The following Fedora 30 Security updates need testing:
Age URL
15
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4696630d6f
checkstyle-8.0-7.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-5557661da8
java-1.8.0-openjdk-1.8.0.212.b04-0.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-521e6c567c
graphviz-2.40.1-46.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-bc70b381ad
runc-1.0.0-92.dev.gitc1b8c57.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-a8996fb898
java-11-openjdk-11.0.3.7-1.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b8ae9d5699
exiv2-0.27.1-1.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-1911b73cee
perl-YAML-1.28-1.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-0f4190cdb0
openssh-8.0p1-1.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d29e04fa11
teeworlds-0.7.3.1-2.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-a96124345a
rubygem-jquery-ui-rails-6.0.1-1.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-06f5bbdaf5
python-gnupg-0.4.4-1.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-eba8e44ee6
drupal8-8.6.15-1.fc30
The following Fedora 30 Critical Path updates have yet to be approved:
Age URL
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-daa39d4827 qemu-3.1.0-7.fc30
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-dcdc6bb785
perl-5.28.2-436.fc30
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-2d7ba96ef5
libreport-2.10.0-3.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-947b7fbf7e
pungi-4.1.36-1.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-823895f758
libXt-1.1.5-11.20190424gitba4ec9376.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-601a2ffc12 orc-0.4.29-1.fc30
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3494e21c64
ebtables-2.0.10-35.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9b1dc7cbf2 llvm-8.0.0-6.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-05443ab840 ethtool-5.0-1.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4b96c70de4 krb5-1.17-14.fc30
samba-4.10.2-1.1.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-0f4190cdb0
openssh-8.0p1-1.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-505e29f617
libbytesize-2.0-1.fc30
The following builds have been pushed to Fedora 30 updates-testing
backintime-1.2.0-3.fc30
buku-4.2-1.fc30
cekit-3.0.1-1.fc30
clover2-10.4.1-1.D20190428gitae89cda.fc30
cog-0.3.0-1.fc30
dhcp-4.3.6-33.fc30
drupal7-7.66-1.fc30
flacon-5.4.0-1.fc30
fpart-1.1.0-2.fc30
gnome-shell-extension-netspeed-3.29-0.2.20190430gita62e19b.fc30
gnome-software-3.32.1-3.fc30
golang-github-sasha-s-go-deadlock-0.2.0-10.20190427git1595213.fc30
golang-github-xiang90-probing-0-0.11.git07dd2e8.fc30
golang-googlecode-log4go-0-0.13.hgc3294304d93f.fc30
hexchat-2.14.2-3.fc30
josm-0-0.93.15031svn.fc30
kernel-5.0.10-300.fc30
m17n-lib-1.8.0-5.fc30
mariadb-connector-c-3.0.9-3.fc30
mellowplayer-3.5.3-2.20190310git4ac4b13.fc30
mosquitto-1.6.2-1.fc30
perl-Crypt-SSLeay-0.72-23.fc30
perl-Devel-PPPort-3.49-1.fc30
perl-PAR-Packer-1.048-1.fc30
php-twig-1.40.1-1.fc30
python-configargparse-0.14.0-1.fc30
python-feedparser-5.2.1-9.fc30
python-mox3-0.17.0-11.fc30
python-neutronclient-6.7.0-3.fc30
python-octaviaclient-1.3.0-8.fc30
python-openstackclient-3.14.1-8.fc30
python-operator-courier-2.0.2-1.fc30
python-pykafka-2.6.0-0.6.dev2.fc30
python-pyramid_sawing-1.1.3-1.fc30
python-twine-1.12.2-3.fc30
python-ufl-2019.1.0-1.fc30
python2-2.7.16-2.fc30
rubygem-actioncable-5.2.3-1.fc30
rubygem-actionmailer-5.2.3-1.fc30
rubygem-actionpack-5.2.3-2.fc30
rubygem-actionview-5.2.3-2.fc30
rubygem-activejob-5.2.3-1.fc30
rubygem-activemodel-5.2.3-2.fc30
rubygem-activerecord-5.2.3-1.fc30
rubygem-activestorage-5.2.3-1.fc30
rubygem-activesupport-5.2.3-1.fc30
rubygem-diffy-3.2.1-1.fc30
rubygem-rails-5.2.3-1.fc30
rubygem-railties-5.2.3-1.fc30
source-to-image-1.1.7-5.fc30
spice-0.14.2-1.fc30
toolbox-0.0.9-1.fc30
udica-0.1.5-2.fc30
weasyprint-0.39-1.fc30
wxMaxima-19.04.3-1.fc30
Details about builds:
================================================================================
backintime-1.2.0-3.fc30 (FEDORA-2019-a1c4862b2e)
Simple backup tool inspired from the Flyback project and TimeVault
--------------------------------------------------------------------------------
Update Information:
- update to 1.2.0 - update to Qt5
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 30 2019 Johannes Lips <hannes(a)fedoraproject.org> - 1.2.0-3
- fixed the obsoletes and provides
* Mon Apr 29 2019 Johannes Lips <hannes(a)fedoraproject.org> - 1.2.0-2
- fixed bytecompilation
- readded plugins subpackage
* Sat Apr 27 2019 Johannes Lips <hannes(a)fedoraproject.org> - 1.2.0-1
- update to version 1.2.0
- switch to Qt5
- renamed the Qt4 subpackage and removed the plugins subpackage
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1380926 - RFE Build backintime with Qt5
https://bugzilla.redhat.com/show_bug.cgi?id=1380926
[ 2 ] Bug #1702201 - dnf error when installing backintime-plugins-1.1.24-7.fc30
https://bugzilla.redhat.com/show_bug.cgi?id=1702201
[ 3 ] Bug #1692673 - Backintime does not start
https://bugzilla.redhat.com/show_bug.cgi?id=1692673
--------------------------------------------------------------------------------
================================================================================
buku-4.2-1.fc30 (FEDORA-2019-55e51b6925)
Powerful command-line bookmark manager
--------------------------------------------------------------------------------
Update Information:
Release 4.2
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 30 2019 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 4.2-1
- Release 4.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1704520 - buku-4.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1704520
--------------------------------------------------------------------------------
================================================================================
cekit-3.0.1-1.fc30 (FEDORA-2019-dde0f1a99d)
Container image creation tool
--------------------------------------------------------------------------------
Update Information:
Release 3.0.1
