------------
Update Information:
* Whitelisted SMB2
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 4 2019 Peter Lemenkov <lemenkov(a)gmail.com> - 2.9.9-2
- Whitelist SMB2 (rhbz#1694552)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1694552 - After upgrade to fuse-2.9.9-1-fc29.x86_64 can't mount ENCFS
directory on SAMBA
https://bugzilla.redhat.com/show_bug.cgi?id=1694552
--------------------------------------------------------------------------------
================================================================================
glibc-2.28-27.fc29 (FEDORA-2019-5fcc2049a1)
The GNU libc libraries
--------------------------------------------------------------------------------
Update Information:
This glibc update adds support for the new Japanese era, Reiwa, which will begin
on May 1st. It also includes several other upstream bugfixes via upstream sync:
* ja_JP locale: Add entry for the new Japanese era [BZ #22964] * S390: Mark vx
and vxe as important hwcap. * Record CVE-2019-9169 in NEWS and ChangeLog [BZ
#24114] * regex: fix read overrun [BZ #24114] * RISC-V: don't assume PI mutexes
and robust futexes before 4.20 (bug 23864) * powerpc: Only enable TLE with
PPC_FEATURE2_HTM_NOSC * RISC-V: Fix elfutils testsuite unwind failures. * nptl:
Fix pthread_rwlock_try*lock stalls (Bug 23844) * nptl: Avoid fork handler lock
for async-signal-safe fork [BZ #24161] * Add compiler barriers around
modifications of the robust mutex list for pthread_mutex_trylock. [BZ #24180] *
NEWS: Mention bug 24112. * nscd: Do not use __inet_aton_exact@GLIBC_PRIVATE [BZ
#20018] * CVE-2016-10739: getaddrinfo: Fully parse IPv4 address strings [BZ
#20018] * resolv: Do not send queries for non-host-names in nss_dns [BZ #24112]
* resolv: Reformat inet_addr, inet_aton to GNU style * x86-64 memcmp: Use
unsigned Jcc instructions on size [BZ #24155] * x86-64 strnlen/wcsnlen: Properly
handle the length parameter [BZ #24097] * x86-64 strncpy: Properly handle the
length parameter [BZ #24097] * x86-64 strncmp family: Properly handle the length
parameter [BZ #24097] * x86-64 memset/wmemset: Properly handle the length
parameter [BZ #24097] * x86-64 memrchr: Properly handle the length parameter [BZ
#24097] * x86-64 memcpy: Properly handle the length parameter [BZ #24097] *
x86-64 memcmp/wmemcmp: Properly handle the length parameter [BZ #24097] * x86-64
memchr/wmemchr: Properly handle the length parameter [BZ #24097] * Add
XFAIL_ROUNDING_IBM128_LIBGCC to more fma() tests * Only build libm with -fno-
math-errno (bug 24024) * sysdeps/ieee754/soft-fp: ignore maybe-uninitialized
with -O [BZ #19444] * ARM: fix kernel assisted atomics with GCC 8 (bug 24034) *
riscv: Use `__has_include__` to include `<asm/syscalls.h>` [BZ #24022] * intl:
Do not return NULL on asprintf failure in gettext [BZ #24018] * malloc: Always
call memcpy in _int_realloc [BZ #24027] * Update Alpha libm-test-ulps * m68k:
Fix sigaction kernel definition (BZ #23967) * RISC-V: properly terminate call
chain (bug 23125) * support: Do not require overflow builtin in
support/blob_repeat.c
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 3 2019 DJ Delorie <dj(a)redhat.com> - 2.28-27
- Auto-sync with upstream branch release/2.28/master,
commit 7423da211d1490d9fc76c2f0ce49e5dd90ea9bcc.
- ja_JP locale: Add entry for the new Japanese era [BZ #22964]
- S390: Mark vx and vxe as important hwcap.
- Record CVE-2019-9169 in NEWS and ChangeLog [BZ #24114]
- regex: fix read overrun [BZ #24114]
- RISC-V: don't assume PI mutexes and robust futexes before 4.20 (bug 23864)
- powerpc: Only enable TLE with PPC_FEATURE2_HTM_NOSC
- RISC-V: Fix elfutils testsuite unwind failures.
