The following Fedora 28 Security updates need testing:
Age URL
349
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d510cfd7eb
jgraphx-3.6.0.0-6.fc28
299
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d7aeaa74da
nodejs-brace-expansion-1.1.11-1.fc28
297
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc073fdc1a
nodejs-atob-2.1.1-1.fc28
173
https://bodhi.fedoraproject.org/updates/FEDORA-2018-cc4b7af297
xerces-c27-2.7.0-28.fc28
126
https://bodhi.fedoraproject.org/updates/FEDORA-2018-aa3752ac3c
nginx-1.14.1-1.fc28
105
https://bodhi.fedoraproject.org/updates/FEDORA-2018-cc86ef9e22 squid-4.4-1.fc28
102
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b18f9dd65b
tomcat-8.5.35-1.fc28
33
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8b5e704a73
poppler-0.62.0-16.fc28
32
https://bodhi.fedoraproject.org/updates/FEDORA-2019-86412405d5
bind-9.11.5-4.P4.fc28
21
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b2d986c3e9
freerdp-2.0.0-49.20190304git435872b.fc28 gnome-boxes-3.28.5-2.fc28
pidgin-sipe-1.24.0-3.fc28 remmina-1.3.3-1.fc28
19
https://bodhi.fedoraproject.org/updates/FEDORA-2019-63029a7692
libu2f-host-1.1.8-1.fc28
19
https://bodhi.fedoraproject.org/updates/FEDORA-2019-694e3aa4e8
ntp-4.2.8p13-1.fc28
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-87e2fa8e0f
libjpeg-turbo-1.5.3-7.fc28
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-348166f7fd
openwsman-2.6.5-4.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9e1a1cd634 putty-0.71-1.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3348cb4934
libssh2-1.8.1-1.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6baeb15da3
python34-3.4.10-1.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-cf725dd20b
python35-3.5.7-1.fc28
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-2fbce03df3
drupal7-7.65-1.fc28
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-79bd99f9a8
drupal8-8.6.13-1.fc28
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c595a93536
libarchive-3.3.3-6.fc28
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-86f32cbab1
python3-3.6.8-3.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-225052b90e
chromium-73.0.3683.75-2.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9f28451404
ghostscript-9.26-4.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3f561ba0be
golang-googlecode-go-crypto-0-0.25.20190324gitb7391e9.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-fb889c3af4
firefox-66.0.1-1.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ba19e79e9a
thunderbird-60.6.1-1.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-fd54b80806 fuse-2.9.9-1.fc28
The following Fedora 28 Critical Path updates have yet to be approved:
Age URL
105
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9f541b469b
nfs-utils-2.3.3-1.rc2.fc28
96
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4dddcb3e5e
highlight-3.48-1.fc28
69
https://bodhi.fedoraproject.org/updates/FEDORA-2019-78153d357c
totem-pl-parser-3.26.2-1.fc28
62
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e9c4843d39
volume_key-0.3.12-2.fc28
61
https://bodhi.fedoraproject.org/updates/FEDORA-2019-bb30467485
ostree-2019.1-2.fc28 rpm-ostree-2019.1-1.fc28
53
https://bodhi.fedoraproject.org/updates/FEDORA-2019-cb4a3023ef
iproute-4.20.0-1.fc28
36
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6c4e362bd0 dhcp-4.3.6-22.fc28
dnsperf-2.2.1-1.fc28 bind-dyndb-ldap-11.1-13.fc28 bind-9.11.5-2.P1.fc28
33
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8b5e704a73
poppler-0.62.0-16.fc28
29
https://bodhi.fedoraproject.org/updates/FEDORA-2019-68e7e119bb
udisks2-2.7.6-3.fc28
15
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c4107ac9d3 koji-1.17.0-5.fc28
14
https://bodhi.fedoraproject.org/updates/FEDORA-2019-f38cfd1456
ntfs-3g-2017.3.23-10.fc28
14
https://bodhi.fedoraproject.org/updates/FEDORA-2019-cb98bf5ace
fedfind-4.2.2-1.fc28 python-productmd-1.20-1.fc28
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-348166f7fd
openwsman-2.6.5-4.fc28
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-87e2fa8e0f
libjpeg-turbo-1.5.3-7.fc28
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d95d1a1e0e
libseccomp-2.4.0-0.fc28
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ea42f2be87 fedora-repos-28-7
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e60ecc03b4
python-productmd-1.21-1.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-457ab67a6c
