Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -4 articles for you...
89
security advisoryupdateFedoraFedora 40 dnf Update FEDORA-2025-21c36b3aa5 for Automatic Timer
This releases preserves enablement state of dnf-automatic.timer when upgrading to Fedora 41.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-21c36b3aa5 2025-04-15 19:19:49.588864+00:00 -------------------------------------------------------------------------------- Name : dnf Product : Fedora 40 Version : 4.23.0 Release : 1.fc40.1 URL : https://github.com/rpm-software-management/dnf Summary : Package manager Description : Utility that allows users to manage packages on their systems. It supports RPMs, modules and comps groups & environments. -------------------------------------------------------------------------------- Update Information: This releases preserves enablement state of dnf-automatic.timer when upgrading to Fedora 41. -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 11 2025 Petr Pisar - 4.23.0-1.1 - Do not disable dnf-automatic.timer when upgrading to dnf5-plugin-automatic (bug #2358865) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2358865 - Private bug https://bugzilla.redhat.com/show_bug.cgi?id=2358865 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-21c36b3aa5' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list
Apr 15, 2025
Fedora
89
security advisoryupdateFedoraFedora 33: Security Advisory for Livecd-Tools 2020-b40fc174b5 Update
createrepo_c 0.16.1 - Update to 0.16.1 - Add the section number to the manual pages - Parse xml snippet in smaller parts (RhBug:1859689) - Add module metadata support to createrepo_c (RhBug:1795936) librepo 1.12.1 - Update to 1.12.1 - Validate path read from repomd.xml (RhBug:1868639) libdnf 0.54.2 - Update to 0.54.2 - history: Fix dnf history rollback when a package was removed. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2020-b40fc174b5 2020-10-27 01:20:30.718110 --------------------------------------------------------------------------------Name : livecd-tools Product : Fedora 33 Version : 27.1 Release : 8.fc33 URL : https://github.com/livecd-tools/livecd-tools Summary : Tools for building live CDs Description : Tools for generating live CDs on Fedora based systems including derived distributions such as RHEL, CentOS and others. See https://fedoraproject.org/wiki/FedoraLiveCD for more details. --------------------------------------------------------------------------------Update Information: createrepo_c 0.16.1 - Update to 0.16.1 - Add the section number to the manual pages - Parse xml snippet in smaller parts (RhBug:1859689) - Add module metadata support to createrepo_c (RhBug:1795936) librepo 1.12.1 - Update to 1.12.1 -Validate path read from repomd.xml (RhBug:1868639) libdnf 0.54.2 - Update to 0.54.2 - history: Fix dnf history rollback when a package was removed (RhBug:1683134) - Add support for HY_GT, HY_LT in query nevra_strict - Fix parsing empty lines in config files - Accept '==' as an operator in reldeps (RhBug:1847946) - Add log file level main config option (RhBug:1802074) - Add protect_running_kernel configuration option (RhBug:1698145) - Context part of libdnf cannot assume zchunk is on (RhBug:1851841,1779104) - Fix memory leak of resultingModuleIndex and handle g_object refs - Redirect librepo logs to libdnf logs with different source - Introduce changelogmetadata in commit messages -Add hy_goal_lock - Update Copr targets for packit and use alias - Enum/String conversions for Transaction Store/Replay - utils: Add a method to decode URLs -Unify hawkey.log line format with the rest of the logs dnf 4.4.0 - Update to 4.4.0 - Handle empty comps group name (RhBug:1826198) - Remove dead history info code (RhBug:1845800) - Improve command emmitter in dnf-automatic - Enhance --querytags and --qf help output - [history] add option --reverse to history list (RhBug:1846692) - Add logfilelevel configuration (RhBug:1802074) - Don't turn off stdout/stderr logging longer than necessary (RhBug:1843280) - Mention the date/time that updates were