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 30 2019 Marek Goldmann <mgoldman(a)redhat.com> - 3.0.1-1
- Release 3.0.1
--------------------------------------------------------------------------------
================================================================================
clover2-10.4.1-1.D20190428gitae89cda.fc30 (FEDORA-2019-b07496f266)
Yet another compiler language
--------------------------------------------------------------------------------
Update Information:
New version 10.4.1 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 30 2019 Mamoru TASAKA <mtasaka(a)fedoraproject.org> -
10.4.1-1.D20190428gitae89cda
- 10.4.1
--------------------------------------------------------------------------------
================================================================================
cog-0.3.0-1.fc30 (FEDORA-2019-c9725eea66)
A small single ���window��� launcher for the WebKit WPE port
--------------------------------------------------------------------------------
Update Information:
Innitial RPM package.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1659196 - Review Request: cog - a WPE minibrowser
https://bugzilla.redhat.com/show_bug.cgi?id=1659196
--------------------------------------------------------------------------------
================================================================================
dhcp-4.3.6-33.fc30 (FEDORA-2019-59d507e0c7)
Dynamic host configuration protocol software
--------------------------------------------------------------------------------
Update Information:
Resolves: #1641246 - Do not rely on isc_heap_delete bug
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 30 2019 Pavel Zhukov <pzhukov(a)redhat.com> - 12:4.3.6-
- Resolves: #1641246 - Do not rely on isc_heap_delete bug
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1641246 - dhcpd(6) dies at irregular intervals with stacktrace
https://bugzilla.redhat.com/show_bug.cgi?id=1641246
--------------------------------------------------------------------------------
================================================================================
drupal7-7.66-1.fc30 (FEDORA-2019-2a0ce0c58c)
An open-source content-management platform
--------------------------------------------------------------------------------
Update Information:
*
https://www.drupal.org/project/drupal/releases/7.66 *
https://www.drupal.org/SA-CORE-2019-006
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 30 2019 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 7.66-1
- Update to 7.66 (RHBZ #1701036, #1702424, #1702425, #1702620, #1702619)
-
https://www.drupal.org/SA-CORE-2019-006 (CVE-2019-11358)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1701972 - CVE-2019-11358 js-jquery: prototype pollution in object's
prototype leading to denial of service or remote code execution or property injection
https://bugzilla.redhat.com/show_bug.cgi?id=1701972
--------------------------------------------------------------------------------
================================================================================
flacon-5.4.0-1.fc30 (FEDORA-2019-3fafe773c2)
Audio File Encoder
--------------------------------------------------------------------------------
Update Information:
update to new version
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 1 2019 Ilya Gradina <ilya.gradina(a)gmail.com> - 5.4.0-1
- Update to 5.4.0
--------------------------------------------------------------------------------
================================================================================
fpart-1.1.0-2.fc30 (FEDORA-2019-f04aba8735)
a tool that sorts files and packs them into bags
--------------------------------------------------------------------------------
Update Information:
Initial import
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1650621 - Review Request: fpart - a tool that helps you sort file trees and
pack them into bags
https://bugzilla.redhat.com/show_bug.cgi?id=1650621
--------------------------------------------------------------------------------
================================================================================
gnome-shell-extension-netspeed-3.29-0.2.20190430gita62e19b.fc30 (FEDORA-2019-3d6c6e667e)
A gnome-shell extension to show speed of the internet
--------------------------------------------------------------------------------
Update Information:
Update to 3.29-0.2.20190430gita62e19b ---- Update to
3.29-0.1.20190422git05accfc
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 30 2019 Martin Gansser <martinkg(a)fedoraproject.org> -
3.29-0.2.20190430gita62e19b
- Update to 3.29-0.2.20190430gita62e19b
* Sun Apr 28 2019 Martin Gansser <martinkg(a)fedoraproject.org> -
3.29-0.1.20190422git05accfc
- Update to 3.29-0.1.20190422git05accfc
--------------------------------------------------------------------------------
================================================================================
gnome-software-3.32.1-3.fc30 (FEDORA-2019-0354b7698a)
A software center for GNOME
--------------------------------------------------------------------------------
Update Information:
This update backports various rpm-ostree backend fixes for Fedora Silverblue,
notably adding support for enabling/disabling yum repositories, installing
fedora-workstation-repositories package, and hiding package-based apps in
preference to Flatpak apps. On non-Silverblue nothing should change.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 30 2019 Kalev Lember <klember(a)redhat.com> - 3.32.1-3
- Backport a number of rpm-ostree fixes
--------------------------------------------------------------------------------
================================================================================
golang-github-sasha-s-go-deadlock-0.2.0-10.20190427git1595213.fc30
(FEDORA-2019-6dd9873147)
Online deadlock detection in go
--------------------------------------------------------------------------------
Update Information:
Bump to commit 1595213.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 30 2019 Fabio Valentini <decathorpe(a)gmail.com> -
0.2.0-10.20190427git1595213
- Bump to commit 1595213.