psmisc-23.1-3.1.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3348cb4934
libssh2-1.8.1-1.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-155f8c72c2
osinfo-db-20190319-1.fc28
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-86f32cbab1
python3-3.6.8-3.fc28
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c595a93536
libarchive-3.3.3-6.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-a7ea886082
polkit-0.115-2.3.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-812d4a31f7 audit-2.8.5-2.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-fd54b80806 fuse-2.9.9-1.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4af9d5bb56
kernel-headers-5.0.4-100.fc28 kernel-tools-5.0.4-100.fc28 kernel-5.0.4-100.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ba19e79e9a
thunderbird-60.6.1-1.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4574633aa0 pcre2-10.32-9.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-764312c529 nspr-4.21.0-1.fc28
nss-3.43.0-1.fc28
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-fb889c3af4
firefox-66.0.1-1.fc28
The following builds have been pushed to Fedora 28 updates-testing
cmst-2019.01.13-1.git7778754.fc28
gnutls-3.6.5-3.fc28
ipmctl-01.00.00.3446-1.fc28
java-1.8.0-openjdk-1.8.0.201.b09-5.fc28
java-11-openjdk-11.0.2.7-6.fc28
leptonica-1.78.0-1.fc28
libosmo-dsp-0.3-10.fc28
liquibase-3.6.3-1.fc28
metamath-0.176-1.fc28
mingw-leptonica-1.78.0-1.fc28
ocaml-menhir-20171222-3.fc28
perl-DateTime-TimeZone-2.34-1.fc28
phpunit7-7.5.8-1.fc28
python-iso3166-1.0-1.fc28
qt-4.8.7-45.fc28
snapd-2.38-1.fc28
snapd-glib-1.47-1.fc28
sssd-1.16.4-2.fc28
trellis-1.0-0.2.20190327gitf1b1b35.fc28
xtl-0.6.1-1.fc28
Details about builds:
================================================================================
cmst-2019.01.13-1.git7778754.fc28 (FEDORA-2019-fda7a7ad85)
A Qt based GUI front end for the connman connection manager with systemtray icon
--------------------------------------------------------------------------------
Update Information:
Update to 2019.01.13-1.git7778754
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 27 2019 Martin Gansser <martinkg(a)fedoraproject.org> -
2019.01.13-1.git7778754
- Update to 2019.01.13-1.git7778754
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> -
2018.01.06-3.gitd6ee8f8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
2018.01.06-2.gitd6ee8f8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
gnutls-3.6.5-3.fc28 (FEDORA-2019-46df367eed)
A TLS protocol implementation
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2019-3829 and CVE-2019-3836
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 27 2019 Anderson Sasaki <ansasaki(a)redhat.com> - 3.6.5-3
- Fixed CVE-2019-3829 (#1693210)
- Fixed CVE-2019-3836 (#1693214)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1678411 - CVE-2019-3836 gnutls: invalid pointer access upon receiving async
handshake messages
https://bugzilla.redhat.com/show_bug.cgi?id=1678411
[ 2 ] Bug #1677048 - CVE-2019-3829 gnutls: use-after-free/double-free in certificate
verification
https://bugzilla.redhat.com/show_bug.cgi?id=1677048
--------------------------------------------------------------------------------
================================================================================
ipmctl-01.00.00.3446-1.fc28 (FEDORA-2019-754df3024f)
Utility for managing Intel Optane DC persistent memory modules
--------------------------------------------------------------------------------
Update Information:
Release v01.00.00.3446
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 26 2019 Juston Li <juston.li(a)intel.com> - 01.00.00.3446-1
- Release 01.00.00.3446
--------------------------------------------------------------------------------
================================================================================
java-1.8.0-openjdk-1.8.0.201.b09-5.fc28 (FEDORA-2019-ef67535474)
OpenJDK Runtime Environment 8
--------------------------------------------------------------------------------
Update Information:
Add various improvements (config files to /etc; allow disabling of system crypto
policy) and bug fixes.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Feb 19 2019 Severin Gehwolf <sgehwolf(a)redhat.com> - 1:1.8.0.201.b09-5
- Add a test verifying system crypto policies can be disabled
* Tue Feb 19 2019 Andrew Hughes <gnu.andrew(a)redhat.com> - 1:1.8.0.201.b09-4
- Add PR3655 to allow the system crypto policy to be turned off.
