- Rebase to 1.8.28

  - Fixed CVE-2019-14287

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Resolves: #1757214, #1757290 - CVE-2019-16884

----

add patch for cgroupsv2

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to latest upstream version.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update provides the final 1.3.2 release (previously the package was 1.3.2 beta). It also includes the previously-omitted database schema directory (resolving [#1415753](https://bugzilla.redhat.com/show_bug.cgi?id=1415753)) and rddmarc tools, and backports proposed fixes for a [crasher bug](https://bugzilla.redhat.com/show_bug.cgi?id=1673293) and [security issue CVE-2019-16378](https://bugzilla.redhat.com/show_bug.cgi?id=1753081) from upstream submissions.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Security fix for CVE-2019-16276

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A bugfix and security update of QtWebEngine to 5.12.5, the latest release from the 5.12 LTS branch.

Security fixes from Chromium up to version 76.0.3809.87, including :

  - CVE-2019-5829

  - CVE-2019-5831

  - CVE-2019-5832

  - CVE-2019-5837

  - CVE-2019-5839

  - CVE-2019-5842

  - CVE-2019-5851

  - CVE-2019-5852

  - CVE-2019-5854

  - CVE-2019-5855

  - CVE-2019-5856

  - CVE-2019-5857

  - CVE-2019-5860

  - CVE-2019-5861

  - CVE-2019-5862

  - CVE-2019-5865

  - Critical security issue 977057

  - Security bug 934161

  - Security bug 939644

  - Security bug 948172

  - Security bug 948228

  - Security bug 948944

  - Security bug 950005

  - Security bug 952849

  - Security bug 956625

  - Security bug 958457

  - Security bug 958689

  - Security bug 959193

  - Security bug 959518

  - Security bug 958717

  - Security bug 960785

  - Security bug 961674

  - Security bug 961597

  - Security bug 962083

  - Security bug 964002

  - Security bug 973893

  - Security bug 974627

  - Security bug 976050

  - Security bug 981602

  - Security bug 983850

  - Security bug 983938

General bug fixes :

  - [QTBUG-62106] Fixed possible crash after rapid tapping.

  - [QTBUG-75884] Fixed crash on setHttpUserAgent.

  - [QTBUG-76249] Fixed user-agent on some new windows.

  - [QTBUG-76268] Fixed tab key send on minimize.

  - [QTBUG-76347] Fixed duplicate events being send from     tablets.

  - [QTBUG-76828] Clear shared context on exit.

  - [QTBUG-76958] Fixed possible crash when loading in     background.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Patch CVE-2019-12412.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- New upstream version (69.0.3)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Rebase radare2 to 3.9.0

  - Rebase cutter-re to 1.9.0

  - fix CVE-2019-14745 in radare2 on F30

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Update jackson-parent to version 2.10.

  - Update jackson-bom to version 2.10.0.

  - Update jackson-annotations to version 2.10.0.

  - Update jackson-core to version 2.10.0.

  - Update jackson-databind to version 2.10.0.

Resolves CVE-2019-14540, CVE-2019-16335, CVE-2019-16942, CVE-2019-16943.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Backport security fixes from [PR#145](https://github.com/libming/libming/pull/145)

Fixes: CVE-2018-7866, CVE-2018-7873, CVE-2018-7876, CVE-2018-9009, CVE-2018-9132

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fix KDC crash when logging PKINIT enctypes (CVE-2019-14844)

This is a purely denial-of-service issue, though it is unauthenticated, and is unlikely to trigger by accident.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to 2.0.10 to fix security issues.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This is a bugfix release where some of the bugs fixed are security bugs. Please update.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This is an update fixing CVE-2019-16928.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Rebase to 1.12.10

  - Security fix for CVE-2019-16276

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Chromium 77.0.3865.90 update.