- Disable go module support to fix running the test suite.
--------------------------------------------------------------------------------
================================================================================
golang-github-xiang90-probing-0-0.11.git07dd2e8.fc30 (FEDORA-2019-c1edc20b8b)
Golang project for probing
--------------------------------------------------------------------------------
Update Information:
Rebuild
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> -
0-0.11.git07dd2e8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1675038 - golang-github-xiang90-probing: FTBFS in Fedora rawhide/f30
https://bugzilla.redhat.com/show_bug.cgi?id=1675038
--------------------------------------------------------------------------------
================================================================================
golang-googlecode-log4go-0-0.13.hgc3294304d93f.fc30 (FEDORA-2019-94295cf33a)
Logging package similar to log4j for the Go programming language
--------------------------------------------------------------------------------
Update Information:
Skip test
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 30 2019 Jan Chaloupka <jchaloup(a)redhat.com> - 0-0.13.hgc3294304d93f
- Skip tests
resolves: #1675043
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> -
0-0.12.hgc3294304d93f
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
0-0.11.hgc3294304d93f
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
0-0.10.hgc3294304d93f
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1604241 - golang-googlecode-log4go: FTBFS in Fedora rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1604241
[ 2 ] Bug #1675043 - golang-googlecode-log4go: FTBFS in Fedora rawhide/f30
https://bugzilla.redhat.com/show_bug.cgi?id=1675043
--------------------------------------------------------------------------------
================================================================================
hexchat-2.14.2-3.fc30 (FEDORA-2019-544b84d67e)
A popular and easy to use graphical IRC (chat) client
--------------------------------------------------------------------------------
Update Information:
This update fixes a well-known bug which causes Hexchat to crash each time it
exits. The crash didn't cause any other problems, but did cause crash
notification alerts to appear and lots of people to file bug reports.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 30 2019 Adam Williamson <awilliam(a)redhat.com> - 2.14.2-3
- Apply a fix suggested by ncoghlan for the crash-on-exit bug (#1632039)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1689940 - [abrt] hexchat: fatal_error(): hexchat killed by SIGABRT
https://bugzilla.redhat.com/show_bug.cgi?id=1689940
--------------------------------------------------------------------------------
================================================================================
josm-0-0.93.15031svn.fc30 (FEDORA-2019-3eb72852b6)
An editor for OpenStreetMap (OSM)
--------------------------------------------------------------------------------
Update Information:
New upstream release (#1704335)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 30 2019 Jakub Jelen <jjelen(a)redhat.com> - 0-0.93.15031svn
- New upstream release (#1704335)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1704335 - josm-15031 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1704335
--------------------------------------------------------------------------------
================================================================================
kernel-5.0.10-300.fc30 (FEDORA-2019-87d807d7cb)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 5.0.10 update contains a number of important fixes across the tree Note
there were no changes to the tools or headers packages so those are not built.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 30 2019 Laura Abbott <labbott(a)redhat.com> - 5.0.10-300
- Linux v5.0.10
* Tue Apr 30 2019 Hans de Goede <hdegoede(a)redhat.com>
- Fix wifi on various ideapad models not working (rhbz#1703338)
* Thu Apr 25 2019 Justin M. Forbes <jforbes(a)fedoraproject.org>
- Fix CVE-2019-3900 (rhbz 1698757 1702940)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1698757 - CVE-2019-3900 Kernel: vhost_net: infinite loop while receiving
packets leads to DoS
https://bugzilla.redhat.com/show_bug.cgi?id=1698757
--------------------------------------------------------------------------------
================================================================================
m17n-lib-1.8.0-5.fc30 (FEDORA-2019-bebe0df670)
Multilingual text library
--------------------------------------------------------------------------------
Update Information:
Fix segmentation fault when using ibus-m17n with vi-telex in gedit in Gnome
Wayland
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 30 2019 Mike FABIAN <mfabian(a)redhat.com> - 1.8.0-5
- Fix segmentation fault when using ibus-m17n with vi-telex in gedit in Gnome Wayland
- Resolves: rhbz#1704156
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1704156 - [abrt] ibus-m17n: m17n_object_unref(): ibus-engine-m17n killed by
SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1704156
--------------------------------------------------------------------------------
================================================================================
mariadb-connector-c-3.0.9-3.fc30 (FEDORA-2019-77efb803f9)
The MariaDB Native Client library (C driver)
--------------------------------------------------------------------------------
Update Information:
Bugfix release
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 29 2019 Michal Schorm <mschorm(a)redhat.com> - 3.0.9-3
- Add "zlib-devel" requirement in "-devel" subpackage. MariaDB
requires
linking with "-lz", which will fail without the zlib library
- Related: #1693966
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1693966 - missing -devel dep on zlib-devel
https://bugzilla.redhat.com/show_bug.cgi?id=1693966
--------------------------------------------------------------------------------
================================================================================
mellowplayer-3.5.3-2.20190310git4ac4b13.fc30 (FEDORA-2019-d45566f421)
Cloud music integration for your desktop
--------------------------------------------------------------------------------
Update Information:
- Switch to python3
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 30 2019 Martin Gansser <martinkg(a)fedoraproject.org> -
3.5.3-2.20190310git4ac4b13
- Switch to python3
--------------------------------------------------------------------------------
================================================================================
mosquitto-1.6.2-1.fc30 (FEDORA-2019-cc896df591)
An Open Source MQTT v3.1/v3.1.1 Broker
--------------------------------------------------------------------------------
Update Information:
1.6.2 ===== Broker: * Fix memory access after free, leading to possible crash,
when v5 client with Will message disconnects, where the Will message has as its
first property one of `content-type`, `correlation-data`, `payload-format-
indicator`, or `response-topic`. * Fix build for WITH_TLS=no. * Fix Will message
not allowing user-property properties. * Fix broker originated messages (e.g.