* Mon Feb 11 2019 Jiri Vanek <jvanek(a)redhat.com> - 1:1.8.0.201.b09-3
- config files to etc
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1633332 - /etc/java missing config files for ojdk8
https://bugzilla.redhat.com/show_bug.cgi?id=1633332
--------------------------------------------------------------------------------
================================================================================
java-11-openjdk-11.0.2.7-6.fc28 (FEDORA-2019-649ac90900)
OpenJDK Runtime Environment 11
--------------------------------------------------------------------------------
Update Information:
Add capability of disabling system crypto policy. Fix annochcheck warning (F29).
Fix RHBZ#1643469.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Feb 26 2019 Severin Gehwolf <sgehwolf(a)redhat.com> - 1:11.0.2.7-6
- Don't package lib/client and lib/client/classes.jsa
which don't exist.
- Resolves: RHBZ#1643469
* Tue Feb 19 2019 Severin Gehwolf <sgehwolf(a)redhat.com> - 1:11.0.2.7-5
- Add explicit requirement for libXcomposite which is used when performing
screenshots from Java.
- Add explicit BR unzip required for building OpenJDK.
* Thu Feb 14 2019 Severin Gehwolf <sgehwolf(a)redhat.com> - 1:11.0.2.7-4
- Add a test verifying system crypto policies can be disabled
* Tue Feb 12 2019 Severin Gehwolf <sgehwolf(a)redhat.com> - 1:11.0.2.7-3
- Don't build the test images needlessly.
* Thu Feb 7 2019 Andrew John Hughes <gnu.andrew(a)redhat.com> - 1:11.0.2.7-2
- Add PR3695 to allow the system crypto policy to be turned off.
- Correct original system crypto policy patch to refer to OpenJDK 11 bug (PR3694)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1643469 - Upgrade warning during cleanup: lib/client: remove failed: No such
file or directory
https://bugzilla.redhat.com/show_bug.cgi?id=1643469
--------------------------------------------------------------------------------
================================================================================
leptonica-1.78.0-1.fc28 (FEDORA-2019-cddee17560)
C library for efficient image processing and image analysis operations
--------------------------------------------------------------------------------
Update Information:
Update to leptonica-1.78.0, see
http://www.leptonica.com/source/version-
notes.html for details.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 27 2019 Sandro Mani <manisandro(a)gmail.com> - 1.78.0-1
- Update to 1.78.0
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.77.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1691180 - leptonica-1.78.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1691180
--------------------------------------------------------------------------------
================================================================================
libosmo-dsp-0.3-10.fc28 (FEDORA-2019-4c06c4b280)
A library with SDR DSP primitives
--------------------------------------------------------------------------------
Update Information:
This is an update fixing version in pkg-config file.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 27 2019 Jaroslav ��karvada <jskarvad(a)redhat.com> - 0.3-10
- Fixed version in pkg-config file
Related: rhbz#1692517
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
liquibase-3.6.3-1.fc28 (FEDORA-2019-d73f6a01fd)
Database Refactoring Tool
--------------------------------------------------------------------------------
Update Information:
Update to latest Liquibase release.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 26 2019 Alex Wood <awood(a)redhat.com> 3.6.3-1
- Update to 3.6.3
--------------------------------------------------------------------------------
================================================================================
metamath-0.176-1.fc28 (FEDORA-2019-1a15b1873b)
Construct mathematics from basic axioms
--------------------------------------------------------------------------------
Update Information:
Changes in version 0.176: - add /TOP_DATE_SKIP to VERIFY MARKUP - update set.mm
to the 24-Mar-2019 version
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 26 2019 Jerry James <loganjerry(a)gmail.com> - 0.176-1
- New upstream version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1692259 - metamath-0.176 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1692259
--------------------------------------------------------------------------------
================================================================================
mingw-leptonica-1.78.0-1.fc28 (FEDORA-2019-cddee17560)
MinGW Windows Leptonica library
--------------------------------------------------------------------------------
Update Information:
Update to leptonica-1.78.0, see
http://www.leptonica.com/source/version-
