- Improve performance of querying system fallback fonts.

  - Don&rsquo;t use prgname in dbus-proxy socket path.

  - Fix thread-safety issues in image decoders.

  - Fix the build with WebDriver disabled.

  - Disable accelerated compositing when we fail to     initialize the EGL dispaly under Wayland.

  - Fill the objects category in emoji picker.

  - Fix several crashes and rendering issues.

  -     [CVE-2019-8812](https://webkitgtk.org/security/WSA-2019-     0006.html#CVE-2019-8812)

  -     [CVE-2019-8814](https://webkitgtk.org/security/WSA-2019-     0006.html#CVE-2019-8814)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

## 3.0.4

CVE-2019-3465 / https://simplesamlphp.org/security/201911-01

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

## 2.1.1

CVE-2019-3465 / https://simplesamlphp.org/security/201911-01

## 2.1.0

Backports changes from 3.0 branch

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update chromium to 78.0.3904.87. Fixes CVE-2019-13720 and CVE-2019-13721 

----

Chromium 78. 

Fixes these: CVE-2019-5870 CVE-2019-5871 CVE-2019-5872 CVE-2019-5874 CVE-2019-5875 CVE-2019-13691 CVE-2019-13692 CVE-2019-5876 CVE-2019-5877 CVE-2019-5878 CVE-2019-5879 CVE-2019-5880 CVE-2019-5881 CVE-2019-13659 CVE-2019-13660 CVE-2019-13661 CVE-2019-13662 CVE-2019-13663 CVE-2019-13664 CVE-2019-13665 CVE-2019-13666 CVE-2019-13667 CVE-2019-13668 CVE-2019-13669 CVE-2019-13670 CVE-2019-13671 CVE-2019-13673 CVE-2019-13674 CVE-2019-13675 CVE-2019-13676 CVE-2019-13677 CVE-2019-13678 CVE-2019-13679 CVE-2019-13680 CVE-2019-13681 CVE-2019-13682 CVE-2019-13683

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to Samba 4.9.15 - Security fixes for CVE-2019-10218, CVE-2019-14833, CVE-2019-14847

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2019-16275

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This is an update fixing multiple vulnerabilities.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to version 1.9.4.

Resolves CVE-2019-10086.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The 5.3.11 stable kernel update contains a number of important security updates across the tree, including mitigations for the most recent hardware issues disclosed on Nov 12.

----

The 5.3.9 update contains a number of important fixes across the tree

----

Update to upstream 2.1-22. 20190618

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update code to deal with removal of DES support in MIT Kerberos.

----

Update to Samba 4.11.2 - Security fixes for CVE-2019-10218, CVE-2019-14833

----

Since MIT Kerberos deprecated use of DES encryption type, restore Samba AD domain controller functionality by not using DES encryption keys. Only AES and RC4 keys would work.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

bluez 5.52 :

  - improvements for bluetooth mesh

  - audio bug fixes

  - general bug fixes

----

ell 0.26 :

  - Fix issue with memory leak and TLS certificates.

  - Fix issue with buffer size and TLS PRF handling.

  - Add support for D-Bus non-root ObjectManager.

iwd 1.0 :

  - Add support for stable D-Bus interfaces.

  - Add support for network configuration documentation.

----

ell ver 0.25 :

  - Fix issue with stopping DHCP client and owner     notification.

  - Fix issue with time calculation overflow and DHCP.

iwd ver 0.23 :

  - Fix issue with strict certificate chain checks.

  - Fix issue with parsing RSNE_ADVANCE information.

  - Fix issue with parsing RSN information for WPA1.

  - Fix issue with logic error in scan frequency validation.

  - Fix issue with integer overflow and authentication     frames.

  - Add support for installing various manual pages.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The 5.3.11 stable kernel update contains a number of important security updates across the tree, including mitigations for the most recent hardware issues disclosed on Nov 12.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fix build on rhel/centos systems

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update brings security updates for OpenJDK 13 and updates it to most current version 13.0.1.9.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Updates the nspr and nss packages to upstream NSPR 4.23 and NSS 3.47 respectively.

For details about new functionality and a list of bugs fixed in this release please see the upstream release notes

- https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.47_release_notes

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fix CVE-2019-3463, CVE-2019-3464 and CVE-2019-1000018.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

fixed multiple security bugs

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

**MySQL 8.0.18**

Release notes :

https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-18.html

CVEs fixed :

CVE-2019-2911 CVE-2019-2914 CVE-2019-2938 CVE-2019-2946 CVE-2019-2957 CVE-2019-2960 CVE-2019-2963 CVE-2019-2966 CVE-2019-2967 CVE-2019-2968 CVE-2019-2974 CVE-2019-2982 CVE-2019-2991 CVE-2019-2993 CVE-2019-2997 CVE-2019-2998 CVE-2019-3004 CVE-2019-3009 CVE-2019-3011 CVE-2019-3018 https://bugzilla.redhat.com/show_bug.cgi?id=1768175 https://www.oracle.com/security-alerts/cpuoct2019.html

Maintainer notes :

linking with GOLD disabled on armv7hl, because of https://bugs.mysql.com/bug.php?id=96698

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Updated to latest upstream version (70.0)

----

  - New upstream version (69.0.3)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Python 3.5 has now entered 'security fixes only' mode, and as such the only changes since Python 3.5.4 are security fixes.

https://www.python.org/downloads/release/python-358/

https://docs.python.org/3.5/whatsnew/changelog.html#python-3-5-8

Security fix for CVE-2019-9740, CVE-2019-10160, CVE-2019-16935, CVE-2019-18348 , CVE-2019-16056.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

built version 0.10.5 fix CVE-2019-18837

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Python 2.7.17 is a bug fix release in the Python 2.7.x series. It is expected to be the penultimate release for Python 2.7.

https://www.python.org/downloads/release/python-2717/

  - Security fix for CVE-2018-20852.

