Update to 2.5.0 (pre-release)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

# This is a beta preview of Python 3.8

Python 3.8 is still in development. This release, 3.8.0b4 is the last of four planned beta release previews. Beta release previews are intended to give the wider community the opportunity to test new features and bug fixes and to prepare their projects to support the new feature release.

# Call to action

We **strongly encourage** maintainers of third-party Python projects to **test with 3.8** during the beta phase and report issues found to [the Python bug tracker](https://bugs.python.org) as soon as possible.
While the release is planned to be feature complete entering the beta phase, it is possible that features may be modified or, in rare cases, deleted up until the start of the release candidate phase (2019-09-30). Our goal is have no ABI changes after beta 3 and no code changes after 3.8.0rc1, the release candidate. To achieve that, it will be extremely important to get as much exposure for 3.8 as possible during the beta phase.

Please keep in mind that this is a preview release and its use is
**not** recommended for production environments.

# Major new features of the 3.8 series, compared to 3.7

Some of the new major new features and changes in Python 3.8 are :

  - [PEP 572](https://www.python.org/dev/peps/pep-0572/),     Assignment expressions

  - [PEP 570](https://www.python.org/dev/peps/pep-0570/),     Positional-only arguments

  - [PEP 587](https://www.python.org/dev/peps/pep-0587/),     Python Initialization Configuration (improved embedding)

  - [PEP 590](https://www.python.org/dev/peps/pep-0590/),     Vectorcall: a fast calling protocol for CPython

  - [PEP 578](https://www.python.org/dev/peps/pep-0578),     Runtime audit hooks

  - [PEP 574](https://www.python.org/dev/peps/pep-0574),     Pickle protocol 5 with out-of-band data

  - Typing-related: [PEP     591](https://www.python.org/dev/peps/pep-0591) (Final     qualifier), [PEP     586](https://www.python.org/dev/peps/pep-0586) (Literal     types), and [PEP     589](https://www.python.org/dev/peps/pep-0589)     (TypedDict)

  - Parallel filesystem cache for compiled bytecode

  - Debug builds share ABI as release builds

  - f-strings support a handy `=` specifier for debugging

  - `continue` is now legal in `finally:` blocks

  - on Windows, the default `asyncio` event loop is now     `ProactorEventLoop`

  - on macOS, the _spawn_ start method is now used by     default in `multiprocessing`

  - `multiprocessing` can now use shared memory segments to     avoid pickling costs between processes

  - `typed_ast` is merged back to CPython

  - `LOAD_GLOBAL` is now 40% faster

  - `pickle` now uses Protocol 4 by default, improving     performance

There are many other interesting changes, please consult the 'What's New' page in the documentation for a full list.

The next pre-release of Python 3.8 and the first release candidate will be 3.8.0rc1, currently scheduled for 2019-09-30.

# More resources

  - [Online Documentation](https://docs.python.org/3.8/)

  - [PEP 569](https://www.python.org/dev/peps/pep-0569/),     3.8 Release Schedule

  - Report bugs at     [bugs.python.org](https://bugs.python.org) or via     [Fedora     Bugzilla](https://bugz.fedoraproject.org/python38)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- New upstream 1.3.13 release

  - Move to python3 for tests

  - Fix CVE-2018-7999 (rhbz 1554383)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to 2.0.16

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Chromium update to 76.0.3809.132.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to 2.49.5

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This release fixes a heap buffer over-read in BlitNtoN() function when processing an invalid BMP image. It also updates a URL in the RPM metadata.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Security fix for CVE-2019-14267

  - Security fix for CVE-2019-14934

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

**Version 1.3.10**

  - Managesieve: Fix so 'Create filter' option does not show     up when Filters menu is disabled (#6723)

  - Enigma: Fix bug where revoked users/keys were not greyed     out in key info

  - Enigma: Fix error message when trying to encrypt with a     revoked key (#6607)

  - Enigma: Fix 'decryption oracle' bug [CVE-2019-10740]     (#6638)

  - Fix compatibility with kolab/net_ldap3 > 1.0.7 (#6785)

  - Fix bug where bmp images couldn't be displayed on some     systems (#6728)

  - Fix bug in parsing vCard data using PHP 7.3 due to an     invalid regexp (#6744)

  - Fix bug where bold/strong text was converted to     upper-case on html-to-text conversion (6758)

  - Fix bug in rcube_utils::parse_hosts() where %t, %d, %z     could return only tld (#6746)

  - Fix bug where Next/Prev button in mail view didn't work     with multi-folder search result (#6793)

  - Fix bug where selection of columns on messages list     wasn't working

  - Fix bug in converting multi-page Tiff images to Jpeg     (#6824)

  - Fix wrong messages order after returning to a     multi-folder search result (#6836)

  - Fix PHP 7.4 deprecation: implode() wrong parameter order     (#6866)

  - Fix bug where it was possible to bypass the     position:fixed CSS check in received messages (#6898)

  - Fix bug where some strict remote URIs in url() style     were unintentionally blocked (#6899)

  - Fix bug where it was possible to bypass the CSS jail in     HTML messages using :root pseudo-class (#6897)

  - Fix bug where it was possible to bypass href URI check     with data:application/xhtml+xml URIs (#6896)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update LXC to version 3.0.4.