$SYS/broker/version) not being published when `check_retain_source` set to true.
Closes #1245. * Fix $SYS/broker/version being incorrectly expired after 60
seconds. Closes #1245. Library: * Fix crash after client has been unable to
connect to a broker. This occurs when the client is exiting and is part of the
final library cleanup routine. Closes #1246. Clients: * Fix -L url parsing.
Closes #1248. ---- 1.6.1 release
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 30 2019 Peter Robinson <pbrobinson(a)fedoraproject.org> 1.6.2-1
- 1.6.2 release
* Sat Apr 27 2019 Peter Robinson <pbrobinson(a)fedoraproject.org> 1.6.1-1
- 1.6.1 release
* Thu Apr 18 2019 Peter Robinson <pbrobinson(a)fedoraproject.org> 1.6.0-1
- Major new 1.6.0 release
- Support for MQTT 5
--------------------------------------------------------------------------------
================================================================================
perl-Crypt-SSLeay-0.72-23.fc30 (FEDORA-2019-b0e01f996b)
OpenSSL glue that provides LWP with HTTPS support
--------------------------------------------------------------------------------
Update Information:
This release removes a useless dependency on zlib.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 30 2019 Petr Pisar <ppisar(a)redhat.com> - 0.72-23
- Use pkgconfig for linking to OpenSSL
* Mon Apr 1 2019 Jitka Plesnikova <jplesnik(a)redhat.com> - 0.72-22
- Added BR: zlib-devel
--------------------------------------------------------------------------------
================================================================================
perl-Devel-PPPort-3.49-1.fc30 (FEDORA-2019-5eee5c8700)
Perl Pollution Portability header generator
--------------------------------------------------------------------------------
Update Information:
This release adds a compatibility layer for Perl 5.30 API.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 30 2019 Petr Pisar <ppisar(a)redhat.com> - 3.49-1
- 3.49 bump
* Mon Apr 29 2019 Petr Pisar <ppisar(a)redhat.com> - 3.48.again-1
- 3.48-again bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1703758 - perl-Devel-PPPort-3.47 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1703758
--------------------------------------------------------------------------------
================================================================================
perl-PAR-Packer-1.048-1.fc30 (FEDORA-2019-83e663f8f7)
PAR Packager
--------------------------------------------------------------------------------
Update Information:
Updated to the latest release ---- Rebuild for Perl 5.28.2
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 30 2019 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.048-1
- 1.048 bump
* Tue Apr 23 2019 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.047-5
- Rebuild for Perl 5.28.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1704271 - perl-PAR-Packer-1.048 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1704271
--------------------------------------------------------------------------------
================================================================================
php-twig-1.40.1-1.fc30 (FEDORA-2019-65d5786fb7)
The flexible, fast, and secure template engine for PHP
--------------------------------------------------------------------------------
Update Information:
**Version 1.40.1** (2019-04-29) * fixed regression in NodeTraverser ----
**Version 1.40.0** (2019-04-28) * allowed
Twig\NodeVisitor\NodeVisitorInterface::leaveNode() to return "null" instead of
"false" (same meaning) * added the "apply" tag as a replacement for
the
"filter" tag * allowed Twig\Loader\FilesystemLoader::findTemplate() to return
"null" instead of "false" (same meaning) * added support for
"Twig\Markup"
instances in the "in" test * fixed Lexer when using custom options containing
the # char * fixed "import" when macros are stored in a template string
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 30 2019 Remi Collet <remi(a)remirepo.net> - 1.40.1-1
- update to 1.40.1
* Mon Apr 29 2019 Remi Collet <remi(a)remirepo.net> - 1.40.0-1
- update to 1.40.0
--------------------------------------------------------------------------------
================================================================================
python-configargparse-0.14.0-1.fc30 (FEDORA-2019-d3f6f8a19f)
A Python module with support for argparse, config files, and env variables
--------------------------------------------------------------------------------
Update Information:
Update to new upstream version 0.14.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 28 2019 Fabian Affolter <mail(a)fabian-affolter.ch> - 0.14.0-1
- Update to new upstream version 0.14.0
* Wed Apr 10 2019 Fabian Affolter <mail(a)fabian-affolter.ch> - 0.13.0-1
- Update to new upstream version 0.13.0 (rhbz#1643700)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1643700 - python-configargparse-0.13.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1643700
--------------------------------------------------------------------------------
================================================================================
python-feedparser-5.2.1-9.fc30 (FEDORA-2019-535c6a2edf)
Parse RSS and Atom feeds in Python
--------------------------------------------------------------------------------
Update Information:
Switch from python2 to python3 Sphinx.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 30 2019 Mat��j Cepl <mcepl(a)cepl.eu> - 5.2.1-9
- Use python3-Sphinx instead of the Python2 version. It really doesn't matter
in the end.