See the official announcement on https://chromereleases.googleblog.com/2019/09/stable-channel-update-fo r-desktop.html and https://chromereleases.googleblog.com/2019/09/stable-channel-update-fo r-desktop_18.html

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- CVE-2019-9853

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Rebase radare2 to 3.9.0

  - Rebase cutter-re to 1.9.0

  - Fix CVE-2019-14745 in radare2 on F31

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Linux 5.3.4

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to latest upstream release

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Rebase to 1.13.1

  - Security fix for CVE-2019-16276

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

BIRD 2.0.6 (2019-09-10) =======================

  - RAdv: Solicited unicast RAs

  - BGP: Optional Adj-RIB-Out

  - BGP: Extended optional parameters length

  - Filter: Sets and set expressions in path masks

  - Several important bugfixes

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New upstream release. A security release, patching VSV00003 DoS attack vector, aka CVE-2019-15892.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This release fixes a heap buffer over-read in BlitNtoN() function when processing an invalid BMP image.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New upstream version 1.0.2. Contains fix for NBD Protocol Downgrade Attack (CVE-2019-14842).

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- CVE-2019-11500: IMAP protocol parser does not properly     handle NUL byte when scanning data in quoted strings,     leading to out of bounds heap memory writes

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Patch for CVE-2018-0737, CVE-2018-0732, CVE-2018-0734, CVE-2019-1552, CVE-2019-1559.

https://www.openssl.org/news/vulnerabilities.html

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

1.6.7 =====

Broker :

  - Add workaround for working with libwebsockets 3.2.0.

  - Fix potential crash when reloading config.

Client library :

  - Don't use / in autogenerated client ids, to avoid     confusing with topics.

  - Fix mosquitto_max_inflight_messages_set() and     mosquitto_int_option(..., MOSQ_OPT_*_MAX, ...)     behaviour.

  - Fix regression on use of mosquitto_connect_async() not     working.

Clients :

  - mosquitto_sub: Fix -E incorrectly not working unless -d     was also specified.

  - Updated documentation around automatic client ids.

1.6.6 =====

Security :

  - CVE-2019-11779

  - Restrict topic hierarchy to 200 levels to prevent     possible stack overflow.

Broker :

  - Restrict topic hierarchy to 200 levels to prevent     possible stack overflow.

  - mosquitto_passwd now returns 1 when attempting to update     a user that does not exist.

1.6.5 =====

Broker :

  - Fix v5 DISCONNECT packets with remaining length == 2     being treated as a protocol error.

  - Fix support for libwebsockets 3.x.

  - Fix slow websockets performance when sending large     messages.

  - Fix bridges potentially not connecting on Windows.

  - Fix clients authorised using `use_identity_as_username`     or `use_subject_as_username` being disconnected on     SIGHUP.

  - Improve error messages in some situations when clients     disconnect. Reduces the number of 'Socket error on     client X, disconnecting' messages.

  - Fix Will for v5 clients not being sent if will delay     interval was greater than the session expiry interval.

  - Fix CRL file not being reloaded on HUP.

  - Fix repeated 'Error in poll' messages on Windows when     only websockets listeners are defined.

Client library :

  - Fix reconnect backoff for the situation where     connections are dropped rather than refused.

  - Fix missing locks on `mosq->state`.

Documentation :

  - Improve details on global/per listener options in the     mosquitto.conf man page.

  - Clarify behaviour when clients exceed the     `message_size_limit`.

  - Improve documentation for `max_inflight_bytes`,     `max_inflight_messages`, and `max_queued_messages`.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Update to latest release

  - Emission of Session property-changed notifications from     logind is fixed (this was breaking the switching of     sessions to and from gnome).

  - Security issue: unprivileged users were allowed to     change DNS servers configured in systemd-resolved. Now     proper polkit authorization is required     (CVE-2019-15718).