notes.html for details.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 27 2019 Sandro Mani <manisandro(a)gmail.com> - 1.78.0-1
- Update to 1.78.0
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.77.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1691180 - leptonica-1.78.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1691180
--------------------------------------------------------------------------------
================================================================================
ocaml-menhir-20171222-3.fc28 (FEDORA-2019-b7009d5833)
LR(1) parser generator for OCaml
--------------------------------------------------------------------------------
Update Information:
This update adds a dependency on ocaml-findlib from ocaml-menhir-devel.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 26 2019 Jerry James <loganjerry(a)gmail.com> - 20171222-3
- Add missing R on ocamlfind (bz 1692434)
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
20171222-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1692434 - Missing dependency on ocaml-findlib
https://bugzilla.redhat.com/show_bug.cgi?id=1692434
--------------------------------------------------------------------------------
================================================================================
perl-DateTime-TimeZone-2.34-1.fc28 (FEDORA-2019-e5da251c0c)
Time zone object base class and factory
--------------------------------------------------------------------------------
Update Information:
Updated to the latest release
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 27 2019 Jitka Plesnikova <jplesnik(a)redhat.com> - 2.34-1
- 2.34 bump (2019a Olson database)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1693012 - perl-DateTime-TimeZone-2.34 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1693012
--------------------------------------------------------------------------------
================================================================================
phpunit7-7.5.8-1.fc28 (FEDORA-2019-ab90b810c3)
The PHP Unit Testing framework version 7
--------------------------------------------------------------------------------
Update Information:
**Version 7.5.8** - 2019-03-26 **Fixed** * Fixed
[#3564](https://github.com/sebastianbergmann/phpunit/issues/3564): Production
code uses class from test suite's fixture
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 27 2019 Remi Collet <remi(a)remirepo.net> - 7.5.8-1
- update to 7.5.8
--------------------------------------------------------------------------------
================================================================================
python-iso3166-1.0-1.fc28 (FEDORA-2019-3f75e738a0)
Self-contained ISO 3166-1 country definitions
--------------------------------------------------------------------------------
Update Information:
1.0 - March 19, 2018 -------------------- * Updated entries - "Macedonia,
the former Yugoslav Republic of" changed to "North Macedonia"
(effective
2019-03-13) - Added numeric code 983 for Kosovo to mirror usage by the
National Statistical Office of Canada (thanks betaboon!)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 27 2019 Mohamed El Morabity <melmorabity(a)fedoraproject.org> - 1.0-1
- Update to 1.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1690617 - python-iso3166-1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1690617
--------------------------------------------------------------------------------
================================================================================
qt-4.8.7-45.fc28 (FEDORA-2019-b5e690b96e)
Qt toolkit
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2018-19872
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 22 2019 Than Ngo <than(a)redhat.com> - 4.8.7-45
- fixed #1691638 - CVE-2018-19872 qt: malformed PPM image causing division by zero and
crash in qppmhandler.cpp
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1691636 - CVE-2018-19872 qt: malformed PPM image causing division by zero and
crash in qppmhandler.cpp
https://bugzilla.redhat.com/show_bug.cgi?id=1691636
--------------------------------------------------------------------------------
================================================================================
snapd-2.38-1.fc28 (FEDORA-2019-2d75eaae81)
A transactional software package manager
--------------------------------------------------------------------------------
Update Information:
Update to `snapd-2.38` and `snapd-glib-1.47`
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 21 2019 Neal Gompa <ngompa13(a)gmail.com> - 2.38-1
- Release 2.38 to Fedora (RH#1691296)
- Switch to officially released main source tarball
- Drop obsolete snapd-login-service Provides
* Thu Mar 21 2019 Michael Vogt <mvo(a)ubuntu.com>
- New upstream release 2.38
- overlord/snapstate,: retry less for auto-stuff
