rebase to 0.16 (bz #1741605)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2019-14822

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New upstream version 1.14.2. Fixes second Denial of Service attack:
https://www.redhat.com/archives/libguestfs/2019-September/msg00272.htm l

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Chromium 76.0.3809.132 update

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Patch for CVE-2019-15531

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update dino to [016ab2c1](https://github.com/dino/dino/compare/8120203d...016ab2c1) and fix a [FTBFS](https://bugzilla.redhat.com/show_bug.cgi?id=1735087).

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Security fix for CVE-2019-14267

  - Security fix for CVE-2019-14934

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to 2.68.0 and fix FTBFS

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New upstream version 1.14.1. Fixes Denial of Service / Amplication Attack:
https://www.redhat.com/archives/libguestfs/2019-September/msg00084.htm l

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New upstream release. A security release, patching VSV00003 DoS attack vector, aka CVE-2019-15892.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

bugfix bump to 3.10.0

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to latest upstream version.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Minor update release 1.1.1d with low impact security fixes.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Update jackson-databind to version 2.9.9.3.

  - Update jackson-core to version 2.9.9.

  - Update jackson-annotations to version 2.9.9.

  - Update jackson-bom to version 2.9.9.

Resolves CVE-2019-12086, CVE-2019-12384, CVE-2019-12814, CVE-2019-14379, and CVE-14439.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

1.6.7 =====

Broker :

  - Add workaround for working with libwebsockets 3.2.0.

  - Fix potential crash when reloading config.

Client library :

  - Don't use / in autogenerated client ids, to avoid     confusing with topics.

  - Fix mosquitto_max_inflight_messages_set() and     mosquitto_int_option(..., MOSQ_OPT_*_MAX, ...)     behaviour.

  - Fix regression on use of mosquitto_connect_async() not     working.

Clients :

  - mosquitto_sub: Fix -E incorrectly not working unless -d     was also specified.

  - Updated documentation around automatic client ids.

1.6.6 =====

Security :

  - CVE-2019-11779

  - Restrict topic hierarchy to 200 levels to prevent     possible stack overflow.

Broker :

  - Restrict topic hierarchy to 200 levels to prevent     possible stack overflow.

  - mosquitto_passwd now returns 1 when attempting to update     a user that does not exist.

1.6.5 =====

Broker :

  - Fix v5 DISCONNECT packets with remaining length == 2     being treated as a protocol error.

  - Fix support for libwebsockets 3.x.

  - Fix slow websockets performance when sending large     messages.

  - Fix bridges potentially not connecting on Windows.

  - Fix clients authorised using `use_identity_as_username`     or `use_subject_as_username` being disconnected on     SIGHUP.

  - Improve error messages in some situations when clients     disconnect. Reduces the number of 'Socket error on     client X, disconnecting' messages.

  - Fix Will for v5 clients not being sent if will delay     interval was greater than the session expiry interval.

  - Fix CRL file not being reloaded on HUP.

  - Fix repeated 'Error in poll' messages on Windows when     only websockets listeners are defined.

Client library :

  - Fix reconnect backoff for the situation where     connections are dropped rather than refused.

  - Fix missing locks on `mosq->state`.

Documentation :

  - Improve details on global/per listener options in the     mosquitto.conf man page.

  - Clarify behaviour when clients exceed the     `message_size_limit`.

  - Improve documentation for `max_inflight_bytes`,     `max_inflight_messages`, and `max_queued_messages`.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Update to 2.16.3

  - Side channel attack on deterministic ECDSA     (CVE-2019-16910)

Release notes:
https://tls.mbed.org/tech-updates/releases/mbedtls-2.16.3-and-2.7.12-r eleased

Security Advisory:
https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security
-advisory-2019-10

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to 2.0.16

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Split out nbdkit-nbd-plugin subpackage.

----

New upstream version 1.14.0.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Updated to new upstream (69.0.1)

  - Wayland rendering fixes

----

  - The update to 69.0.1

  - Fix flickering issues

  - Fix disappearing webrtc dialogs

----

  - Fixed rendering artifacts on Wayland backend

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Updated to new upstream (69.0.1)

  - Wayland rendering fixes

----

  - The update to 69.0.1

  - Fix flickering issues

  - Fix disappearing webrtc dialogs

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- double free due to subsequent call of realloc()     (CVE-2019-5481)

  - fix heap buffer overflow in function     tftp_receive_packet() (CVE-2019-5482)

----

  - avoid reporting spurious error in the HTTP2 framing     layer (#1690971)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Minor bug and security fix release 1.8.5.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to 8.05 release (CVE-2019-16239)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

update to 1.15.17 (CVE-2019-15026)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Upstream announcement: [WordPress 5.2.3 Security and Maintenance Release](https://wordpress.org/news/2019/09/wordpress-5-2-3-security-a nd-maintenance-release/)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Upstream announcement :

Welcome to **phpMyAdmin 4.9.1**, a bugfix release.