--------------------------------------------------------------------------------
================================================================================
python-mox3-0.17.0-11.fc30 (FEDORA-2019-e567f17e80)
Mock object framework for Python
--------------------------------------------------------------------------------
Update Information:
Remove python2 subpackage from Fedora (bz#1704461, bz#1675754, bz#1605775)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 30 2019 Javier Pe��a (jpena(a)redhat.com) - 0.17.0-11
- Remove python2 subpackage from Fedora (bz#1704461, bz#1675754, bz#1605775)
* Sat Feb 2 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.17.0-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.17.0-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1704461 - python-mox3: Remove (sub)packages from Fedora 31+: python2-mox3
https://bugzilla.redhat.com/show_bug.cgi?id=1704461
[ 2 ] Bug #1675754 - python-mox3: FTBFS in Fedora rawhide/f30
https://bugzilla.redhat.com/show_bug.cgi?id=1675754
[ 3 ] Bug #1605775 - python-mox3: FTBFS in Fedora rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1605775
--------------------------------------------------------------------------------
================================================================================
python-neutronclient-6.7.0-3.fc30 (FEDORA-2019-3984414a33)
Python API and CLI for OpenStack Neutron
--------------------------------------------------------------------------------
Update Information:
Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
ChangeLog:
* Sat Feb 2 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.7.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1675759 - python-neutronclient: FTBFS in Fedora rawhide/f30
https://bugzilla.redhat.com/show_bug.cgi?id=1675759
--------------------------------------------------------------------------------
================================================================================
python-octaviaclient-1.3.0-8.fc30 (FEDORA-2019-73d570dfde)
Client for OpenStack Octavia (Load Balancer as a Service)
--------------------------------------------------------------------------------
Update Information:
Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
ChangeLog:
* Sat Feb 2 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.0-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1675765 - python-octaviaclient: FTBFS in Fedora rawhide/f30
https://bugzilla.redhat.com/show_bug.cgi?id=1675765
--------------------------------------------------------------------------------
================================================================================
python-openstackclient-3.14.1-8.fc30 (FEDORA-2019-e242c5bc23)
OpenStack Command-line Client
--------------------------------------------------------------------------------
Update Information:
Remove unnecessary requirement on doc subpackage ---- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 30 2019 Javier Pe��a <jpena(a)redhat.com> - 3.14.1-8
- Remove unnecessary requirement on doc subpackage
* Sat Feb 2 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.14.1-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1675766 - python-openstackclient: FTBFS in Fedora rawhide/f30
https://bugzilla.redhat.com/show_bug.cgi?id=1675766
--------------------------------------------------------------------------------
================================================================================
python-operator-courier-2.0.2-1.fc30 (FEDORA-2019-cd3e9876c4)
Library and CLI tool to build, verify and push operator metadata
--------------------------------------------------------------------------------
Update Information:
Latest upstream. ---- Latest upstream.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 30 2019 Ralph Bean <rbean(a)redhat.com> - 2.0.2-1
- new version
* Fri Apr 26 2019 Ralph Bean <rbean(a)redhat.com> - 2.0.1-1
- new version
--------------------------------------------------------------------------------
================================================================================
python-pykafka-2.6.0-0.6.dev2.fc30 (FEDORA-2019-3895e1e861)
Full-Featured Pure-Python Kafka Client
--------------------------------------------------------------------------------
Update Information:
Disable the python2 subpackage on Fedora (bz#1701959)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 30 2019 Javier Pe��a <jpena(a)redhat.com> - 2.6.0-0.6.dev2
- Disable the python2 subpackage on Fedora (bz#1701959)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1701959 - python2-pykafka fails to install due to missing dependencies
https://bugzilla.redhat.com/show_bug.cgi?id=1701959
--------------------------------------------------------------------------------
================================================================================
python-pyramid_sawing-1.1.3-1.fc30 (FEDORA-2019-8608c59737)
Pyramid plugin for YAML logging configuration
--------------------------------------------------------------------------------
Update Information:
Initial release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1702451 - Review Request: python-pyramid_sawing - Pyramid plugin for YAML
logging configuration
https://bugzilla.redhat.com/show_bug.cgi?id=1702451
--------------------------------------------------------------------------------
================================================================================
python-twine-1.12.2-3.fc30 (FEDORA-2019-d75773da52)
Collection of utilities for interacting with PyPI
--------------------------------------------------------------------------------
Update Information:
twine-1.12.2-3.fc30 should fix the upgrade path from Fedora 29 to 30 by properly
obsoleting python{2,3}-twine from Fedora 29
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 30 2019 Jeremy Cline <jcline(a)redhat.com> - 1.12.2-3
- Bump the obsoletes so the upgrade path from F29 works
- Include the manpage since the dep chain for docs building is broken
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1704526 - Upgrade from F29 to F30 fails if python3-twine is installed due to
conflict between FC30 twine and FC29 python3-twine
https://bugzilla.redhat.com/show_bug.cgi?id=1704526
--------------------------------------------------------------------------------
================================================================================
python-ufl-2019.1.0-1.fc30 (FEDORA-2019-f4f28a1a63)
A compiler for finite element variational forms
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release 2019.1.0 (rhbz#1655269)
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 1 2019 Fabian Affolter <mail(a)fabian-affolter.ch> - 2019.1.0-1
- Update to latest upstream release 2019.1.0 (rhbz#1655269)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1655269 - python-ufl-2019.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1655269
--------------------------------------------------------------------------------
================================================================================
python2-2.7.16-2.fc30 (FEDORA-2019-2a3fd1d4e7)
An interpreted, interactive, object-oriented programming language
--------------------------------------------------------------------------------
Update Information:
Now python2-tools should now be multilib parallelly installeble. I.e. you can
install python2-tools.x86_64 and python2-tools.i686.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 26 2019 Tomas Orsava <torsava(a)redhat.com> - 2.7.16-2
- Remove pyc/pyo files from /usr/bin (#1703575)
- Update the macro that disables automatic bytecompilation to the new correct
form (#1597664)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1703575 - python2: Multilib difference for usr/bin/smtpd2.7.pyo on x86_64 vs
i686
https://bugzilla.redhat.com/show_bug.cgi?id=1703575
--------------------------------------------------------------------------------
================================================================================
rubygem-actioncable-5.2.3-1.fc30 (FEDORA-2019-1cfe24db5c)
WebSocket framework for Rails
--------------------------------------------------------------------------------
Update Information:
Update Ruby on Rails to 5.2.3. Fixes CVE-2019-5418 CVE-2019-5419 CVE-2019-5420.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 28 2019 Pavel Valena <pvalena(a)redhat.com> - 5.2.3-1
- Update to Action Cable 5.2.3.