applied - [dnf-automatic] Wait for internet connection (RhBug:1816308) - [doc] Enhance repo variables documentation (RhBug:1848161,1848615) - Add librepo logger for handling messages from librepo (RhBug:1816573) - [doc] Add package-name-spec to the list of possible specs -[doc] Do not use - [doc] Add section to explain -n, -na and -nevra suffixes - Add alias 'ls' for list command - README: Reference Fedora Weblate instead of Zanata - remove log_lock.pid after reboot(Rhbug:1863006) -comps: Raise CompsError when removing a non-existent group - Add methods for working with comps to RPMTransactionItemWrapper - Implement storing and replaying a transaction - Log failure to access last makecache time as warning -[doc] Document Substitutions class - Dont document removed attribute ``reports`` for get_best_selector - Change the debug log timestamps from UTC to local time dnf-plugins-core 4.0.18 - [needs-restarting] Fix plugin fail if needs-restarting.d does not exist - [needs-restarting] add kernel-rt to reboot list -Fix debug-restore command - [config-manager] enable/disable comma separated pkgs (RhBug:1830530) - [debug] Use standard demands.resolving for transaction handling - [debug] Do not remove install-only packages (RhBug:1844533) - return error when dnf download failed - README: Reference Fedora Weblate insteadof Zanata - [reposync] Add latest NEVRAs per stream to download (RhBug: 1833074) -copr: don't try to list runtime dependencies dnf-plugins-extras 4.0.12 -Update Cmake to pull translations from weblate - Drop Python 2 support - README: Add Installation, Contribution, etc - Add the DNF_SYSTEM_UPGRADE_NO_REBOOT env variable to control system-upgrade reboot. - [system-upgrade] Upgrade groups and environments (RhBug:1845562,1860408) livecd-tools-27.1-8 - Fix compatibility with dnf 4.4.0 / libdnf 0.54.2 --------------------------------------------------------------------------------ChangeLog: * Thu Oct 8 2020 Adam Williamson - 1:27.1-8 - Backport PR #168 to fix a compatibility issue with DNF 4.4.0+ --------------------------------------------------------------------------------References: [ 1 ] Bug #1683134 - dnf rollback works strange after upgrade/downgrade/remove https://bugzilla.redhat.com/show_bug.cgi?id=1683134 [ 2 ] Bug #1698145 - dnf protects certain packages in container, when it should not https://bugzilla.redhat.com/show_bug.cgi?id=1698145 [ 3 ] Bug #1779104 - PackageKit: loading of MD_TYPE_PRIMARY has failed. https://bugzilla.redhat.com/show_bug.cgi?id=1779104 [ 4 ] Bug #1795936 - [RFE] createrepo_c should be able to handle modules information https://bugzilla.redhat.com/show_bug.cgi?id=1795936 [ 5 ] Bug #1802074 - Excessive and non configurable logging in /var/log/dnf.log https://bugzilla.redhat.com/show_bug.cgi?id=1802074 [ 6 ] Bug #1816308 - dnf-automatic.timer runs before the computer can connect to the internet https://bugzilla.redhat.com/show_bug.cgi?id=1816308 [ 7 ] Bug #1816573 - [RHEL8/RFE] dnf logrotation experience differs from RHEL7 (yum) https://bugzilla.redhat.com/show_bug.cgi?id=1816573 [ 8 ] Bug #1830530 - request to re-introduce functionality - dnf [config-manager] --enable/disablerepo a-repo,b-repo,some* https://bugzilla.redhat.com/show_bug.cgi?id=1830530 [ 9 ] Bug#1833074 - reposync --newest-only does not download the latest package https://bugzilla.redhat.com/show_bug.cgi?id=1833074 [ 10 ] Bug #1843280 - Discrepancies in permission related problems not/reporting https://bugzilla.redhat.com/show_bug.cgi?id=1843280 [ 11 ] Bug #1844533 - yum debug-restore removes all but one kernel even though the dump has multiple kernels. https://bugzilla.redhat.com/show_bug.cgi?id=1844533 [ 12 ] Bug #1845562 - system-upgrade plugin should do "dnf group upgrade" as part of transaction solution https://bugzilla.redhat.com/show_bug.cgi?id=1845562 [ 13 ] Bug #1845800 - History info tracebacks when group is upgraded/downgraded https://bugzilla.redhat.com/show_bug.cgi?id=1845800 [ 14 ] Bug #1846692 - dnf should offer a 'history list' in reverse order https://bugzilla.redhat.com/show_bug.cgi?id=1846692 [ 15 ] Bug #1847946 - libdnf behavior has changed unexpectedly in 8.3 https://bugzilla.redhat.com/show_bug.cgi?id=1847946 [ 16 ] Bug #1848161 - Custom DNF variables which worked in CentOS 8.1.1911 are broken in 8.2.2004 https://bugzilla.redhat.com/show_bug.cgi?id=1848161 [ 17 ] Bug #1848615 - dnf numeric variable substitutions are undocumented https://bugzilla.redhat.com/show_bug.cgi?id=1848615 [ 18 ] Bug #1851841 - zchunk issue with packagekit https://bugzilla.redhat.com/show_bug.cgi?id=1851841 [ 19 ] Bug #1859689 - cr_xml_parser_generic_from_string fails on large inputs https://bugzilla.redhat.com/show_bug.cgi?id=1859689 [ 20 ] Bug #1860408 - Perform "dnf mark install fedora-repos-modular"-like action on upgrades to Fedora 33/34 https://bugzilla.redhat.com/show_bug.cgi?id=1860408 [ 21 ] Bug #1863006 - log_lock.pid file remain after system reboot https://bugzilla.redhat.com/show_bug.cgi?id=1863006 [ 22 ] Bug #1868639 - CVE-2020-14352 librepo: missing path validation in repomd.xml may lead to directory traversal [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1868639 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2020-b40fc174b5' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Oct 26, 2020
•Important
Fedora
89
security advisoryfedoraupdateFedora 33: Update Notification FEDORA-2020-b40fc174b5 - librepo 1.12.1
createrepo_c 0.16.1 - Update to 0.16.1 - Add the section number to the manual pages - Parse xml snippet in smaller parts (RhBug:1859689) - Add module metadata support to createrepo_c (RhBug:1795936) librepo 1.12.1 - Update to 1.12.1 - Validate path read from repomd.xml (RhBug:1868639) libdnf 0.54.2 - Update to 0.54.2 - history: Fix dnf history rollback when a package was removed. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2020-b40fc174b5 2020-10-27 01:20:30.718110 --------------------------------------------------------------------------------Name : librepo Product : Fedora 33 Version : 1.12.1 Release : 1.fc33 URL : https://github.com/rpm-software-management/librepo Summary : Repodata downloading library Description : A library providing C and Python (libcURL like) API to downloading repository metadata. --------------------------------------------------------------------------------Update Information: createrepo_c 0.16.1 - Update to 0.16.1 - Add the section number to the manual pages - Parse xml snippet in smaller parts (RhBug:1859689) - Add module metadata support to createrepo_c (RhBug:1795936) librepo 1.12.1 - Update to 1.12.1 -Validate path read from repomd.xml (RhBug:1868639) libdnf 0.54.2 - Update to 0.54.2 - history: Fix dnf history rollback when a package was removed (RhBug:1683134) - Add support for HY_GT, HY_LT in query nevra_strict - Fix parsing empty lines in config files - Accept '==' as an operator in reldeps (RhBug:1847946) - Add log file level main config option (RhBug:1802074) - Add protect_running_kernel configuration option (RhBug:1698145) - Context part of libdnf cannot assume zchunk is on (RhBug:1851841,1779104) - Fix memory leak of resultingModuleIndex and handle g_object refs - Redirect librepo logs to libdnf logs with different source - Introduce changelog metadata in commit messages -Add hy_goal_lock - Update Copr targets for packit and use alias -Enum/String conversions for Transaction Store/Replay - utils: Add a method to decode URLs -Unify hawkey.log line format with the rest of the logs dnf 4.4.0 - Update to 4.4.0 - Handle empty comps group name (RhBug:1826198) - Remove dead history info code (RhBug:1845800) - Improve command emmitter in dnf-automatic - Enhance --querytags and --qf help output - [history] add option --reverse to history list (RhBug:1846692) - Add logfilelevel configuration (RhBug:1802074) - Don't turn off stdout/stderr logging longer than necessary (RhBug:1843280) - Mention the date/time that updates were applied - [dnf-automatic] Wait for internet connection (RhBug:1816308) - [doc] Enhance repo variables documentation (RhBug:1848161,1848615) - Add librepo logger for handling messages from librepo (RhBug:1816573) - [doc] Add package-name-spec to the list of possible specs -[doc] Do not use - [doc] Add section to explain -n, -na and -nevra suffixes - Add alias 'ls' for list command - README: Reference Fedora Weblate instead of Zanata - remove log_lock.pid after reboot(Rhbug:1863006) -comps: Raise CompsError when removing a non-existent group - Add methods for working with comps to RPMTransactionItemWrapper - Implement storing and replaying a transaction - Log failure to access last makecache time as warning -[doc] Document Substitutions class - Dont document removed attribute ``reports`` for get_best_selector - Change the debug log timestamps from UTC to local time dnf-plugins-core 4.0.18 - [needs-restarting] Fix plugin fail if needs-restarting.d does not exist - [needs-restarting] add kernel-rt to reboot list -Fix debug-restore command - [config-manager] enable/disable comma separated pkgs (RhBug:1830530) - [debug] Use standard demands.resolving for transaction handling - [debug] Do not remove install-only packages (RhBug:1844533) - return error when dnf download failed - README: Reference Fedora Weblate instead of Zanata - [reposync] Add latest NEVRAs per stream to download (RhBug: 1833074) -copr: don't tryto list runtime dependencies dnf-plugins-extras 4.0.12 -Update Cmake to pull translations from weblate - Drop Python 2 support - README: Add Installation, Contribution, etc - Add the DNF_SYSTEM_UPGRADE_NO_REBOOT env variable to control system-upgrade reboot. - [system-upgrade] Upgrade groups and environments (RhBug:1845562,1860408) livecd-tools-27.1-8 - Fix compatibility with dnf 4.4.0 / libdnf 0.54.2 --------------------------------------------------------------------------------ChangeLog: * Wed Oct 7 2020 Nicola Sella - 1.12.1-1 * Update to 1.12.1 - Validate path read from repomd.xml (RhBug:1868639) --------------------------------------------------------------------------------References: [ 1 ] Bug #1683134 - dnf rollback works strange after upgrade/downgrade/remove https://bugzilla.redhat.com/show_bug.cgi?id=1683134 [ 2 ] Bug #1698145 - dnf protects certain packages in container, when it should not https://bugzilla.redhat.com/show_bug.cgi?id=1698145 [ 3 ] Bug #1779104 - PackageKit: loading of MD_TYPE_PRIMARY has failed. https://bugzilla.redhat.com/show_bug.cgi?id=1779104 [ 4 ] Bug #1795936 - [RFE] createrepo_c should be able to handle modules information https://bugzilla.redhat.com/show_bug.cgi?id=1795936 [ 5 ] Bug #1802074 - Excessive and non configurable logging in /var/log/dnf.log https://bugzilla.redhat.com/show_bug.cgi?id=1802074 [ 6 ] Bug #1816308 - dnf-automatic.timer runs before the computer can connect to the internet https://bugzilla.redhat.com/show_bug.cgi?id=1816308 [ 7 ] Bug #1816573 - [RHEL8/RFE] dnf logrotation experience differs from RHEL7 (yum) https://bugzilla.redhat.com/show_bug.cgi?id=1816573 [ 8 ] Bug #1830530 - request to re-introduce functionality - dnf [config-manager] --enable/disablerepo a-repo,b-repo,some* https://bugzilla.redhat.com/show_bug.cgi?id=1830530 [ 9 ] Bug #1833074 - reposync --newest-only does not download the latest package https://bugzilla.redhat.com/show_bug.cgi?id=1833074 [ 10 ] Bug #1843280 - Discrepancies in permission related problems not/reporting https://bugzilla.redhat.com/show_bug.cgi?id=1843280 [ 11 ] Bug #1844533 - yum debug-restore removes all but one kernel even though the dump has multiple kernels. https://bugzilla.redhat.com/show_bug.cgi?id=1844533 [ 12 ] Bug #1845562 - system-upgrade plugin should do "dnf group upgrade" as part of transaction solution https://bugzilla.redhat.com/show_bug.cgi?id=1845562 [ 13 ] Bug #1845800 - History info tracebacks when group is upgraded/downgraded https://bugzilla.redhat.com/show_bug.cgi?id=1845800 [ 14 ] Bug #1846692 - dnf should offer a 'history list' in reverse order https://bugzilla.redhat.com/show_bug.cgi?id=1846692 [ 15 ] Bug #1847946 - libdnf behavior has changed unexpectedly in 8.3 https://bugzilla.redhat.com/show_bug.cgi?id=1847946 [ 16 ] Bug #1848161 - Custom DNF variables which worked