This is a regularly-schedule bugfix release that also includes some security hardening measures.

We wish to point out that this also includes a routine fix for an issue that has been reported as CVE-2019-12922. The fix for this has been in our release queue to be part of this release, however it is the opinion of the team that the reported attack vector did not justify a separate release.

This release includes fixes for many bugs, including :

  - Editing columns with CURRENT_TIMESTAMP for MySQL     versions 8.0.13 and newer

  - Compatibility issues with PHP 8

  - Export of GIS visualization

  - Enhanced descriptions for several collation types

  - Creating a user with a single quote in the password     string

  - Unexpected quotes during import and export on text     fields

  - Improvements to adding new tables to Designer

  - Fix an issue where an authenticated user could trigger     heavy traffic between the database server and web server

  - Fix a weakness where an attacker, under certain     conditions, working at the same time as an administrator     is using the setup script, could delete a server from     the setup script

There are many, many more bug fixes thanks to the efforts of our developers, Google Summer of Code applicants, and other contributors.

The phpMyAdmin team

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update of `expat` fixes the following security issue :

  - **CVE-2019-15903** -- Fix heap overflow triggered by     `XML_GetCurrentLineNumber` (or     `XML_GetCurrentColumnNumber`), and deny internal     entities closing the doctype

The following bug fixes are also included :

  - Fix cases where `XML_StopParser` did not have any effect     when called from inside of an end element handler

  - xmlwf: Fix exit code for operation without '`-d     DIRECTORY`' previously, only '`-d DIRECTORY`' would give     you a proper exit code

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ceph 14.2.3 GA

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fix CVE-2019-16056 (rhbz#1750457)

----

Fix CVE-2019-10160 (rhbz#1718867)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to current release. Python3 compatible Installable with f31+

----

Update to 2.5.0 (pre-release)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

bugfix bump to version 2.4.3

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to Samba 4.11.0

----

Update to Samba 4.11.0rc4

----

Update to Samba 4.11.0rc3 - Security fixes for CVE-2019-10197

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

**GLPI version 9.4.4**

This is a **security release**, upgrading is highly recommended

Non exhaustive list of changes :

  - [security] Prevent account takeover vulnerability ,

  - [security] Prevent execution of XSS on rich text,

  - fix cache key lenght issues,

  - fix user picture removal at login,

  - several fixes on recurring tickets,

  - fix some transfer errors related to entities among     others,

  - and more!

See [changelog](https://github.com/glpi-project/glpi/milestone/37?closed=1 ) for details.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Don't call popen on ARM (in case it's run with privileges). Also replace patch to use FMA with simd pragma.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Bug fixes and security fixes.

Better threading compile time option set. See:
https://src.fedoraproject.org/rpms/ImageMagick/pull-request/2

Additional formats enabled.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update dino to [a96c8014](https://github.com/dino/dino/compare/016ab2c1...a96c8014), which addresses three CVEs.

CVE-2019-16235 ==============

Dino did not properly check the source of message carbons.

https://nvd.nist.gov/vuln/detail/CVE-2019-16235

Fixed in https://github.com/dino/dino/commit/e84f2c49567e86d2a261ea264d65c4adc5 49c930

CVE-2019-16236 ==========

Dino did not check roster push authorization.

https://nvd.nist.gov/vuln/detail/CVE-2019-16236

Fixed in https://github.com/dino/dino/commit/dd33f5f949248d87d34f399e8846d5ee5b 8823d9

CVE-2019-16237 ==========

Dinot did not properly check the source of MAM messages.

https://nvd.nist.gov/vuln/detail/CVE-2019-16237

Fixed in https://github.com/dino/dino/commit/307f16cc86dd2b95aa02ab8a85110e4a2d 5e7363

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to 1.7.5

----

Fixes CVE-2019-12816

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fix KDC crash when logging PKINIT enctypes (CVE-2019-14844)

This is a purely denial-of-service issue, though it is unauthenticated, and is unlikely to trigger by accident.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2019-14511