- nptl: Fix pthread_rwlock_try*lock stalls (Bug 23844)
- nptl: Avoid fork handler lock for async-signal-safe fork [BZ #24161]
- Add compiler barriers around modifications of the robust mutex list for
pthread_mutex_trylock. [BZ #24180]
- NEWS: Mention bug 24112.
- nscd: Do not use __inet_aton_exact@GLIBC_PRIVATE [BZ #20018]
- CVE-2016-10739: getaddrinfo: Fully parse IPv4 address strings [BZ #20018]
- resolv: Do not send queries for non-host-names in nss_dns [BZ #24112]
- resolv: Reformat inet_addr, inet_aton to GNU style
- x86-64 memcmp: Use unsigned Jcc instructions on size [BZ #24155]
- x86-64 strnlen/wcsnlen: Properly handle the length parameter [BZ #24097]
- x86-64 strncpy: Properly handle the length parameter [BZ #24097]
- x86-64 strncmp family: Properly handle the length parameter [BZ #24097]
- x86-64 memset/wmemset: Properly handle the length parameter [BZ #24097]
- x86-64 memrchr: Properly handle the length parameter [BZ #24097]
- x86-64 memcpy: Properly handle the length parameter [BZ #24097]
- x86-64 memcmp/wmemcmp: Properly handle the length parameter [BZ #24097]
- x86-64 memchr/wmemchr: Properly handle the length parameter [BZ #24097]
- Add XFAIL_ROUNDING_IBM128_LIBGCC to more fma() tests
- Only build libm with -fno-math-errno (bug 24024)
- sysdeps/ieee754/soft-fp: ignore maybe-uninitialized with -O [BZ #19444]
- ARM: fix kernel assisted atomics with GCC 8 (bug 24034)
- riscv: Use __has_include__ to include <asm/syscalls.h> [BZ #24022]
- intl: Do not return NULL on asprintf failure in gettext [BZ #24018]
- malloc: Always call memcpy in _int_realloc [BZ #24027]
- Update Alpha libm-test-ulps
- m68k: Fix sigaction kernel definition (BZ #23967)
- RISC-V: properly terminate call chain (bug 23125)
- support: Do not require overflow builtin in support/blob_repeat.c
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1696390 - glibc: The Japanese Era name will be changed on May 1, 2019 [f29]
https://bugzilla.redhat.com/show_bug.cgi?id=1696390
--------------------------------------------------------------------------------
================================================================================
hydrogen-0.9.7-9.fc29 (FEDORA-2019-4f91a29fb0)
Advanced drum machine for GNU/Linux
--------------------------------------------------------------------------------
Update Information:
This update renames the misnamed `devel` sub-package to `hydrogen-devel` and, by
rebuilding against updated dependencies, fixes a GUI glitch in Fedora 30 and
Rawhide.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 4 2019 Nils Philippsen <nils(a)tiptoe.de> - 0.9.7-9
- rebuild to fix GUI glitch
- use spaces for formatting
- rename 'devel' subpackage to 'hydrogen-devel' (d'oh)
- remove obsolete patches
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.7-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1466175 - The "devel" package for hydrogen seems a bad name for a
development package
https://bugzilla.redhat.com/show_bug.cgi?id=1466175
--------------------------------------------------------------------------------
================================================================================
kernel-5.0.6-200.fc29 (FEDORA-2019-be9add5b77)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 5.0.6 update contains a number of importnat fixes across the tree
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 3 2019 Laura Abbott <labbott(a)redhat.com> - 5.0.6-200
- Linux v5.0.6
* Wed Apr 3 2019 Justin M. Forbes <jforbes(a)fedoraproject.org>
- Fix CVE-2019-3882 (rhbz 1689426 1695571)
* Mon Apr 1 2019 Justin M. Forbes <jforbes(a)fedoraproject.org>
- Fix CVE-2019-9857 (rhbz 1694758 1694759)
* Mon Apr 1 2019 Laura Abbott <labbott(a)redhat.com>
- Ensure ioschedulers are built in (rhbz 1690604)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1694758 - CVE-2019-9857 kernel: memory leak in
inotify_update_existing_watch() leads to denial of service
https://bugzilla.redhat.com/show_bug.cgi?id=1694758
[ 2 ] Bug #1689426 - CVE-2019-3882 kernel: denial of service vector through vfio DMA
mappings
https://bugzilla.redhat.com/show_bug.cgi?id=1689426
--------------------------------------------------------------------------------
================================================================================
kernel-headers-5.0.6-200.fc29 (FEDORA-2019-be9add5b77)
Header files for the Linux kernel for use by glibc