The release announcement can be found [here](https://discuss.linuxcontainers.org/t/lxc-3-0-4-has-been-releas ed/5080).

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to 1.8.6 release which fixes a bug in 1.8.5. 1.8.5 is a security release to address various buffer overflow and overrun issues in the rdesktop protocol handling.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This is an update fixing CVE-2019-15846.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Resolves: rhbz#1609774 nsd-4.2.2 is available

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2019-15043

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Rebase to go1.11.13

  - Security fix for CVE-2019-9512, CVE-2019-9514 and     CVE-2019-14809

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to latest qtwebengine release, includes bug and security fixes.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- CVE-2019-11500: IMAP protocol parser does not properly     handle NUL byte when scanning data in quoted strings,     leading to out of bounds heap memory writes

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Rebase to go1.12.9

  - Security fix for CVE-2019-9512, CVE-2019-9514 and     CVE-2019-14809

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Minor bug and security fix release 1.8.5.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fixes for CVE-2019-6472, CVE-2019-6473 and CVE-2019-6474

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Security issue: unprivileged users were allowed to     change DNS servers configured in systemd-resolved     (CVE-2019-15718).

  - Various minor fixes (memory issues, compat with newer     kernels, log message improvements, etc.).

  - hwdb entries for keyboards are updated to the latest     version

No need to log out or reboot.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

2.2.12, security fix for CVE-2019-8675 and CVE-2019-8696

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fixes for CVE-2019-8675, CVE-2019-8696

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fix for CVE-2019-1010317 and CVE-2019-1010319

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

**MySQL 8.0.17**

This update brings the latest MySQL 8.0.17 which fixes severe security issues. Now available as both a standard package and a module!

Release notes :

https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-17.html

Mainatiner notes :

  - The MySQL Modules are now built from the same sources as     the base packages, so the should be identical

  - The package is now being built with number of standard     Fedora build flags that has not been used before. The     package should be now more stable and secure.

  - In Modules, the bug #1729133 still exists

  - The MySQL 5.7 and 5.6 Modules may exists, but I'm out of     capacity to maintain them. Whenever possible upgrade to     MySQL 8.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Latest upstream 0.2.8

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The 5.2.11 stable kernel update contains a number of important fixes across the tree.

----

The 5.2.10 stable kernel update contains a number of important fixes across the tree.

----

The 5.2.9 stable kernel update contains a number of important fixes across the tree.

----

The 5.2.8 stable kernel update contains a number of important fixes across the tree.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2019-9511, CVE-2019-9513, CVE-2019-9516

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The 5.2.11 stable kernel update contains a number of important fixes across the tree.

----

The 5.2.10 stable kernel update contains a number of important fixes across the tree.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2019-1000021

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ClamAV 0.101.4 is a security patch release that addresses the following issues.

  - An out of bounds write was possible within ClamAV's NSIS     bzip2 library when attempting decompression in cases     where the number of selectors exceeded the max limit set     by the library (CVE-2019-12900). The issue has been     resolved by respecting that limit.

    Thanks to Martin Simmons for reporting the issue here.

  - The zip bomb vulnerability mitigated in 0.101.3 has been     assigned the CVE identifier CVE-2019-12625.
    Unfortunately, a workaround for the zip-bomb mitigation     was immediately identified. To remediate the zip-bomb     scan time issue, a scan time limit has been introduced     in 0.101.4. This limit now resolves ClamAV's     vulnerability to CVE-2019-12625.

    The default scan time limit is 2 minutes (120000     milliseconds).

    To customize the time limit :

  - use the clamscan --max-scantime option

  - use the clamd MaxScanTime config option

    Libclamav users may customize the time limit using the     cl_engine_set_num function. For example :

    C cl_engine_set_num(engine, CL_ENGINE_MAX_SCANTIME,     time_limit_milliseconds)

    Thanks to David Fifield for reviewing the zip-bomb     mitigation in 0.101.3 and reporting the issue.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Rebuilt with newer nghttp2

----

This update includes the latest upstream release of `mod_http2`, version **1.15.3**. Upstream changes include :

  - fixes Timeout vs. KeepAliveTimeout behaviour, see PR     63534.

  - Fixes stream cleanup when connection throttling is in     place.