Switching ttys will work again after reboot. Otherwise, no log out or reboot is required.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This is new version of irssi fixing CVE-2019-15717.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2019-13132

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

# This is a beta preview of Python 3.8

Python 3.8 is still in development. This release, 3.8.0b4 is the last of four planned beta release previews. Beta release previews are intended to give the wider community the opportunity to test new features and bug fixes and to prepare their projects to support the new feature release.

# Call to action

We **strongly encourage** maintainers of third-party Python projects to **test with 3.8** during the beta phase and report issues found to [the Python bug tracker](https://bugs.python.org) as soon as possible.
While the release is planned to be feature complete entering the beta phase, it is possible that features may be modified or, in rare cases, deleted up until the start of the release candidate phase (2019-09-30). Our goal is have no ABI changes after beta 3 and no code changes after 3.8.0rc1, the release candidate. To achieve that, it will be extremely important to get as much exposure for 3.8 as possible during the beta phase.

Please keep in mind that this is a preview release and its use is
**not** recommended for production environments.

# Major new features of the 3.8 series, compared to 3.7

Some of the new major new features and changes in Python 3.8 are :

  - [PEP 572](https://www.python.org/dev/peps/pep-0572/),     Assignment expressions

  - [PEP 570](https://www.python.org/dev/peps/pep-0570/),     Positional-only arguments

  - [PEP 587](https://www.python.org/dev/peps/pep-0587/),     Python Initialization Configuration (improved embedding)

  - [PEP 590](https://www.python.org/dev/peps/pep-0590/),     Vectorcall: a fast calling protocol for CPython

  - [PEP 578](https://www.python.org/dev/peps/pep-0578),     Runtime audit hooks

  - [PEP 574](https://www.python.org/dev/peps/pep-0574),     Pickle protocol 5 with out-of-band data

  - Typing-related: [PEP     591](https://www.python.org/dev/peps/pep-0591) (Final     qualifier), [PEP     586](https://www.python.org/dev/peps/pep-0586) (Literal     types), and [PEP     589](https://www.python.org/dev/peps/pep-0589)     (TypedDict)

  - Parallel filesystem cache for compiled bytecode

  - Debug builds share ABI as release builds

  - f-strings support a handy `=` specifier for debugging

  - `continue` is now legal in `finally:` blocks

  - on Windows, the default `asyncio` event loop is now     `ProactorEventLoop`

  - on macOS, the _spawn_ start method is now used by     default in `multiprocessing`

  - `multiprocessing` can now use shared memory segments to     avoid pickling costs between processes

  - `typed_ast` is merged back to CPython

  - `LOAD_GLOBAL` is now 40% faster

  - `pickle` now uses Protocol 4 by default, improving     performance

There are many other interesting changes, please consult the 'What's New' page in the documentation for a full list.

The next pre-release of Python 3.8 and the first release candidate will be 3.8.0rc1, currently scheduled for 2019-09-30.

# More resources

  - [Online Documentation](https://docs.python.org/3.8/)

  - [PEP 569](https://www.python.org/dev/peps/pep-0569/),     3.8 Release Schedule

  - Report bugs at     [bugs.python.org](https://bugs.python.org) or via     [Fedora     Bugzilla](https://bugz.fedoraproject.org/python38)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

rebase to 0.16 (bz #1741605)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2019-14822

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New upstream version 1.14.2. Fixes second Denial of Service attack:
https://www.redhat.com/archives/libguestfs/2019-September/msg00272.htm l

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Chromium 76.0.3809.132 update

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Patch for CVE-2019-15531

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update dino to [016ab2c1](https://github.com/dino/dino/compare/8120203d...016ab2c1) and fix a [FTBFS](https://bugzilla.redhat.com/show_bug.cgi?id=1735087).