* Thu Mar 14 2019 Pavel Valena <pvalena(a)redhat.com> - 5.2.2.1-1
- Update to Action Cable 5.2.2.1.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1689161 - CVE-2019-5418 CVE-2019-5419 rubygem-actionview: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1689161
[ 2 ] Bug #1689155 - CVE-2019-5420 rubygem-rails: Weak secret token leading to possible
code execution [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1689155
--------------------------------------------------------------------------------
================================================================================
rubygem-actionmailer-5.2.3-1.fc30 (FEDORA-2019-1cfe24db5c)
Email composition, delivery, and receiving framework (part of Rails)
--------------------------------------------------------------------------------
Update Information:
Update Ruby on Rails to 5.2.3. Fixes CVE-2019-5418 CVE-2019-5419 CVE-2019-5420.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 28 2019 Pavel Valena <pvalena(a)redhat.com> - 1:5.2.3-1
- Update to Action Mailer 5.2.3.
* Thu Mar 14 2019 Pavel Valena <pvalena(a)redhat.com> - 1:5.2.2.1-1
- Update to Action Mailer 5.2.2.1.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1689161 - CVE-2019-5418 CVE-2019-5419 rubygem-actionview: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1689161
[ 2 ] Bug #1689155 - CVE-2019-5420 rubygem-rails: Weak secret token leading to possible
code execution [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1689155
--------------------------------------------------------------------------------
================================================================================
rubygem-actionpack-5.2.3-2.fc30 (FEDORA-2019-1cfe24db5c)
Web-flow and rendering framework putting the VC in MVC (part of Rails)
--------------------------------------------------------------------------------
Update Information:
Update Ruby on Rails to 5.2.3. Fixes CVE-2019-5418 CVE-2019-5419 CVE-2019-5420.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 28 2019 Pavel Valena <pvalena(a)redhat.com> - 1:5.2.3-2
- Enable tests.
* Thu Mar 28 2019 Pavel Valena <pvalena(a)redhat.com> - 1:5.2.3-1
- Update to Action Pack 5.2.3.
* Mon Mar 18 2019 Pavel Valena <pvalena(a)redhat.com> - 1:5.2.2.1-2
- Enable tests.
* Thu Mar 14 2019 Pavel Valena <pvalena(a)redhat.com> - 1:5.2.2.1-1
- Update to Action Pack 5.2.2.1.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1689161 - CVE-2019-5418 CVE-2019-5419 rubygem-actionview: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1689161
[ 2 ] Bug #1689155 - CVE-2019-5420 rubygem-rails: Weak secret token leading to possible
code execution [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1689155
--------------------------------------------------------------------------------
================================================================================
rubygem-actionview-5.2.3-2.fc30 (FEDORA-2019-1cfe24db5c)
Rendering framework putting the V in MVC (part of Rails)
--------------------------------------------------------------------------------
Update Information:
Update Ruby on Rails to 5.2.3. Fixes CVE-2019-5418 CVE-2019-5419 CVE-2019-5420.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 28 2019 Pavel Valena <pvalena(a)redhat.com> - 5.2.3-2
- Enable tests.
* Thu Mar 28 2019 Pavel Valena <pvalena(a)redhat.com> - 5.2.3-1
- Update to Action View 5.2.3.
* Mon Mar 18 2019 Pavel Valena <pvalena(a)redhat.com> - 5.2.2.1-2
- Enable tests.
* Thu Mar 14 2019 Pavel Valena <pvalena(a)redhat.com> - 5.2.2.1-1
- Update to Action View 5.2.2.1.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1689161 - CVE-2019-5418 CVE-2019-5419 rubygem-actionview: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1689161
[ 2 ] Bug #1689155 - CVE-2019-5420 rubygem-rails: Weak secret token leading to possible
code execution [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1689155
--------------------------------------------------------------------------------
================================================================================
rubygem-activejob-5.2.3-1.fc30 (FEDORA-2019-1cfe24db5c)
Job framework with pluggable queues
--------------------------------------------------------------------------------
Update Information:
Update Ruby on Rails to 5.2.3. Fixes CVE-2019-5418 CVE-2019-5419 CVE-2019-5420.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 28 2019 Pavel Valena <pvalena(a)redhat.com> - 5.2.3-1
- Update to Active Job 5.2.3.
* Thu Mar 14 2019 Pavel Valena <pvalena(a)redhat.com> - 5.2.2.1-1
- Update to Active Job 5.2.2.1.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1689161 - CVE-2019-5418 CVE-2019-5419 rubygem-actionview: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1689161
[ 2 ] Bug #1689155 - CVE-2019-5420 rubygem-rails: Weak secret token leading to possible
code execution [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1689155
--------------------------------------------------------------------------------
================================================================================
rubygem-activemodel-5.2.3-2.fc30 (FEDORA-2019-1cfe24db5c)
A toolkit for building modeling frameworks (part of Rails)
--------------------------------------------------------------------------------
Update Information:
Update Ruby on Rails to 5.2.3. Fixes CVE-2019-5418 CVE-2019-5419 CVE-2019-5420.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 28 2019 Pavel Valena <pvalena(a)redhat.com> - 5.2.3-2
- Enable tests.