--------------------------------------------------------------------------------
Update Information:
The 5.0.6 update contains a number of importnat fixes across the tree
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 3 2019 Laura Abbott <labbott(a)redhat.com> - 5.0.6-200
- Linux v5.0.6
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1694758 - CVE-2019-9857 kernel: memory leak in
inotify_update_existing_watch() leads to denial of service
https://bugzilla.redhat.com/show_bug.cgi?id=1694758
[ 2 ] Bug #1689426 - CVE-2019-3882 kernel: denial of service vector through vfio DMA
mappings
https://bugzilla.redhat.com/show_bug.cgi?id=1689426
--------------------------------------------------------------------------------
================================================================================
kernel-tools-5.0.6-200.fc29 (FEDORA-2019-be9add5b77)
Assortment of tools for the Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 5.0.6 update contains a number of importnat fixes across the tree
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 3 2019 Laura Abbott <labbott(a)redhat.com> - 5.0.6-200
- Linux v5.0.6
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1694758 - CVE-2019-9857 kernel: memory leak in
inotify_update_existing_watch() leads to denial of service
https://bugzilla.redhat.com/show_bug.cgi?id=1694758
[ 2 ] Bug #1689426 - CVE-2019-3882 kernel: denial of service vector through vfio DMA
mappings
https://bugzilla.redhat.com/show_bug.cgi?id=1689426
--------------------------------------------------------------------------------
================================================================================
libfullock-1.0.32-1.fc29 (FEDORA-2019-a4c118499b)
Fast User Level LOCK (FULLOCK) library for C/C++
--------------------------------------------------------------------------------
Update Information:
Fast User Level LOCK (FULLOCK) library for C/C++
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1562526 - Review Request: libfullock - A Fast User Level LOCK (FULLOCK)
library for C and C++
https://bugzilla.redhat.com/show_bug.cgi?id=1562526
--------------------------------------------------------------------------------
================================================================================
livecd-tools-26.1-3.fc29 (FEDORA-2019-f1977353ed)
Tools for building live CDs
--------------------------------------------------------------------------------
Update Information:
Backport fix from upstream to use `systemctl` for enabling and disabling
services instead of the legacy `chkconfig` tool.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 4 2019 Neal Gompa <ngompa13(a)gmail.com> - 1:26.1-3
- Backport fix from upstream to use systemctl instead of chkconfig (RH#1696064)
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:26.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1696064 - imgcreate should not use chkconfig
https://bugzilla.redhat.com/show_bug.cgi?id=1696064
--------------------------------------------------------------------------------
================================================================================
lua-cqueues-20171014-3.fc29 (FEDORA-2019-def64f75b0)
Stackable Continuation Queues for the Lua Programming Language
--------------------------------------------------------------------------------
Update Information:
- switch to compat-lua-cqueues naming convention
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 4 2019 Tomas Krizek <tomas.krizek(a)nic.cz> - 20171014-3
- Change compat package name to compat-lua-cqueues
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> -
20171014-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
mariadb-java-client-2.4.1-1.fc29 (FEDORA-2019-e9c1c03032)
Connects applications developed in Java to MariaDB and MySQL databases
--------------------------------------------------------------------------------
Update Information:
[CONJ-687] addition of option "useMysqlMetadata" to permit MySQL meta
compatibility [CONJ-682] internal pool correction: when receiving an RST
during connection validation, the pool will end up throwing connection timeout
exception in place of reusing another connection.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 27 2019 Jakub Janco <jjanco(a)redhat.com> - 2.4.1-1
- new version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1670333 - mariadb-java-client-2.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1670333
