Update to 2.8.1 bugfix release. Sync up dependencies with upstream.
Fix CVE-2019-10156

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

glib 2.60.4 release :

  - Fixes to improved network status detection with     NetworkManager

  - Leak fixes to some `glib-genmarshal` generated code

  - Further fixes to the Happy Eyeballs (RFC 8305)     implementation

  - File system permissions fix to clamp down permissions in     a small time window when copying files (CVE-2019-12450)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

do not install /usr/libexec/crio - conflicts with crio

----

Resolves: #1715668 - CVE-2019-10152

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Resolves: #1715758 - CVE-2019-9946

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

https://lists.wikimedia.org/pipermail/mediawiki-announce/2019-June/000 230.html

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to 1.1.33 and fix CVE-2019-11068

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to [3.3.8](https://github.com/vakata/jstree/compare/3.3.5...3.3.8).

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

dovecot updated to 2.3.6, includes several security fixes

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2019-11459.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Upstream announcement :

Welcome to **phpMyAdmin 4.9.0.1**, a bugfix release that includes important security fixes.

This release fixes two security vulnerabilities :

  - PMASA-2019-3 is a SQL injection flaw in the Designer     feature

  - PMASA-2019-4 is a CSRF attack that's possible through     the 'cookie' login form

Upgrading is highly recommended for all users. Using the 'http' auth_type instead of 'cookie' can mitigate the CSRF attack.

The solution for the CSRF attack does remove the former functionality to log in directly through URL parameters (as mentioned in FAQ 4.8, such as https://example.com/phpmyadmin/?pma_username=root&password=foo). Such behavior was discouraged and is now removed. Other query parameters work as expected; only pma_username and pma_password have been removed.

This release also includes fixes for many bugs, including :

  - Several issues with SYSTEM VERSIONING tables

  - Fixed json encode error in export

  - Fixed JavaScript events not activating on input (sql     bookmark issue)

  - Show Designer combo boxes when adding a constraint

  - Fix edit view

  - Fixed invalid default value for bit field

  - Fix several errors relating to GIS data types

  - Fixed JavaScript error PMA_messages is not defined

  - Fixed import XML data with leading zeros

  - Fixed php notice, added support for 'DELETE HISTORY'     table privilege (MariaDB >= 10.3.4)

  - Fixed MySQL 8.0.0 issues with GIS display

  - Fixed 'Server charset' in 'Database server' tab showing     wrong information

  - Fixed can not copy user on Percona Server 5.7

  - Updated sql-parser to version 4.3.2, which fixes several     parsing and linting problems

There are many, many more bug fixes thanks to the efforts of our developers, Google Summer of Code applicants, and other contributors.

The phpMyAdmin team

----

**phpmyadmin/sql-parser version 4.3.2**

  - Fix redundant whitespaces in build() outputs (#228)

  - Fix incorrect error on DEFAULT keyword in ALTER     operation (#229)

  - Fix incorrect outputs from Query::getClause (#233)

  - Add support for reading a SQL file from stdin

  - Fix for missing tokenize-query in Composer's vendor/bin/     directory

  - Fix for PHP warnings with an incomplete CASE expression     (#241)

  - Fix for error message with multiple CALL statements     (#223)

  - Recognize the question mark character as a parameter     (#242)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to v1.24.3

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Resolves: rhbz#1718986 Updated to 3.29 for CVE-2019-10155

----

Updated to 3.28 (many imported bugfixes)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

1717503 - Security issue: patch 8.1.1365: source command doesn't check for the sandbox

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- New upstream version (67.0.2)

  - Release notes are available at     https://www.mozilla.org/en-US/firefox/67.0.2/releasenote     s/

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to v5.1.8

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

do not install /usr/libexec/crio - conflicts with crio

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to v5.1.8

----

Update to v5.1.7

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to 2.3.4 upstream release

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

update to 2.1.9

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Resolves: #1715668 - CVE-2019-10152

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to v5.1.7

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to version 3.0.10, which fixes a security issue (a buffer overrun vulnerability in the httpd daemon, CVE-2019-11356).

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

**PHP version 7.2.19** (30 May 2019)

**EXIF:**

  - Fixed bug php#77988 (heap-buffer-overflow on     php_jpg_get16). (CVE-2019-11040) (Stas)

**FPM:**

  - Fixed bug php#77934 (php-fpm kill -USR2 not working).
    (Jakub Zelenka)

  - Fixed bug php#77921 (static.php.net doesn't work     anymore). (Peter Kokot)

**GD:**

  - Fixed bug php#77943 (imageantialias($image, false); does     not work). (cmb)

  - Fixed bug php#77973 (Uninitialized read in     gdImageCreateFromXbm). (CVE-2019-11038) (cmb)

**Iconv:**

  - Fixed bug php#78069 (Out-of-bounds read in     iconv.c:_php_iconv_mime_decode() due to integer     overflow). (CVE-2019-11039). (maris dot adam)

**JSON:**

  - Fixed bug php#77843 (Use after free with json     serializer). (Nikita)

**Opcache:**

  - Fixed possible crashes, because of inconsistent PCRE     cache and opcache SHM reset. (Alexey Kalinin, Dmitry)