  - Counts stream resets by client on streams initiated by     client as cause for connection throttling.

  - Header length checks are now logged similar to HTTP/1.1     protocol handler 

  - Header length is checked also on the merged value from     several header instances and results in a 431 response.

  - fixing mod_proxy_http2 to support trailers in both     directions. See PR 63502.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to latest upstream version.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2019-1010238

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Severity
128745	Fedora 29 : cobbler (2019-cd24f60a94)	High
128744	Fedora 30 : cobbler (2019-3cacfb34ad)	High
128653	Fedora 29 : python38 (2019-d58eb75449)	Medium
128652	Fedora 30 : python38 (2019-4954d8773c)	Medium
128626	Fedora 29 : graphite2 (2019-d0b1feb995)	Medium
128625	Fedora 30 : pdfbox (2019-9e91afa2be)	High
128624	Fedora 29 : pdfbox (2019-6fa01d12b4)	High
128623	Fedora 30 : chromium (2019-5d2420030c)	High
128583	Fedora 29 : seamonkey (2019-e31c2f7d87)	High
128582	Fedora 29 : SDL (2019-e08f78d4a6)	Medium
128581	Fedora 30 : pdfresurrect (2019-e01bc28777)	Medium
128580	Fedora 29 : roundcubemail (2019-d9c2f1ec70)	Medium
128579	Fedora 29 : lxc / lxcfs / python3-lxc (2019-c1dac1b3b8)	High
128578	Fedora 30 : rdesktop (2019-baff775841)	High
128577	Fedora 29 : exim (2019-ae361e20c2)	Critical
128576	Fedora 29 : rdesktop (2019-a457303ffc)	High
128575	Fedora 30 : nsd (2019-96fe76e02b)	High
128574	Fedora 29 : pdfresurrect (2019-80e5e20cf8)	Medium
128573	Fedora 30 : seamonkey (2019-7f7489dc8c)	High
128572	Fedora 29 : grafana (2019-77d612eab4)	Medium
128571	Fedora 29 : golang (2019-65db7ad6c7) (Ping Flood) (Reset Flood)	High
128570	Fedora 30 : graphite2 (2019-644ef7ebec)	Medium
128569	Fedora 29 : qt5-qtwebengine (2019-5e4316109b)	High
128568	Fedora 29 : 1:dovecot (2019-59d60bd1fa)	High
128567	Fedora 30 : golang (2019-55d101a740) (Ping Flood) (Reset Flood)	High
128566	Fedora 30 : exim (2019-467fcbb10a)	Critical
128565	Fedora 30 : SDL (2019-446ca9f695)	Medium
128564	Fedora 30 : lxc / lxcfs / python3-lxc (2019-2baa1f7b19)	High
128563	Fedora 30 : libgcrypt (2019-1f05925d82)	High
128562	Fedora 30 : grafana (2019-0bb6b876da)	Medium
128561	Fedora 30 : kea (2019-0811a88d77)	High
128535	Fedora 30 : systemd (2019-24e1d561e5)	Low
128490	Fedora 30 : 1:cups (2019-f3ef4d22db)	High
128489	Fedora 29 : 1:cups (2019-d9a2c03662)	High
128488	Fedora 30 : wavpack (2019-c72f5f6361)	Medium
128487	Fedora 30 : community-mysql (2019-c106e46a95)	Medium
128486	Fedora 30 : python-mitogen (2019-b25dd670a4)	Medium
128485	Fedora 29 : kernel / kernel-headers / kernel-tools (2019-97380355ae)	Critical
128484	Fedora 29 : community-mysql (2019-96516ce0ac)	Medium
128483	Fedora 29 : wavpack (2019-8eeb8f9d3f)	Medium
128482	Fedora 29 : 1:nginx (2019-7a0b45fdc4) (0-Length Headers Leak) (Data Dribble) (Resource Loop)	High
128481	Fedora 30 : kernel / kernel-headers / kernel-tools (2019-4c91a2f76e)	Critical
128480	Fedora 29 : python-mitogen (2019-1f17485159)	Medium
128438	Fedora 30 : python-slixmpp (2019-f40c49b99e)	Medium
128437	Fedora 29 : clamav (2019-aabcb53ec6)	High
128436	Fedora 30 : mod_http2 (2019-63ba15cc83) (0-Length Headers Leak) (Data Dribble) (Internal Data Buffering)	High
128435	Fedora 29 : python-slixmpp (2019-5a947d8603)	Medium
128434	Fedora 30 : 1:dovecot (2019-3844281be1)	High
128433	Fedora 29 : firefox (2019-373574c5a1)	High
128432	Fedora 29 : pango (2019-155e34df5a)	High

Fedora Local Security Checks Family for Nessus