--------------------------------------------------------------------------------
================================================================================
module-build-service-2.19.0-1.fc29 (FEDORA-2019-b050bb42d9)
The Module Build Service for Modularity
--------------------------------------------------------------------------------
Update Information:
Update to v2.19.0 * Fix an issue in MMDResolver when a transitive dependency
cannot be satisfied * Add support for offline local builds that use local
repositories for dependency resolution * Add initial support for gating of
modules using Greenwave * Fix a bug that caused successful local builds to not
regenerate the repo with module metadata * Allow resubmitting the same NSV for
scratch module builds * Allow importing modules without a Koji tag * Add extra
user input validation * Allow whitelisted buildrequires with
xmd.mbs.disttag_marking set to influnece the disttag * Allow buildrequiring
virtual streams to always get the latest
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 4 2019 mprahl <mprahl(a)redhat.com> - 2.19.0-1
- new version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1692485 - module-build-service-2.18.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1692485
--------------------------------------------------------------------------------
================================================================================
pdd-1.4-1.fc29 (FEDORA-2019-ca4532219b)
Tiny date, time diff calculator
--------------------------------------------------------------------------------
Update Information:
Release 1.4 (#1696243)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 4 2019 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.4-1
- Release 1.4 (#1696243)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1696243 - pdd-1.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1696243
--------------------------------------------------------------------------------
================================================================================
perl-GitLab-API-v4-0.18-1.fc29 (FEDORA-2019-c762790901)
Complete GitLab API v4 client
--------------------------------------------------------------------------------
Update Information:
- New upstream release. *** ChangeLog: - Add SUPPORT section to the docs. -
The archive method no longer tries to decode the response. - Add the
commit_refs method. - Add the trigger_pipeline method. - Document some
create_pipeline method parameters.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 4 2019 Bj��rn Esser <besser82(a)fedoraproject.org> - 0.18-1
- New upstream release (#1696124)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1696124 - perl-GitLab-API-v4-0.18 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1696124
--------------------------------------------------------------------------------
================================================================================
php-theseer-tokenizer-1.1.2-1.fc29 (FEDORA-2019-b58621ac95)
Library for converting tokenized PHP source code into XML
--------------------------------------------------------------------------------
Update Information:
**Version 1.1.2** - 2019-04-04 **Changed** * Reverted PHPUnit 8 test update to
stay PHP 7.0 compliant ---- **Version 1.1.1** - 2019-04-03 **Fixed** *
[#1](https://github.com/theseer/tokenizer/issues/1): Empty file causes invalid
array read **Changed** * Tests should now be PHPUnit 8 compliant
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 4 2019 Remi Collet <remi(a)remirepo.net> - 1.1.2-1
- update to 1.1.2 (no change)
- switch back to phpunit 7
* Thu Apr 4 2019 Remi Collet <remi(a)remirepo.net> - 1.1.1-1
- update to 1.1.1
- use phpunit8
--------------------------------------------------------------------------------
================================================================================
python-ipdb-0.12-1.fc29 (FEDORA-2019-b4e81f4aa3)
IPython enabled Python debugger
--------------------------------------------------------------------------------
Update Information:
Update to [
0.12](https://github.com/gotcha/ipdb/blob/0.12/HISTORY.txt)
(rhbz#1690864).
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 4 2019 Randy Barlow <bowlofeggs(a)fedoraproject.org> - 0.12-1
- Update to 0.12 (#1690864).
