[SECURITY] Fedora 29 Update: koji-1.19.1-1.fc29

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-bf8b97d604
2019-11-25 02:32:52.318365
--------------------------------------------------------------------------------

Name        : koji
Product     : Fedora 29
Version     : 1.19.1
Release     : 1.fc29
URL         : https://pagure.io/koji/
Summary     : Build system tools
Description :
Koji is a system for building and tracking RPMS.  The base package
contains shared libraries and the command-line interface.

--------------------------------------------------------------------------------
Update Information:

Update to 1.19.1 bugfix release.  ----  Upstream bugfix release 1.19.0. See
https://docs.pagure.org/koji/release_notes_1.19/ for more info
--------------------------------------------------------------------------------
ChangeLog:

* Fri Nov  8 2019 Kevin Fenzi <kevin(a)scrye.com&gt; - 1.19.1-1
- Update to 1.19.1
* Fri Nov  1 2019 Mohan Boddu <mboddu(a)bhujji.com&gt; - 1.19.0-1
- Rebase to 1.19.0
- Removing downstream patch 1613
* Wed Oct  9 2019 Patrick Uiterwijk <patrick(a)puiterwijk.org&gt; - 1.18.1-1
- Rebase to 1.18.1 for CVE-2019-17109
* Wed Sep 18 2019 Jiri Popelka <jpopelka(a)redhat.com&gt; - 1.18.0-6
- Fix macro added in previous change.
* Tue Sep 17 2019 Kevin Fenzi <kevin(a)scrye.com&gt; - 1.18.0-5
- Add provides for python3 subpackage. Fixes bug #1750391
* Sat Aug 17 2019 Miro Hron��ok <mhroncok(a)redhat.com&gt; - 1.18.0-4
- Rebuilt for Python 3.8
* Fri Aug 16 2019 Kevin Fenzi <kevin(a)scrye.com&gt; - 1.18.0-3
- Fix pkgsurl/topurl default mistake.
* Fri Aug 16 2019 Kevin Fenzi <kevin(a)scrye.com&gt; - 1.18.0-2
- Fix mergerepos conditional for f30.
* Fri Aug 16 2019 Kevin Fenzi <kevin(a)scrye.com&gt; - 1.18.0-1
- Update to 1.18.0.
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org&gt; - 1.17.0-8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Thu May 30 2019 Kevin Fenzi <kevin(a)scrye.com&gt; - 1.17.0-7
- Add patch to fix koji kerberos auth with python3.
- Drop internal mergerepos so we can go all python3. Fixes bug #1715257
* Wed May 29 2019 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org&gt; - 1.17.0-7
- Expose dynamic_buildrequires mock setting
* Tue May 28 2019 Kevin Fenzi <kevin(a)scrye.com&gt; - 1.17.0-6
- Switch kojid back to python3 as imagefactory and oz have moved.
- Backport patch to download only repomd.xml instead of all repodata.
- Backport patch to allow 'bare' repo merging for modularity.
- Backport patch to allow for seperate srpm repos in buildroot repos.
* Mon Mar 11 2019 Neal Gompa <ngompa13(a)gmail.com&gt; - 1.17.0-5
- Switch kojid back to Python 2 so that imgfac doesn't get disabled
* Sun Mar 10 2019 Neal Gompa <ngompa13(a)gmail.com&gt; - 1.17.0-4
- Add patch proposed upstream to use createrepo_c by default to drop yum dependency
* Sun Mar 10 2019 Neal Gompa <ngompa13(a)gmail.com&gt; - 1.17.0-3
- Remove remnants of unused /usr/libexec/koji-hub
* Thu Mar  7 2019 Neal Gompa <ngompa13(a)gmail.com&gt; - 1.17.0-2
- Enable Python 3 for Fedora 30+ and EL8+
- Sync packaging changes from upstream
* Thu Mar  7 2019 Patrick Uiterwijk <puiterwijk(a)redhat.com&gt; - 1.17.0-1
- Rebase to 1.17.0
* Thu Feb 21 2019 Patrick Uiterwijk <puiterwijk(a)redhat.com&gt; - 1.16.2-1
- Rebase to 1.16.2 for CVE-2018-1002161
* Fri Feb  1 2019 Fedora Release Engineering <releng(a)fedoraproject.org&gt; - 1.16.1-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Wed Jan  9 2019 Adam Williamson <awilliam(a)redhat.com&gt; - 1.16.1-3
- Backport fix for Python 3 connection failure bug (#1192, PR #1203)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1768881 - CVE-2019-17109 koji: remote directory traversal
        https://bugzilla.redhat.com/show_bug.cgi?id=1768881
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-bf8b97d604' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------