* Thu Mar 28 2019 Pavel Valena <pvalena(a)redhat.com> - 5.2.3-1
- Update to Active Model 5.2.3.
* Mon Mar 18 2019 Pavel Valena <pvalena(a)redhat.com> - 5.2.2.1-2
- Enable tests.
* Thu Mar 14 2019 Pavel Valena <pvalena(a)redhat.com> - 5.2.2.1-1
- Update to Active Model 5.2.2.1.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1689161 - CVE-2019-5418 CVE-2019-5419 rubygem-actionview: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1689161
[ 2 ] Bug #1689155 - CVE-2019-5420 rubygem-rails: Weak secret token leading to possible
code execution [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1689155
--------------------------------------------------------------------------------
================================================================================
rubygem-activerecord-5.2.3-1.fc30 (FEDORA-2019-1cfe24db5c)
Object-relational mapper framework (part of Rails)
--------------------------------------------------------------------------------
Update Information:
Update Ruby on Rails to 5.2.3. Fixes CVE-2019-5418 CVE-2019-5419 CVE-2019-5420.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 28 2019 Pavel Valena <pvalena(a)redhat.com> - 1:5.2.3-1
- Update to Active Record 5.2.3.
* Thu Mar 14 2019 Pavel Valena <pvalena(a)redhat.com> - 1:5.2.2.1-1
- Update to Active Record 5.2.2.1.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1689161 - CVE-2019-5418 CVE-2019-5419 rubygem-actionview: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1689161
[ 2 ] Bug #1689155 - CVE-2019-5420 rubygem-rails: Weak secret token leading to possible
code execution [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1689155
--------------------------------------------------------------------------------
================================================================================
rubygem-activestorage-5.2.3-1.fc30 (FEDORA-2019-1cfe24db5c)
Local and cloud file storage framework
--------------------------------------------------------------------------------
Update Information:
Update Ruby on Rails to 5.2.3. Fixes CVE-2019-5418 CVE-2019-5419 CVE-2019-5420.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 28 2019 Pavel Valena <pvalena(a)redhat.com> - 5.2.3-1
- Update to Active Storage 5.2.3.
* Mon Mar 18 2019 Pavel Valena <pvalena(a)redhat.com> - 5.2.2.1-2
- Enable tests.
* Thu Mar 14 2019 Pavel Valena <pvalena(a)redhat.com> - 5.2.2.1-1
- Update to Active Storage 5.2.2.1.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1689161 - CVE-2019-5418 CVE-2019-5419 rubygem-actionview: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1689161
[ 2 ] Bug #1689155 - CVE-2019-5420 rubygem-rails: Weak secret token leading to possible
code execution [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1689155
--------------------------------------------------------------------------------
================================================================================
rubygem-activesupport-5.2.3-1.fc30 (FEDORA-2019-1cfe24db5c)
A support libraries and Ruby core extensions extracted from the Rails framework
--------------------------------------------------------------------------------
Update Information:
Update Ruby on Rails to 5.2.3. Fixes CVE-2019-5418 CVE-2019-5419 CVE-2019-5420.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 28 2019 Pavel Valena <pvalena(a)redhat.com> - 1:5.2.3-1
- Update to Active Support 5.2.3.
* Thu Mar 14 2019 Pavel Valena <pvalena(a)redhat.com> - 1:5.2.2.1-1
- Update to Active Support 5.2.2.1.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1689161 - CVE-2019-5418 CVE-2019-5419 rubygem-actionview: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1689161
[ 2 ] Bug #1689155 - CVE-2019-5420 rubygem-rails: Weak secret token leading to possible
code execution [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1689155
--------------------------------------------------------------------------------
================================================================================
rubygem-diffy-3.2.1-1.fc30 (FEDORA-2019-69c1492313)
A convenient way to diff string in ruby
--------------------------------------------------------------------------------
Update Information:
update to 3.2.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 1 2019 Ilya Gradina <ilya.gradina(a)gmail.com> - 3.2.1-1
- Update to 3.2.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1580086 - rubygem-diffy-3.2.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1580086
--------------------------------------------------------------------------------
================================================================================
rubygem-rails-5.2.3-1.fc30 (FEDORA-2019-1cfe24db5c)
Full-stack web application framework
--------------------------------------------------------------------------------
Update Information:
Update Ruby on Rails to 5.2.3. Fixes CVE-2019-5418 CVE-2019-5419 CVE-2019-5420.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 28 2019 Pavel Valena <pvalena(a)redhat.com> - 1:5.2.3-1
- Update to Rails 5.2.3.
* Thu Mar 14 2019 Pavel Valena <pvalena(a)redhat.com> - 1:5.2.2.1-1
- Update to Rails 5.2.2.1.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1689161 - CVE-2019-5418 CVE-2019-5419 rubygem-actionview: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1689161
[ 2 ] Bug #1689155 - CVE-2019-5420 rubygem-rails: Weak secret token leading to possible
code execution [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1689155
--------------------------------------------------------------------------------
================================================================================
rubygem-railties-5.2.3-1.fc30 (FEDORA-2019-1cfe24db5c)
Tools for creating, working with, and running Rails applications
--------------------------------------------------------------------------------
Update Information:
Update Ruby on Rails to 5.2.3. Fixes CVE-2019-5418 CVE-2019-5419 CVE-2019-5420.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 28 2019 Pavel Valena <pvalena(a)redhat.com> - 5.2.3-1
- Update to Railties 5.2.3.