-
https://github.com/gotcha/ipdb/blob/0.12/HISTORY.txt
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1690864 - python-ipdb-0.12 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1690864
--------------------------------------------------------------------------------
================================================================================
rssguard-3.5.7-1.fc29 (FEDORA-2019-6b95625933)
Simple yet powerful feed reader
--------------------------------------------------------------------------------
Update Information:
Release 3.5.7
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 4 2019 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 3.5.7-1
- Release 3.5.7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1696206 - rssguard-3.5.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1696206
--------------------------------------------------------------------------------
================================================================================
sane-backends-1.0.27-23.fc29 (FEDORA-2019-4eeff22d2d)
Scanner access software
--------------------------------------------------------------------------------
Update Information:
mustek backend crashed from stack smashing (upstream issue #71)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 3 2019 Zdenek Dohnal <zdohnal(a)redhat.com> - 1.0.27-23
- mustek backend crashed from stack smashing (upstream issue #71)
--------------------------------------------------------------------------------
================================================================================
sos-collector-1.7-2.fc29 (FEDORA-2019-ab9dd84ee0)
Capture sosreports from multiple nodes simultaneously
--------------------------------------------------------------------------------
Update Information:
Update to the latest upstream 1.7 release. Major changes to how execution
inside a container or on containerized hosts is handled. New 'none' cluster to
avoid any cluster-level checks at all, allowing users to just provide a list of
--nodes.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 4 2019 Jake Hunsaker <jhunsake(a)redhat.com> - 1.7-2
- Fix 'none' cluster type enablement
* Mon Apr 1 2019 Jake Hunsaker <jhunsake(a)redhat.com> - 1.7-1
- New upstream release
* Sun Feb 3 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
swift-lang-5.0-0.53.20190325gitba33f9e.fc29 (FEDORA-2019-321da52d7b)
Apple's Swift programming language
--------------------------------------------------------------------------------
Update Information:
Modified spec file to handle upgrades from 4.2 to 5.0.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 28 2019 Ron Olson <tachoknight(a)gmail.com> 5.0-0.53.20190325gitba33f9e
- Modified spec file to handle upgrades from 4.2 to 5.0.
* Mon Mar 25 2019 Ron Olson <tachoknight(a)gmail.com> 5.0-0.52.20190325gitba33f9e
- Updated to swift-5.0-RELEASE
* Mon Mar 25 2019 Ron Olson <tachoknight(a)gmail.com> 5.0-0.51.20190324git130a414
- Updated to swift-5.0-DEVELOPMENT-SNAPSHOT-2019-03-24-a, removed _gettid
patch as the changed were merged upstream
* Fri Mar 22 2019 Ron Olson <tachoknight(a)gmail.com> 5.0-0.50.20190310git4d6e741
- The swift-corelibs-xctest library was being zeroed out due to issue with
CMake 3.14 where it was being copied into the same directory. A bug
report has been filed with CMake but until it is resolved, the cmake file
has been patched to not perform the copy.
* Fri Mar 15 2019 Ron Olson <tachoknight(a)gmail.com> 5.0-0.50.20190310git4d6e741