**PDO_MySQL:**

  - Fixed bug php#77944 (Wrong meta pdo_type for bigint on     LLP64). (cmb)

**Reflection:**

  - Fixed bug php#75186 (Inconsistent reflection of     Closure:::__invoke()). (Nikita)

**Session:**

  - Fixed bug php#77911 (Wrong warning for     session.sid_bits_per_character). (cmb)

**SPL:**

  - Fixed bug php#77024 (SplFileObject::__toString() may     return array). (Craig Duncan)

**SQLite:**

  - Fixed bug php#77967 (Bypassing open_basedir restrictions     via file uris). (Stas)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- fix TFTP receive buffer overflow (CVE-2019-5436)

  - fix integer overflows in curl_url_set() (CVE-2019-5435)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to 1.8.2 to fix CVE-2019-12300.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fix improper checks in deepin-api polkit actions

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

**PHP version 7.3.6** (30 May 2019)

**cURL:**

  - Implemented FR php#72189 (Add missing CURL_VERSION_*     constants). (Javier Spagnoletti)

**EXIF:**

  - Fixed bug php#77988 (heap-buffer-overflow on     php_jpg_get16). (CVE-2019-11040) (Stas)

**FPM:**

  - Fixed bug php#77934 (php-fpm kill -USR2 not working).
    (Jakub Zelenka)

  - Fixed bug php#77921 (static.php.net doesn't work     anymore). (Peter Kokot)

**GD:**

  - Fixed bug php#77943 (imageantialias($image, false); does     not work). (cmb)

  - Fixed bug php#77973 (Uninitialized read in     gdImageCreateFromXbm). (CVE-2019-11038) (cmb)

**Iconv:**

  - Fixed bug php#78069 (Out-of-bounds read in     iconv.c:_php_iconv_mime_decode() due to integer     overflow). (CVE-2019-11039). (maris dot adam)

**JSON:**

  - Fixed bug php#77843 (Use after free with json     serializer). (Nikita)

**Opcache:**

  - Fixed possible crashes, because of inconsistent PCRE     cache and opcache SHM reset. (Alexey Kalinin, Dmitry)

**PDO_MySQL:**

  - Fixed bug php#77944 (Wrong meta pdo_type for bigint on     LLP64). (cmb)

**Reflection:**

  - Fixed bug php#75186 (Inconsistent reflection of     Closure:::__invoke()). (Nikita)

**Session:**

  - Fixed bug php#77911 (Wrong warning for     session.sid_bits_per_character). (cmb)

**SOAP:**

  - Fixed bug php#77945 (Segmentation fault when     constructing SoapClient with WSDL_CACHE_BOTH). (Nikita)

**SPL:**

  - Fixed bug php#77024 (SplFileObject::__toString() may     return array). (Craig Duncan)

**SQLite:**

  - Fixed bug php#77967 (Bypassing open_basedir restrictions     via file uris). (Stas)

**Standard:**

  - Fixed bug php#77931 (Warning for array_map mentions     wrong type). (Nikita)

  - Fixed bug php#78003 (strip_tags output change since PHP     7.3). (cmb)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Rebase to the v5.1 kernel series

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to 2.3.1 to fix CVE-2019-12300.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to version 2.8 from upstream, Security fix for [CVE-2019-11555]

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Updates the nss package to upstream NSS 3.44.

For details about new functionality and a list of bugs fixed in this release please see the upstream release notes

https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.44
_release_notes

----

This fixes a PKCS#11 module leak if C_GetSlotInfo() returns an error.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Fix for CVE-2019-11498

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2019-5827, CVE-2019-9937, CVE-2019-9936

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The 5.0.19 update contains a number of important fixes across the tree

----

The 5.0.18 kernel update contains a number of important fixes across the tree.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- https://www.drupal.org/project/xmlsitemap/releases/7.x-2.6

- https://www.drupal.org/project/xmlsitemap/releases/7.x-2.5

- https://www.drupal.org/project/xmlsitemap/releases/7.x-2.4

  - [Moderately critical - Information Disclosure -     SA-CONTRIB-2018-053](https://www.drupal.org/sa-contrib-2     018-053)

- https://www.drupal.org/project/xmlsitemap/releases/7.x-2.3

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- https://www.drupal.org/project/views/releases/7.x-3.23

- https://www.drupal.org/project/views/releases/7.x-3.22

- https://www.drupal.org/project/views/releases/7.x-3.21

  - [Less critical - Cross site scripting -     SA-CONTRIB-2019-036](https://www.drupal.org/sa-contrib-2     019-036)

  - [Moderately critical - Information disclosure -     SA-CONTRIB-2019-035](https://www.drupal.org/sa-contrib-2     019-035)

  - [Moderately critical - Information Disclosure -     SA-CONTRIB-2019-034](https://www.drupal.org/sa-contrib-2     019-034)

- https://www.drupal.org/project/views/releases/7.x-3.20

- https://www.drupal.org/project/views/releases/7.x-3.19

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- https://www.drupal.org/project/uuid/releases/7.x-1.2