in CentOS 8.1.1911 are broken in 8.2.2004 https://bugzilla.redhat.com/show_bug.cgi?id=1848161 [ 17 ] Bug #1848615 - dnf numeric variable substitutions are undocumented https://bugzilla.redhat.com/show_bug.cgi?id=1848615 [ 18 ] Bug #1851841 - zchunk issue with packagekit https://bugzilla.redhat.com/show_bug.cgi?id=1851841 [ 19 ] Bug #1859689 - cr_xml_parser_generic_from_string fails on large inputs https://bugzilla.redhat.com/show_bug.cgi?id=1859689 [ 20 ] Bug #1860408 - Perform "dnf mark install fedora-repos-modular"-like action on upgrades to Fedora 33/34 https://bugzilla.redhat.com/show_bug.cgi?id=1860408 [ 21 ] Bug #1863006 - log_lock.pid file remain after system reboot https://bugzilla.redhat.com/show_bug.cgi?id=1863006 [ 22 ] Bug #1868639 - CVE-2020-14352 librepo: missing path validation in repomd.xml may lead to directory traversal [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1868639 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2020-b40fc174b5' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Oct 26, 2020
•Critical
Fedora
89
security advisoryFedoraupdate informationFedora 32: dnf 2020-47a7fbf50d moderate: Package Manager Update
libdnf 0.54.2-2 - Increase needed conflicting dnf version dnf 4.4.0-2 - Increase required libdnf version. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2020-47a7fbf50d 2020-10-15 22:33:15.459411 --------------------------------------------------------------------------------Name : dnf Product : Fedora 32 Version : 4.4.0 Release : 2.fc32 URL : https://github.com/rpm-software-management/dnf Summary : Package manager Description : Utility that allows users to manage packages on their systems. It supports RPMs, modules and comps groups & environments. --------------------------------------------------------------------------------Update Information: libdnf 0.54.2-2 - Increase needed conflicting dnf version dnf 4.4.0-2 -Increase required libdnf version --------------------------------------------------------------------------------ChangeLog: * Tue Oct 13 2020 Ales Matej - 4.4.0-2 - Increase required libdnf (hawkey) version * Wed Oct 7 2020 Nicola Sella - 4.4.0-1 - Update to 4.4.0 - Handle empty comps group name (RhBug:1826198) - Remove dead history info code (RhBug:1845800) - Improve command emmitter in dnf-automatic - Enhance --querytags and --qf help output - [history] add option --reverse to history list (RhBug:1846692) - Add logfilelevel configuration (RhBug:1802074) - Don't turn off stdout/stderr logging longer than necessary (RhBug:1843280) - Mention the date/time that updates were applied - [dnf-automatic] Wait for internet connection (RhBug:1816308) - [doc] Enhance repo variables documentation (RhBug:1848161,1848615) - Add librepo logger for handling messages from librepo (RhBug:1816573) - [doc] Add package-name-spec to the list of possible specs - [doc] Do not use - [doc] Add section to explain -n, -na and -nevra suffixes - Add alias 'ls' for list command - README: Reference Fedora Weblate instead of Zanata - remove log_lock.pid after reboot(Rhbug:1863006) -comps: Raise CompsError when removing a non-existent group - Add methods for working with comps to RPMTransactionItemWrapper - Implement storing and replaying a transaction - Log failure to access last makecache time as warning - [doc] Document Substitutions class - Dont document removed attribute ``reports`` for get_best_selector - Change the debug log timestamps from UTC to local time --------------------------------------------------------------------------------References: [ 1 ] Bug #1887502 - After dnf upgrade to dnf-4.4.0-1.fc33.noarch, dnf is unusable https://bugzilla.redhat.com/show_bug.cgi?id=1887502 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2020-47a7fbf50d' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Oct 15, 2020
Fedora
89
security advisoryfedoraupdate informationFedora 29 DNF Update FEDORA-2019-1fccede810 Moderate: Package Improvements