- cmd/snap: fix regression of snap saved command
- interfaces/builtin: add dev/pts/ptmx access to docker_support
- overlord/snapstate, store: set a header when auto-refreshing
- interfaces/builtin: add add exec "/" to docker-support
- cmd/snap, client, daemon, ifacestate: show a leading attribute of
a connection
- interface: avahi-observe: Fixing socket permissions on 4.15
kernels
- tests: check that apt works before using it
- apparmor: support AppArmor 2.13
- snapstate: restart into the snapd snap on classic
- overlord/snapstate: during refresh, re-refresh on epoch bump
- cmd, daemon: split out the common bits of mapLocal and mapRemote
- cmd/snap-confine: chown private /tmp to root.root
- cmd/snap-confine: drop uid from random /tmp name
- overlord/hookstate: apply pending transaction changes onto
temporary configuration for snapctl get
- cmd/snap: `snap connections` command
- interfaces/greengrass_support: update accesses for GGC 1.8
- cmd/snap, daemon: make the connectivity check use GET
- interfaces/builtin,/udev: add spec support to disable udev +
device cgroup and use it for greengrass
- interfaces/intel-mei: small follow up tweaks
- ifacestate/tests: fix/improve udev mon test
- interfaces: add multipass-support interface
- tests/main/high-user-handling: fix the test for Go 1.12
- interfaces: add new intel-mei interface
- systemd: decrease the checker counter before unlocking otherwise
we can get spurious panics
- daemon/tests: fix race in the disconnect conflict test
- cmd/snap-confine: allow moving tasks to pids cgroup
- tests: enable opensuse tumbleweed on spread
- cmd/snap: fix `snap services` completion
- ifacestate/hotplug: integration with udev monitor
- packaging: build snapctl as a static binary
- packaging/opensuse: move most logic to snapd.mk
- overlord: fix ensure before slowness on Retry
- overlord/ifacestate: fix migration of connections on upgrade from
ubuntu-core
- daemon, client, cmd/snap: debug GETs ask aspects, not actions
- tests/main/desktop-portal-*: fix handling of python dependencies
- interfaces/wayland: allow wayland server snaps function on classic
too
- daemon, client, cmd/snap: snap debug base-declaration
- tests: run tests on opensuse leap 15.0 instead of 42.3
- cmd/snap: fix error messages for snapshots commands if ID is not
uint
- interfaces/seccomp: increase filter precision
- interfaces/network-manager: no peer label check for hostname1
- tests: add a tests for xdg-desktop-portal integration
- tests: not checking 'tracking channel' after refresh core on
nested execution
- tests: remove snapweb from tests
- snap, wrappers: support StartTimeout
- wrappers: Add an X-SnapInstanceName field to desktop files
- cmd/snap: produce better output for help on subcommands
- tests/main/nfs-support: use archive mode for creating fstab backup
- many: collect time each task runs and display it with `snap debug
timings <id>`
- tests: add attribution to helper script
- daemon: make ucrednetGet not loop
- squashfs: unset SOURCE_DATE_EPOCH in the TestBuildDate test
- features,cmd/libsnap: add new feature "refresh-app-awareness"
- overlord: fix random typos
- interfaces/seccomp: generate global seccomp profile
- daemon/api: fix error case for disconnect conflict
- overlord/snapstate: add some randomness to the catalog refresh
- tests: disable trusty-proposed for now
- tests: fix upgrade-from-2.15 with kernel 4.15
- interfaces/apparmor: allow sending and receiving signals from
ourselves
- tests: split the test interfaces-many in 2 and remove snaps on
restore
- tests: use snap which takes 15 seconds to install on retryable-
error test
- packaging: avoid race in snapd.postinst
- overlord/snapstate: discard mount namespace when undoing 1st link
snap
- cmd/snap-confine: allow writes to /var/lib/**
- tests: stop catalog-update test for now
- tests/main/auto-refresh-private: make sure to actually download
with the expired macaroon
- many: save media info when installing, show it when listing
- userd: handle help urls which requires prepending XDG_DATA_DIRS
- tests: fix NFS home mocking
- tests: improve snaps-system-env test
- tests: pre-cache core on core18 systems
- interfaces/hotplug: renamed RequestedSlotSpec to ProposedSlot,
removed Specification
- debian: ensure leftover usr.lib.snapd.snap-confine is gone
- image,cmd/snap,tests: introduce support for modern prepare-image
--snap <snap>[=<channel>]
- overlord/ifacestate: tweak logic for generating unique slot names
- packaging: import debian salsa packaging work, add sbuild test and
use in spead
- overlord/ifacestate: hotplug-add-slot handler
- image,cmd/snap: simplify --classic-arch to --arch, expose
prepare-image
- tests: run test snap as user in the smoke test
- cmd/snap: tweak man output to have no doubled up .TP lines