* Mon Mar 18 2019 Pavel Valena <pvalena(a)redhat.com> - 5.2.2.1-2
- Enable tests.
* Thu Mar 14 2019 Pavel Valena <pvalena(a)redhat.com> - 5.2.2.1-1
- Update to Railties 5.2.2.1.
* Sat Feb 2 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.2.2-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1689161 - CVE-2019-5418 CVE-2019-5419 rubygem-actionview: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1689161
[ 2 ] Bug #1689155 - CVE-2019-5420 rubygem-rails: Weak secret token leading to possible
code execution [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1689155
--------------------------------------------------------------------------------
================================================================================
source-to-image-1.1.7-5.fc30 (FEDORA-2019-d97f682aec)
A tool for building artifacts from source and injecting into docker images
--------------------------------------------------------------------------------
Update Information:
Remove unneeded dependency on
github.com/fsouza/go-dockerclient
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 30 2019 Jan Chaloupka <jchaloup(a)redhat.com> - 1.1.7-5
- Remove unneeded dependency on
github.com/fsouza/go-dockerclient
resolves: #1676016
* Sun Feb 3 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.7-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1676016 - source-to-image: FTBFS in Fedora rawhide/f30
https://bugzilla.redhat.com/show_bug.cgi?id=1676016
--------------------------------------------------------------------------------
================================================================================
spice-0.14.2-1.fc30 (FEDORA-2019-60e528696e)
Implements the SPICE protocol
--------------------------------------------------------------------------------
Update Information:
Update to 0.14.2
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 30 2019 Victor Toso <victortoso(a)redhat.com> - 0.14.2-1
- Update to 0.14.2
--------------------------------------------------------------------------------
================================================================================
toolbox-0.0.9-1.fc30 (FEDORA-2019-6eaa80e8b4)
Unprivileged development environment
--------------------------------------------------------------------------------
Update Information:
* Add Bash completion * Allow connecting to Wayland displays other than
"wayland-0" * Ask for confirmation before downloading the base image * Improve
the onboarding experience * Make it available inside the toolbox container *
Make 'toolbox enter' create or fall back to a container when possible * Set
TOOLBOX_CONTAINER in the environment to identify as a toolbox * Set default
release to 29 when running on non-fedora hosts * Show welcome texts on
interactive shells
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 30 2019 Debarshi Ray <rishi(a)fedoraproject.org> - 0.0.9-1
- Update to 0.0.9
* Tue Apr 16 2019 Adam Williamson <awilliam(a)redhat.com> - 0.0.8-2
- Rebuild with Meson fix for #1699099
--------------------------------------------------------------------------------
================================================================================
udica-0.1.5-2.fc30 (FEDORA-2019-6929de9ed4)
A tool for generating SELinux security policies for containers
--------------------------------------------------------------------------------
Update Information:
- Add allow rules for container_runtime_t to base_container.cil, podman version
1.2.0 requires new allow rules.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 30 2019 Lukas Vrabec <lvrabec(a)redhat.com> - 0.1.5-2
- Add allow rules for container_runtime_t to base_container.cil, Podman version 1.2.0
requires new allow rules.
--------------------------------------------------------------------------------
================================================================================
weasyprint-0.39-1.fc30 (FEDORA-2019-5e7ba0829d)
Utility to render HTML and CSS to PDF
--------------------------------------------------------------------------------
Update Information:
Update to upstream v0.39.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 30 2019 Eric Smith <brouhaha(a)fedoraproject.org> 0.39-1
- Update to newer (but not latest) upstream.
* Tue Apr 30 2019 Eric Smith <brouhaha(a)fedoraproject.org> 0.22-16
- Update requirements, use license macro, and other minor changes from
Felix Schwarz <fschwarz(a)fedoraproject.org>.
- Use better github tarball naming.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1622365 - [abrt] weasyprint: resolve():
__init__.py:774:resolve:pkg_resources.DistributionNotFound: The 'WeasyPrint==0.22'
distribution was not found and is required by the application
https://bugzilla.redhat.com/show_bug.cgi?id=1622365
[ 2 ] Bug #1685649 - [abrt] weasyprint: HTMLInputStream():
_inputstream.py:151:HTMLInputStream:TypeError: __init__() got an unexpected keyword
argument 'encoding'
https://bugzilla.redhat.com/show_bug.cgi?id=1685649
[ 3 ] Bug #1685654 - [abrt] weasyprint: module():
_ffi.py:3:<module>:ModuleNotFoundError: No module named 'xcffib'
https://bugzilla.redhat.com/show_bug.cgi?id=1685654
--------------------------------------------------------------------------------
================================================================================
wxMaxima-19.04.3-1.fc30 (FEDORA-2019-79cc104daf)
Graphical user interface for Maxima
--------------------------------------------------------------------------------
Update Information:
Update to the latest stable release. The main changes since the last version
are: * Corrected the size of error messages; * A "Copy to
octave/matlab"-feature; * wxMaxima now delays interpreting the data from maxima
until it encounters a newline or a Timer expires; * EMF output no no more causes
crashes and strange behaviour; * RTF output should now work again; *
entermatrix() now works again.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 28 2019 Jos�� Matos <jamatos(a)fedoraproject.org> - 19.04.3-1
- 19.04.3
- add upstream patch to fix bad xml appdata file
--------------------------------------------------------------------------------