**createrepo_c** * Include file timestamp in repomd.xml to allow reproducing exact metadata as produced in the past * Support of zchunk **libcomps** **librepo** * Add zchunk support **libdnf** * Enhance modular solver to handle enabled and default module streams differently (RhBug:1648839) * Add support of wild cards for modules (RhBug:1644588) * Revert commit that adds best. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2019-1fccede810 2019-02-21 02:56:16.171936 --------------------------------------------------------------------------------Name : dnf Product : Fedora 29 Version : 4.1.0 Release : 1.fc29 URL : https://github.com/rpm-software-management/dnf Summary : Package manager Description : Utility that allows users to manage packages on their systems. It supports RPMs, modules and comps groups & environments. --------------------------------------------------------------------------------Update Information: **createrepo_c** * Include file timestamp in repomd.xml to allow reproducing exact metadata as produced in the past * Support of zchunk **libcomps** **librepo** * Add zchunk support **libdnf** * Enhance modular solver to handle enabled and default module streams differently (RhBug:1648839) * Add support of wild cards for modules (RhBug:1644588) * Revert commit that adds best as default behavior **dnf** * Updated difference YUM vs. DNF for yum-updateonboot * Added new command ``dnf alias [options] [list|add|delete] [ ...]`` to allow the user to define and manage a list of aliases * Enhanced documentation * Unifying return codes for remove operations * [transaction] Make transaction content available for commands * Triggering transaction hooks if no transaction (RhBug:1650157) * Add hotfix packages to install pool (RhBug:1654738) * Report group operation in transaction table * [sack] Change algorithm to calculate rpmdb_version * Allow to enable modules that break defaultmodules (RhBug:1648839) * Enhance documentation - API examples * Add --nobest option * Revert commit that adds best as default behavior **dnf-plugins-core** * [download] Do not download src without ``--source`` (RhBug:1666648) **dnf-plugins-extras** --------------------------------------------------------------------------------ChangeLog: * Thu Feb 14 2019 Pavla Kratochvilova - 4.1.0-1 - Update to 4.1.0 - Updated difference YUM vs. DNF for yum-updateonboot - Added new command ``dnf alias [options] [list|add|delete] [ ...]`` to allow the user to define and manage a list of aliases - Enhanced documentation - Unifying return codes for remove operations - [transaction] Make transaction content available for commands - Triggering transaction hooks if no transaction (RhBug:1650157) - Add hotfix packages to install pool (RhBug:1654738) - Report group operation in transaction table - [sack] Change algorithm to calculate rpmdb_version - Allow to enable modules that break default modules (RhBug:1648839) - Enhance documentation - API examples - Add --nobest option - Revert commit that adds best as default behavior * Thu Dec 13 2018 Jaroslav Mracek - 4.0.9-2 - Backport Make transaction content available for commands * Thu Nov 22 2018 Jaroslav Mracek - 4.0.9-1 - Added dnf.repo.Repo.get_http_headers - Added dnf.repo.Repo.set_http_headers - Added dnf.repo.Repo.add_metadata_type_to_download - Added dnf.repo.Repo.get_metadata_path - Added dnf.repo.Repo.get_metadata_content - Added --changelogs option for check-update command - [module] Add information about active modules - Hide messages created only for logging - Enhanced --setopt option - [module] Fix dnf remove @ - [transaction] Make transaction content available for plugins * Wed Nov 7 2018 Jaroslav Mracek - 4.0.4-2 - Backport fixes for RHBZ#1642796 from upstream master --------------------------------------------------------------------------------References: [ 1 ] Bug #1653623 - Private bug https://bugzilla.redhat.com/show_bug.cgi?id=1653623 [ 2 ] Bug #1651701 - DNF module conflict error on dependencies https://bugzilla.redhat.com/show_bug.cgi?id=1651701 [ 3 ] Bug #1648274 - dnf fails to refresh expired metadata https://bugzilla.redhat.com/show_bug.cgi?id=1648274 [ 4 ] Bug #1643129 - Private