- cmd/snap, overlord/snapstate: silently ignore classic flag when a
snap is strictly confined
- snap-confine: remove special handling of /var/lib/jenkins
- cmd/snap-confine: handle death of helper process
- packaging: disable systemd environment generator on 18.04
- snap-confine: fix classic snaps for users with /var/lib/* homedirs
- tests/prepare: prevent console-conf from running
- image: bootstrapToRootDir => setupSeed
- image,cmd/snap,tests: introduce prepare-image --classic
- tests: update smoke/sandbox test for armhf
- client, daemon: introduce helper for querying snapd API for the
list of slot/plug connections
- cmd/snap-confine: refactor and cleanup of seccomp loading
- snapstate, snap: allow update/switch requests with risk only
channel to DTRT
- interfaces: add network-manager-observe interface
- snap-confine: increase locking timeout to 30s
- snap-confine: fix incorrect "sanity timeout 3s" message
- snap-confine: provide proper error message on sc_sanity_timeout
- snapd,state: improve error message on state reading failure
- interfaces/apparmor: deny inet/inet6 in snap-update-ns profile
- snap: fix reexec from the snapd snap for classic snaps
- snap: fix hook autodiscovery for parallel installed snaps
- overlord/snapstate: format the refresh time for the log
- cmd/snap-confine: add special case for Jenkins
- snapcraft.yaml: fix XBuildDeb PATH for go-1.10
- overlord/snapstate: validate instance names early
- overlord/ifacestate: handler for hotplug-update-slot tasks
- polkit: cast pid to uint32 to keep polkit happy for now
- snap/naming: move various name validation helpers to separate
package
- tests: iterate getting journal logs to support delay on boards on
daemon-notify test
- cmd/snap: fix typo in cmd_wait.go
- snap/channel: improve channel parsing
- daemon, polkit: pid_t is signed
- daemon: introduce /v2/connections snapd API endpoint
- cmd/snap: small refactor of cmd_info's channel handling
- overlord/snapstate: use an ad-hoc error when no results
- cmd/snap: wrap "summary" better
- tests: workaround missing go dependencies in debian-9
- daemon: try to tidy up the icon stuff a little
- interfaces: add display-control interface
- snapcraft.yaml: fix snap building in launchpad
- tests: update fedora 29 workers to speed up the whole testing time
- interfaces: add u2f-devices interface and allow reading udev
+power_supply:* in hardware-observe
- cmd/snap-update-ns: save errno from strtoul
- tests: interfaces tests normalization
- many: cleanup
golang.org/x/net/context
- tests: add spread test for system dbus interface
- tests: remove -o pipefail
- interfaces: add block-devices interface
- spread: enable upgrade suite on fedora
- tests/main/searching: video section got renamed to photo-and-video
- interfaces/home: use dac_read_search instead of dac_override with
'read: all'
- snap: really run the RunSuite
- interfaces/camera: allow reading vendor/etc info from
/run/udev/data/+usb:*
- interfaces/dbus: be less strict about alternations for well-known
names
- interfaces/home: allow dac_override with 'read:
all'
- interfaces/pulseaudio: allow reading subdirectories of
/etc/pulse
- interfaces/system-observe: allow read on
/proc/locks
- run-checks: ensure we use go-1.10 if available
- tests: get test-snapd-dbus-{provider,consumer} from the beta
channel
- interfaces/apparmor: mock presence of overlayfs root
- spread: increase default kill-timeout to 30min
- tests: simplify interfaces-contacts-service test
- packaging/ubuntu: build with golang 1.10
- ifacestate/tests: extra test for hotplug-connect handler
- packaging: make sure that /var/lib/snapd/lib/glvnd is accounted
for
- overlord/snapstate/backend: call fontconfig helpers from the new
'current'
- kvm: load required kernel modules if necessary
- cmd/snap: use a fake user for 'run' tests
- tests: update systems for google sru backend
- tests: fix install-snaps test by changing the snap info regex
- interfaces: helpers for sorting plug/slot/connection refs
- tests: moving core-snap-refresh-on-core test from main to nested
suite
- tests: fix daemon-notify test checking denials considering all the
log lines
- tests: skip lp-1802591 on "official" images
- tests: fix listing tests to match "snap list --unicode=never"
- debian: fix silly typo in the spread test invocation
- interface: raw-usb: Adding ttyACM ttyACA permissions
- tests: fix enable-disable-unit-gpio test on external boards
- overlord/ifacestate: helper API to obtain the state of connections
- tests: define new "tests/smoke" suite and use that for
autopkgtests
- cmd/snap-update-ns: explicitly check for return value from
parse_arg_u
- interfaces/builtin/opengl: allow access to NVIDIA VDPAU library
- tests: auto-clean the test directory
- cmd/snap: further tweak messaging; add a test