  - Security fix for CVE-2019-16056.

  - Security fix for CVE-2019-16935.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix CVE-2019-16275 (AP mode PMF disconnection protection bypass)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Rebase to upstream version 0.60.8, that fixes potential [security flaw](http://aspell.net/buffer-overread-ucs.txt).

[ChangeLog](http://aspell.net/man-html/ChangeLog.html)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update chromium to 78.0.3904.87. Fixes CVE-2019-13720 and CVE-2019-13721

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to Samba 4.9.14

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Rebase to go1.12.13

----

  - Rebase to 1.12.12

  - Security fix for CVE-2019-17596

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

built version 0.10.5 fix CVE-2019-18837

----

built version 0.10.4

----

built version 0.10.3

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- fix heap-based buffer overflow in     cdf_read_property_info() (CVE-2019-18218)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

rebase to 1.16.1

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

CVE-2019-16866

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Severity
131048	Fedora 31 : webkit2gtk3 (2019-fa0c4b0674)	High
131047	Fedora 30 : php-robrichards-xmlseclibs3 (2019-ec8719a21c)	Medium
131046	Fedora 30 : php-robrichards-xmlseclibs (2019-dc90bf093b)	Medium
131045	Fedora 29 : php-robrichards-xmlseclibs3 (2019-be01267416)	Medium
131044	Fedora 31 : php-robrichards-xmlseclibs3 (2019-9a960c8a98)	Medium
131043	Fedora 29 : chromium (2019-8508d74523)	High
131042	Fedora 29 : php-robrichards-xmlseclibs (2019-81f61cdceb)	Medium
131041	Fedora 31 : php-robrichards-xmlseclibs (2019-73d0fe1d15)	Medium
131040	Fedora 29 : 2:samba (2019-703e299870)	Medium
131039	Fedora 29 : 1:wpa_supplicant (2019-65509aac53)	Low
131038	Fedora 30 : webkit2gtk3 (2019-4213e37211)	High
131037	Fedora 30 : chromium (2019-2fa7552273)	High
130991	Fedora 29 : putty (2019-f0d1f795c7)	High
130990	Fedora 31 : apache-commons-beanutils (2019-bcad44b5d6)	High
130989	Fedora 29 : 2:microcode_ctl / kernel / kernel-headers / kernel-tools (2019-7a3fc17778)	High
130988	Fedora 30 : apache-commons-beanutils (2019-79b5790566)	High
130987	Fedora 31 : 2:samba (2019-57d43f3b58)	Medium
130986	Fedora 31 : bluez / iwd / libell (2019-17419b24a3)	High
130920	Fedora 31 : 2:microcode_ctl / kernel / kernel-headers / kernel-tools (2019-68d7f68507)	High
130919	Fedora 30 : 2:microcode_ctl / kernel / kernel-headers / kernel-tools (2019-1689d3fe07)	High
130804	Fedora 30 : unbound (2019-e99b716a92)	Medium
130803	Fedora 31 : 1:java-latest-openjdk (2019-e87dd3ca51)	High
130802	Fedora 29 : nspr / nss (2019-e4c45e113c)	High
130801	Fedora 31 : rssh (2019-e47add6b2b)	High
130800	Fedora 29 : gd (2019-d7f8995451)	High
130799	Fedora 31 : community-mysql (2019-d40df38271)	Medium
130798	Fedora 29 : firefox (2019-d2856deb1f)	High
130797	Fedora 29 : python35 (2019-d202cda4f8)	Medium
130796	Fedora 30 : rssh (2019-d1487c13ac)	High
130795	Fedora 29 : community-mysql (2019-c1fab3f139)	Medium
130794	Fedora 29 : rssh (2019-bfb407659e)	High
130793	Fedora 30 : python35 (2019-b06ec6159b)	Medium
130792	Fedora 30 : gd (2019-ab7d22a466)	High
130791	Fedora 30 : crun (2019-80a2646798)	High
130790	Fedora 29 : python2 / python2-docs (2019-758824a3ff)	Medium
130789	Fedora 30 : python2 / python2-docs (2019-74ba24605e)	Medium
130788	Fedora 31 : hostapd (2019-740834c559)	Low
130787	Fedora 30 : 12:aspell (2019-73919e71f8)	High
130786	Fedora 31 : chromium (2019-688d52f9ff)	High
130785	Fedora 29 : 2:samba / libldb (2019-5c6a86b128)	High
130784	Fedora 31 : python35 (2019-57462fa10d)	Medium
130783	Fedora 30 : community-mysql (2019-48a0a07033)	Medium
130782	Fedora 30 : golang (2019-34e097c66c)	Medium
130781	Fedora 30 : hostapd (2019-2265b5ae86)	Low
130780	Fedora 31 : crun (2019-1ba2a6e386)	High
130779	Fedora 29 : file (2019-18036b898e)	High
130778	Fedora 30 : 1:java-latest-openjdk (2019-119312dbfc)	High
130777	Fedora 30 : mupdf (2019-10f02ad597)	Medium
130776	Fedora 31 : python2 / python2-docs (2019-0d3fcae639)	Medium
130775	Fedora 31 : unbound (2019-0418c12a36)	Medium

Fedora Local Security Checks Family for Nessus