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This is an update fixing CVE-2019-15846.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

8u222 update

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- rebase to latest upstream version 9.27

  - security fixes added for :

  - CVE-2019-14811 (bug #1747908)

  - CVE-2019-14812 (bug #1747907)

  - CVE-2019-14813 (bug #1747906)

  - CVE-2019-14817 (bug #1747909)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security patches.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Severity
129647	Fedora 31 : jbig2dec (2019-c8e2c3df22)	High
129646	Fedora 31 : ibus (2019-c10700afdc)	High
129645	Fedora 31 : nbdkit (2019-bd19067cb4)	High
129644	Fedora 31 : chromium (2019-b90f48e9aa)	High
129643	Fedora 31 : libextractor (2019-b467cab3c8)	Medium
129642	Fedora 31 : dino (2019-b282001454)	High
129641	Fedora 31 : pdfresurrect (2019-b20614ff74)	Medium
129640	Fedora 31 : mingw-libsoup (2019-addb1d273c)	High
129639	Fedora 31 : nbdkit (2019-a75665981b)	High
129638	Fedora 31 : varnish (2019-a0a0cdef92)	High
129637	Fedora 30 : yara (2019-a00b4760a0)	High
129636	Fedora 31 : thunderbird (2019-9e7112d917)	High
129635	Fedora 31 : 1:openssl (2019-9ab7ee6309)	Medium
129634	Fedora 31 : jackson-annotations / jackson-bom / jackson-core / jackson-databind (2019-99ff6aa32c)	High
129633	Fedora 30 : mosquitto (2019-8b83c261dd)	Medium
129632	Fedora 29 : mbedtls (2019-89891f3e4a)	Low
129631	Fedora 31 : thunderbird (2019-89886ca203)	High
129630	Fedora 31 : pdfbox (2019-88f53a7433)	High
129629	Fedora 31 : nbdkit (2019-8889ad538b)	High
129628	Fedora 31 : firefox (2019-7f7bace5b4)	High
129627	Fedora 29 : firefox (2019-708f4d88de)	High
129626	Fedora 31 : curl (2019-6d7f6fa2c8)	High
129625	Fedora 31 : libgcrypt (2019-6c96156c32)	High
129624	Fedora 31 : openconnect (2019-6969467639)	High
129623	Fedora 31 : memcached (2019-694a4b39a9)	Medium
129622	Fedora 31 : wordpress (2019-6897642e3c)	High
129621	Fedora 31 : phpMyAdmin (2019-644b438f51)	Medium
129620	Fedora 31 : expat (2019-613edfe68b)	Medium
129619	Fedora 31 : 2:ceph (2019-5e54d5e6e9)	High
129618	Fedora 31 : python34 (2019-50772cf122)	Medium
129617	Fedora 31 : cobbler (2019-502f1a2c67)	High
129616	Fedora 31 : mosquitto (2019-4c69fb4cd7)	Medium
129615	Fedora 30 : scapy (2019-47946eb312)	Medium
129614	Fedora 31 : 2:samba / libldb / libtalloc / libtevent (2019-41c7fa478a)	Medium
129613	Fedora 31 : glpi (2019-311441d430)	High
129612	Fedora 31 : blis (2019-27e101fdc3)	High
129611	Fedora 31 : 1:ImageMagick / rubygem-rmagick (2019-27b9b94805)	High
129610	Fedora 31 : dino (2019-2555c77f63)	Medium
129609	Fedora 31 : znc (2019-233d9b9a5e)	Medium
129608	Fedora 31 : krb5 (2019-2323661e5f)	Medium
129607	Fedora 31 : scapy (2019-20d6b8f9c4)	Medium
129606	Fedora 31 : sphinx (2019-1f604fd2f2)	Medium
129605	Fedora 31 : exim (2019-1ed7bbb09c)	Critical
129604	Fedora 31 : mbedtls (2019-1240f0fe43)	Low
129603	Fedora 30 : znc (2019-0e70ef9cbb)	Medium
129602	Fedora 31 : 1:java-1.8.0-openjdk-aarch32 (2019-0bb3cfd816)	High
129601	Fedora 31 : ghostscript (2019-0a9d525d71)	High
129600	Fedora 31 : miniupnpd (2019-0a26e06dd5)	Medium
129599	Fedora 30 : mbedtls (2019-07940971b2)	Low
129544	Fedora 30 : glpi (2019-a1636592a3)	High

Fedora Local Security Checks Family for Nessus