- overlord/ifacestate: handler for hotplug-connect task
- cmd/snap-confine: join freezer only after setting up user mount
- cmd/snap-confine: don't preemptively create .mnt files
- cmd/snap-update-ns: manually implement isspace
- cmd/snap-update-ns: let the go parser know we are parsing -u
- cmd/snap-discard-ns: fix name of user fstab files
- snapshotstate: don't task.Log without the lock
- tests: exclude some more slow tests from runs in autopkgtest
- many: remove .user-fstab files from /run/snapd/ns
- cmd/libsnap: pass --from-snap-confine when calling snap-update-ns
as user
- cmd/snap-update-ns: make freezer mockable
- cmd/snap-update-ns: move XDG code to dedicated file
- osutil: add helper for loading fstab from string
- cmd/snap-update-ns: move existing code around, renaming some
functions
- overlord/configstate/configcore: support - and _ in cloud init
field names
- * cmd/snap-confine: use makedev instead of MKDEV
- tests: review/fix the autopkgtest failures in disco
- overlord: drop old v1 store api support from managers test
- tests: new test for snapshots with more than 1 user
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1691296 - snapd-2.38 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1691296
[ 2 ] Bug #1684347 - snapd-glib-1.47 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1684347
--------------------------------------------------------------------------------
================================================================================
snapd-glib-1.47-1.fc28 (FEDORA-2019-2d75eaae81)
Library providing a GLib interface to snapd
--------------------------------------------------------------------------------
Update Information:
Update to `snapd-2.38` and `snapd-glib-1.47`
--------------------------------------------------------------------------------
ChangeLog:
* Sun Mar 24 2019 Neal Gompa <ngompa13(a)gmail.com> - 1.47-1
- Update to 1.47
- New API: snapd_channel_get_released_at
- New API: SNAPD_ERROR_DNS_FAILURE
- Fix tests breaking due to undefined order of results
- Remove generated MOC file from tarball
* Mon Feb 4 2019 Kalev Lember <klember(a)redhat.com> - 1.45-3
- Update BRs for vala packaging changes
* Sun Feb 3 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.45-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Fri Jan 25 2019 Richard Hughes <rhughes(a)redhat.com> - 1.45-1
- Update to 1.45
- Support base snap field
- Support filtering apps
- Support maintenance information returned from snapd
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1691296 - snapd-2.38 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1691296
[ 2 ] Bug #1684347 - snapd-glib-1.47 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1684347
--------------------------------------------------------------------------------
================================================================================
sssd-1.16.4-2.fc28 (FEDORA-2019-a0ae4e93b9)
System Security Services Daemon
--------------------------------------------------------------------------------
Update Information:
Resolves: upstream#3867 - [RFE] Need an option in SSSD so that it will skip
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 27 2019 Michal ��idek <mzidek(a)redhat.com> - 1.16.4-2
- Resolves: upstream#3867 - [RFE] Need an option in SSSD so that it will skip
GPOs that have groupPolicyContainers unreadable
by SSSD.
- CVE-2018-16838
* Wed Mar 27 2019 Michal ��idek <mzidek(a)redhat.com> - 1.16.4-1
- Latest upstream release of 1.16 branch
-
https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_4.html
--------------------------------------------------------------------------------
================================================================================
trellis-1.0-0.2.20190327gitf1b1b35.fc28 (FEDORA-2019-b411f79c95)
Lattice ECP5 FPGA bitstream creation/analysis/programming tools
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream snapshot. ---- Update to latest upstream snapshot.
---- Initial version.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1689397 - Review Request: trellis - Lattice ECP5 FPGA bitstream
creation/analysis/programming tools
https://bugzilla.redhat.com/show_bug.cgi?id=1689397
--------------------------------------------------------------------------------
================================================================================
xtl-0.6.1-1.fc28 (FEDORA-2019-44e6038697)
QuantStack tools library
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 26 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.6.1-1
- Update to latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1691557 - xtl-0.6.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1691557
--------------------------------------------------------------------------------