bug https://bugzilla.redhat.com/show_bug.cgi?id=1643129 [ 5 ] Bug #1590358 - Private bug https://bugzilla.redhat.com/show_bug.cgi?id=1590358 [ 6 ] Bug #1569908 - decompress compressed files https://bugzilla.redhat.com/show_bug.cgi?id=1569908 [ 7 ] Bug #1539620 - The --setopt=ID.metadata_expire=1 doesn't work https://bugzilla.redhat.com/show_bug.cgi?id=1539620 [ 8 ] Bug #1672432 - Group and module operations in transaction table not marked for translation https://bugzilla.redhat.com/show_bug.cgi?id=1672432 [ 9 ] Bug #1667426 - The doc/examples/list_obsoletes_plugin.py produces traceback https://bugzilla.redhat.com/show_bug.cgi?id=1667426 [ 10 ] Bug #1667423 - The doc/examples/install_plugin.py leads to traceback https://bugzilla.redhat.com/show_bug.cgi?id=1667423 [ 11 ] Bug #1666648 - dnf download command downloads also a srpm https://bugzilla.redhat.com/show_bug.cgi?id=1666648 [ 12 ] Bug #1660863 - Private bug https://bugzilla.redhat.com/show_bug.cgi?id=1660863 [ 13 ] Bug #1659390 - [RFE] print additional information about skipped packages after the transaction https://bugzilla.redhat.com/show_bug.cgi?id=1659390 [ 14 ] Bug #1657703 - [abrt] [faf] dnf: hdrFromFdno(): /usr/lib64/python3.6/site-packages/rpm/transaction.py killed by _rpm.error https://bugzilla.redhat.com/show_bug.cgi?id=1657703 [ 15 ] Bug #1656726 - Show excluded packages https://bugzilla.redhat.com/show_bug.cgi?id=1656726 [ 16 ] Bug #1656019 - dnf doesn't complain on conflict in modulemd defaults https://bugzilla.redhat.com/show_bug.cgi?id=1656019 [ 17 ] Bug #1654738- hotfix repository content is not used when installing a module stream https://bugzilla.redhat.com/show_bug.cgi?id=1654738 [ 18 ] Bug #1654529 - dnf versionlock will accept NEVRA forms for additions which it then cannot match when deleting https://bugzilla.redhat.com/show_bug.cgi?id=1654529 [ 19 ] Bug #1651646 - Private bug https://bugzilla.redhat.com/show_bug.cgi?id=1651646 [ 20 ] Bug #1651280 - Private bug https://bugzilla.redhat.com/show_bug.cgi?id=1651280 [ 21 ] Bug #1650157 - Private bug https://bugzilla.redhat.com/show_bug.cgi?id=1650157 [ 22 ] Bug #1649745 - system-upgrade fails with JSONDecodeError if state file corrupt https://bugzilla.redhat.com/show_bug.cgi?id=1649745 [ 23 ] Bug #1649356 - Private bug https://bugzilla.redhat.com/show_bug.cgi?id=1649356 [ 24 ] Bug #1648839 - Private bug https://bugzilla.redhat.com/show_bug.cgi?id=1648839 [ 25 ] Bug #1647760 - Private bug https://bugzilla.redhat.com/show_bug.cgi?id=1647760 [ 26 ] Bug #1644588 - Private bug https://bugzilla.redhat.com/show_bug.cgi?id=1644588 [ 27 ] Bug #1642791 - Private bug https://bugzilla.redhat.com/show_bug.cgi?id=1642791 [ 28 ] Bug #1638669 - Private bug https://bugzilla.redhat.com/show_bug.cgi?id=1638669 [ 29 ] Bug #1637923 - [abrt] PackageKit: repo_mirrorlist_failure_cb(): packagekitd killed by SIGSEGV https://bugzilla.redhat.com/show_bug.cgi?id=1637923 [ 30 ] Bug #1609335 - CVE-2018-10897 dnf-plugins-core: yum-utils: reposync: improper path validation may lead to directory traversal [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1609335 [ 31 ] Bug #1600722 - Private bug https://bugzilla.redhat.com/show_bug.cgi?id=1600722 [ 32 ] Bug #1594121 - Private bug https://bugzilla.redhat.com/show_bug.cgi?id=1594121 [ 33 ] Bug #1589832 - Private bug https://bugzilla.redhat.com/show_bug.cgi?id=1589832 [ 34 ] Bug #1585509 -Translation of "Size" in different contexts ought to be different. https://bugzilla.redhat.com/show_bug.cgi?id=1585509 [ 35 ] Bug #1515848 - dnf makes it hard to debug SSL related issues https://bugzilla.redhat.com/show_bug.cgi?id=1515848 [ 36 ] Bug #1509393 - Translation missing, when more than one process run https://bugzilla.redhat.com/show_bug.cgi?id=1509393 [ 37 ] Bug #1495482 - system-upgrade fails when snapper plugin installed https://bugzilla.redhat.com/show_bug.cgi?id=1495482 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-1fccede810' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Feb 21, 2019
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!