- Modules did not work properly in the REPL due to additional lib path;
fixed with symlinks to the lower directory structures
* Fri Mar 15 2019 Ron Olson <tachoknight(a)gmail.com> 5.0-0.50.20190310git4d6e741
- python2-sphinx was removed from Fedora after 30 so it will use the python3
version
* Thu Mar 14 2019 Ron Olson <tachoknight(a)gmail.com> 5.0-0.50.20190310git4d6e741
- Fixed issues introduced by upstream changes
* Mon Mar 11 2019 Ron Olson <tachoknight(a)gmail.com> 5.0-0.50.20190310git4d6e741
- Updated to swift-5.0-DEVELOPMENT-SNAPSHOT-2019-03-10-a
* Thu Mar 7 2019 Ron Olson <tachoknight(a)gmail.com> 5.0-0.49.20190306git5834830
- Updated to swift-5.0-DEVELOPMENT-SNAPSHOT-2019-03-06-a
* Wed Mar 6 2019 Ron Olson <tachoknight(a)gmail.com> 5.0-0.48.20190305git5834830
- Updated to swift-5.0-DEVELOPMENT-SNAPSHOT-2019-03-05-a
* Tue Mar 5 2019 Ron Olson <tachoknight(a)gmail.com> 5.0-0.47.20190304gitad10379
- Updated to swift-5.0-DEVELOPMENT-SNAPSHOT-2019-03-04-a
* Fri Mar 1 2019 Ron Olson <tachoknight(a)gmail.com> 5.0-0.46.20190228gitfeacc3f
- Updated to swift-5.0-DEVELOPMENT-SNAPSHOT-2019-02-28-a
* Wed Feb 27 2019 Ron Olson <tachoknight(a)gmail.com> 5.0-0.45.20190226gitfa5d493
- Updated to swift-5.0-DEVELOPMENT-SNAPSHOT-2019-02-26-a
* Tue Feb 26 2019 Ron Olson <tachoknight(a)gmail.com> 5.0-0.44.20190225gita8126fb
- Updated to swift-5.0-DEVELOPMENT-SNAPSHOT-2019-02-25-a
* Mon Feb 25 2019 Ron Olson <tachoknight(a)gmail.com> 5.0-0.43.20190224gita8126fb
- Updated to swift-5.0-DEVELOPMENT-SNAPSHOT-2019-02-24-a
* Sun Feb 24 2019 Ron Olson <tachoknight(a)gmail.com> 5.0-0.42.20190223gita8126fb
- Updated to swift-5.0-DEVELOPMENT-SNAPSHOT-2019-02-23-a
* Sat Feb 23 2019 Ron Olson <tachoknight(a)gmail.com> 5.0-0.41.20190222gita24adaf
- Updated to swift-5.0-DEVELOPMENT-SNAPSHOT-2019-02-22-a
* Fri Feb 22 2019 Ron Olson <tachoknight(a)gmail.com> 5.0-0.40.20190221git86a39df
- Updated to swift-5.0-DEVELOPMENT-SNAPSHOT-2019-02-21-a
* Thu Feb 21 2019 Ron Olson <tachoknight(a)gmail.com> 5.0-0.39.20190220git817dff3
- Updated to swift-5.0-DEVELOPMENT-SNAPSHOT-2019-02-20-a
* Wed Feb 20 2019 Ron Olson <tachoknight(a)gmail.com> 5.0-0.38.20190219git817dff3
- Updated to swift-5.0-DEVELOPMENT-SNAPSHOT-2019-02-19-a
* Mon Feb 18 2019 Ron Olson <tachoknight(a)gmail.com> 5.0-0.37.20190217git15be364
- Updated to swift-5.0-DEVELOPMENT-SNAPSHOT-2019-02-17-a
* Sun Feb 17 2019 Ron Olson <tachoknight(a)gmail.com> 5.0-0.36.20190216git15be364
- Updated to swift-5.0-DEVELOPMENT-SNAPSHOT-2019-02-16-a
* Sat Feb 16 2019 Ron Olson <tachoknight(a)gmail.com> 5.0-0.35.20190215git15be364
- Updated to swift-5.0-DEVELOPMENT-SNAPSHOT-2019-02-15-a
* Fri Feb 15 2019 Ron Olson <tachoknight(a)gmail.com> 5.0-0.34.20190214git8d88441
- Updated to swift-5.0-DEVELOPMENT-SNAPSHOT-2019-02-14-a
* Wed Feb 13 2019 Ron Olson <tachoknight(a)gmail.com> 5.0-0.33.20190206gitd07c25a
- Added patch to fix an issue with compiler-rt using std::thread in a vector
* Fri Feb 8 2019 Ron Olson <tachoknight(a)gmail.com> 5.0-0.32.20190206gitd07c25a
- Added patch to allow the Swift REPL to work properly, also removed patch
for aarch64 because the changes were merged upstream
* Sun Feb 3 2019 Fedora Release Engineering <releng(a)fedoraproject.org> -
5.0-0.31.20181214gitee39236
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Sat Dec 15 2018 Ron Olson <tachoknight(a)gmail.com> 5.0-0.31.20181212gite231ae1
- First version that supports aarch64