- https://www.drupal.org/project/uuid/releases/7.x-1.1

  - [Moderately critical - Arbitrary file upload -     SA-CONTRIB-2018-045](https://www.drupal.org/sa-contrib-2     018-045)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- https://www.drupal.org/project/path_breadcrumbs/releases/7.x-3.4

  - [Less critical - Cross site scripting -     SA-CONTRIB-2019-027](https://www.drupal.org/sa-contrib-2     019-027)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to 4.6.6 Various bugfixes on the 4.6 branch

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to 8.2.0.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- https://www.drupal.org/project/context/releases/7.x-3.10

  - [Moderately critical - Cross site scripting -     SA-CONTRIB-2019-028](https://www.drupal.org/sa-contrib-2     019-028)

- https://www.drupal.org/project/context/releases/7.x-3.9

- https://www.drupal.org/project/context/releases/7.x-3.8

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Severity
125962	Fedora 29 : ansible (2019-d438eff890)	High
125961	Fedora 30 : glib2 (2019-c18d2bd1bd)	High
125960	Fedora 30 : ansible (2019-37171bc5f9)	High
125933	Fedora 29 : 2:podman (2019-b66d704846)	High
125932	Fedora 29 : containernetworking-plugins (2019-24217abfdf)	Medium
125931	Fedora 30 : mediawiki (2019-02046db281)	High
125912	Fedora 30 : libxslt (2019-e21c77ffae)	High
125911	Fedora 29 : js-jquery-jstree (2019-a171291a47)	High
125910	Fedora 30 : 1:dovecot (2019-9e004decea)	High
125909	Fedora 30 : evince (2019-6316c0663e)	Medium
125908	Fedora 30 : js-jquery-jstree (2019-38abc6b897)	High
125907	Fedora 29 : php-phpmyadmin-sql-parser / phpMyAdmin (2019-33649e2e64)	High
125906	Fedora 30 : php-phpmyadmin-sql-parser / phpMyAdmin (2019-13d2ba0aed)	High
125870	Fedora 29 : python-urllib3 (2019-fbda9f1e49)	Medium
125869	Fedora 30 : libreswan (2019-f7fb531958)	Low
125868	Fedora 29 : 2:vim (2019-dcd49378b8)	High
125867	Fedora 30 : containernetworking-plugins (2019-d2b57d3b19)	Medium
125866	Fedora 30 : firefox (2019-c22338aa23)	High
125865	Fedora 30 : kernel / kernel-headers (2019-c03eda3cc6)	High
125864	Fedora 30 : 2:podman (2019-886b4d2fb6)	High
125863	Fedora 29 : kernel / kernel-headers (2019-83858fc57b)	High
125862	Fedora 30 : nodejs-tough-cookie (2019-76f1b57c1c)	Medium
125861	Fedora 30 : python-django (2019-57a4324120)	Medium
125860	Fedora 30 : python-urllib3 (2019-20bc611b61)	Medium
125838	Fedora 30 : 2:podman (2019-0937bbf558)	High
125790	Fedora 30 : kernel / kernel-headers (2019-f40bd7826f)	High
125789	Fedora 29 : cyrus-imapd (2019-f0435555ac)	High
125788	Fedora 30 : 2:vim (2019-d79f89346c)	High
125787	Fedora 29 : php (2019-8c4b25b5ec)	High
125786	Fedora 29 : curl (2019-697de0501f)	Medium
125785	Fedora 29 : buildbot (2019-2ea119f414)	Medium
125748	Fedora 30 : deepin-api (2019-c25a0e7032)	High
125747	Fedora 30 : php (2019-be4f895015)	High
125746	Fedora 29 : kernel / kernel-headers / kernel-tools (2019-7ec378191e)	High
125745	Fedora 30 : buildbot (2019-3270dc130b)	Medium
125744	Fedora 30 : cyrus-imapd (2019-309f559057)	High
125743	Fedora 30 : hostapd (2019-28d3ca93d2)	Medium
125710	Fedora 29 : nss (2019-e2f5e10754)	High
125686	Fedora 29 : wavpack (2019-b8a704ff4b)	Medium
125685	Fedora 29 : sqlite (2019-a01751837d)	Medium
125684	Fedora 29 : kernel / kernel-headers / kernel-tools (2019-48b34fc991)	Low
125661	Fedora 29 : drupal7-xmlsitemap (2019-f219dbb548)	High
125660	Fedora 29 : drupal7-views (2019-f08c17b5cc)	High
125659	Fedora 30 : drupal7-uuid (2019-e454116a1a)	High
125658	Fedora 29 : drupal7-path_breadcrumbs (2019-c12c2f0c22)	High
125657	Fedora 30 : sleuthkit (2019-b860f718ec)	Medium
125656	Fedora 30 : cryptopp (2019-812b77ed2e)	Medium
125655	Fedora 30 : drupal7-path_breadcrumbs (2019-78bfda5218)	High
125654	Fedora 29 : drupal7-context (2019-62eba285ee)	High
125653	Fedora 29 : sleuthkit (2019-61b6dae771)	Medium

Fedora Local Security Checks Family for Nessus