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Security fix for CVE-2019-14267

  - Security fix for CVE-2019-14934

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Severity
129953	Fedora 30 : sudo (2019-9cb221f2be)	High
129952	Fedora 30 : 2:runc (2019-96946c39dd)	Medium
129951	Fedora 29 : 2:runc (2019-3fc86a518b)	Medium
129950	Fedora 29 : thunderbird (2019-387474fa20)	High
129949	Fedora 30 : opendmarc (2019-24b3f84f6e)	High
129858	Fedora 29 : golang (2019-e99c1603c3)	Medium
129857	Fedora 29 : qt5-qtwebengine (2019-e5ff5d0ffd)	Medium
129837	Fedora 29 : opendmarc (2019-e1f0417a24)	High
129836	Fedora 29 : libapreq2 (2019-d2381feee9)	High
129835	Fedora 30 : firefox (2019-be4b40654f)	High
129834	Fedora 30 : cutter-re / radare2 (2019-b3de19c346)	Medium
129833	Fedora 30 : jackson-annotations / jackson-bom / jackson-core / jackson-databind / etc (2019-b171554877)	High
129832	Fedora 30 : libapreq2 (2019-7fbe8a9a06)	High
129831	Fedora 30 : ming (2019-5139453028)	Medium
129830	Fedora 30 : thunderbird (2019-14af6fde2e)	High
129829	Fedora 29 : ming (2019-03aa4f746c)	Medium
129803	Fedora 29 : krb5 (2019-dc4e1d0fb6)	Medium
129802	Fedora 29 : SDL2 (2019-8ef33a69ca)	Medium
129770	Fedora 30 : suricata (2019-fddfb520ec)	High
129769	Fedora 29 : suricata (2019-ded15d6582)	High
129768	Fedora 29 : exim (2019-d778bd4137)	High
129767	Fedora 30 : golang (2019-416d20f960)	Medium
129737	Fedora 30 : chromium (2019-e53c0c7765)	High
129736	Fedora 29 : 1:libreoffice (2019-4b0cc75996)	Medium
129703	Fedora 31 : cutter-re / radare2 (2019-e931422a81)	Medium
129702	Fedora 31 : 2:runc (2019-bd4843561c)	Medium
129701	Fedora 31 : kernel / kernel-headers / kernel-tools (2019-b1de72b00b)	Low
129700	Fedora 31 : suricata (2019-52b360546c)	High
129699	Fedora 31 : libdwarf (2019-4fa597c615)	Medium
129698	Fedora 31 : golang (2019-1b8cbd39ff)	Medium
129660	Fedora 31 : bird (2019-ff0f9ce167)	Medium
129659	Fedora 30 : varnish (2019-feec5e0afd)	High
129658	Fedora 31 : SDL (2019-f5558abfef)	Medium
129657	Fedora 31 : libnbd (2019-ec2eedaa9e)	High
129656	Fedora 31 : 1:dovecot (2019-ea638fb605)	High
129655	Fedora 31 : exim (2019-e080507ba5)	High
129654	Fedora 31 : chromium (2019-df4fb49ef7)	High
129653	Fedora 31 : 1:compat-openssl10 (2019-db06efdea1)	Medium
129652	Fedora 29 : mosquitto (2019-d99e2329cb)	Medium
129651	Fedora 31 : systemd (2019-d5bd5f0aa4)	Low
129650	Fedora 31 : irssi (2019-d2257607b8)	High
129649	Fedora 31 : zeromq (2019-d20ce4d5a1)	High
129648	Fedora 31 : python38 (2019-d11594bf0a)	Medium
129647	Fedora 31 : jbig2dec (2019-c8e2c3df22)	High
129646	Fedora 31 : ibus (2019-c10700afdc)	High
129645	Fedora 31 : nbdkit (2019-bd19067cb4)	High
129644	Fedora 31 : chromium (2019-b90f48e9aa)	High
129643	Fedora 31 : libextractor (2019-b467cab3c8)	Medium
129642	Fedora 31 : dino (2019-b282001454)	High
129641	Fedora 31 : pdfresurrect (2019-b20614ff74)	Medium

Fedora Local Security Checks Family for Nessus