* Thu Dec 13 2018 Ron Olson <tachoknight(a)gmail.com> 5.0-0.31.20181212gite231ae1
- Updated to swift-5.0-DEVELOPMENT-SNAPSHOT-2018-12-12-a
* Thu Dec 13 2018 Ron Olson <tachoknight(a)gmail.com> 5.0-0.30.20181212gite231ae1
- Updated to swift-5.0-DEVELOPMENT-SNAPSHOT-2018-12-12-a
* Thu Dec 13 2018 Ron Olson <tachoknight(a)gmail.com> 5.0-0.29.20181212gite231ae1
- Updated to swift-5.0-DEVELOPMENT-SNAPSHOT-2018-12-12-a
* Tue Dec 11 2018 Ron Olson <tachoknight(a)gmail.com> 5.0-0.28.20181210gitf83ec0c
- Updated to swift-5.0-DEVELOPMENT-SNAPSHOT-2018-12-10-a
* Mon Dec 10 2018 Ron Olson <tachoknight(a)gmail.com> 5.0-0.26.20181209gitc14e1a3
- Updated to swift-5.0-DEVELOPMENT-SNAPSHOT-2018-12-09-a
* Sun Dec 9 2018 Ron Olson <tachoknight(a)gmail.com> 5.0-0.25.20181208git3945260
- Updated to swift-5.0-DEVELOPMENT-SNAPSHOT-2018-12-08-a
* Sat Dec 8 2018 Ron Olson <tachoknight(a)gmail.com> 5.0-0.24.20181207git0a73e15
- Updated to swift-5.0-DEVELOPMENT-SNAPSHOT-2018-12-07-a
* Fri Dec 7 2018 Ron Olson <tachoknight(a)gmail.com> 5.0-0.23.20181206git565e767
- Updated to swift-5.0-DEVELOPMENT-SNAPSHOT-2018-12-06-a
* Wed Dec 5 2018 Ron Olson <tachoknight(a)gmail.com> 5.0-0.22.20181204gitb74d54a
- Updated to swift-5.0-DEVELOPMENT-SNAPSHOT-2018-12-04-a
* Wed Dec 5 2018 Egor Zhdan <egor.zhdan(a)gmail.com>
- Include dependencies to ncurses which are required by SourceKit and
included in Apple installation guide
* Wed Dec 5 2018 Ron Olson <tachoknight(a)gmail.com> 5.0-0.21.20181204gitfacaad1
- Updated to swift-DEVELOPMENT-SNAPSHOT-2018-12-04-a
* Tue Dec 4 2018 Ron Olson <tachoknight(a)gmail.com> 5.0-0.20.20181203git3376f9f
- Updated to swift-DEVELOPMENT-SNAPSHOT-2018-12-03-a
* Mon Dec 3 2018 Ron Olson <tachoknight(a)gmail.com> 5.0-0.19.20181202gita8a8bdc
- Updated to swift-DEVELOPMENT-SNAPSHOT-2018-12-02-a
* Sun Dec 2 2018 Ron Olson <tachoknight(a)gmail.com> 5.0-0.18.20181201gitb01ee72
- Updated to swift-DEVELOPMENT-SNAPSHOT-2018-12-01-a
* Sat Dec 1 2018 Ron Olson <tachoknight(a)gmail.com> 5.0-0.17.20181130gitd8f12cb
- Updated to swift-DEVELOPMENT-SNAPSHOT-2018-11-30-a
* Thu Nov 29 2018 Ron Olson <tachoknight(a)gmail.com> 5.0-0.16.20181128git806cf57
- Updated to swift-DEVELOPMENT-SNAPSHOT-2018-11-28-a
* Tue Nov 27 2018 Ron Olson <tachoknight(a)gmail.com> 5.0-0.15.20181126gita820992
- Updated to swift-DEVELOPMENT-SNAPSHOT-2018-11-26-a
* Mon Nov 26 2018 Ron Olson <tachoknight(a)gmail.com> 5.0-0.14.20181125gita820992
- Updated to swift-DEVELOPMENT-SNAPSHOT-2018-11-25-a
* Sat Nov 24 2018 Ron Olson <tachoknight(a)gmail.com> 5.0-0.13.20181123gita820992
- Updated to swift-DEVELOPMENT-SNAPSHOT-2018-11-23-a
* Fri Nov 23 2018 Ron Olson <tachoknight(a)gmail.com> 5.0-0.12.20181122gitfb52a2e
- Updated to swift-DEVELOPMENT-SNAPSHOT-2018-11-22-a
* Mon Nov 19 2018 Ron Olson <tachoknight(a)gmail.com> 5.0-0.11.20181116git201dcba
- Updated to swift-DEVELOPMENT-SNAPSHOT-2018-11-16-a
* Fri Nov 16 2018 Ron Olson <tachoknight(a)gmail.com> 5.0-0.10.20181115git739169d
- Updated to swift-DEVELOPMENT-SNAPSHOT-2018-11-15-a
--------------------------------------------------------------------------------
================================================================================
umr-1.0-2.20190403git1139876.fc29 (FEDORA-2019-a5bb71fff9)
AMDGPU Userspace Register Debugger
--------------------------------------------------------------------------------
Update Information:
New package
--------------------------------------------------------------------------------