FEDORA-2019-1fccede810

security update in Fedora 29 for createrepo_c, dnf, & 5 more

Status: stable 8 months ago

createrepo_c

  • Include file timestamp in repomd.xml to allow reproducing exact metadata as produced in the past
  • Support of zchunk

libcomps

librepo

  • Add zchunk support

libdnf

  • Enhance modular solver to handle enabled and default module streams differently (RhBug:1648839)
  • Add support of wild cards for modules (RhBug:1644588)
  • Revert commit that adds best as default behavior

dnf

  • Updated difference YUM vs. DNF for yum-updateonboot
  • Added new command dnf alias [options] [list|add|delete] [<name>...] to allow the user to define and manage a list of aliases
  • Enhanced documentation
  • Unifying return codes for remove operations
  • [transaction] Make transaction content available for commands
  • Triggering transaction hooks if no transaction (RhBug:1650157)
  • Add hotfix packages to install pool (RhBug:1654738)
  • Report group operation in transaction table
  • [sack] Change algorithm to calculate rpmdb_version
  • Allow to enable modules that break default modules (RhBug:1648839)
  • Enhance documentation - API examples
  • Add --nobest option
  • Revert commit that adds best as default behavior

dnf-plugins-core

  • [download] Do not download src without --source (RhBug:1666648)

dnf-plugins-extras

How to install

sudo dnf upgrade --advisory=FEDORA-2019-1fccede810

Comments 19

This update has been submitted for testing by pkratoch.

This update has been pushed to testing.

Works for me.

karma: +1 critpath: +1

works for me

karma: +1

It works here.

karma: +1 critpath: +1 base update cli: +1 langpacks packages: +1

It works here.

karma: +1 critpath: +1 base update cli: +1 langpacks packages: +1

Works here.

karma: +1 critpath: +1

This update has been submitted for batched by bodhi.

Works here.

karma: +1 critpath: +1

This update has been submitted for batched by bodhi.

Works here.

karma: +1 critpath: +1

This update has been submitted for batched by bodhi.

It works for me on multiple VMs.

Works here.

karma: +1 critpath: +1

Fixes #1585509 for me. (Unfortunately I was slow in updating the Swedish translation so it wasn't included in the package, but testing with the translations now updated on Zanata, it looks good in Swedish.)

karma: +1 critpath: +1 #1585509: +1

This update has been submitted for stable by bodhi.

This update has been pushed to stable.

This breaks system updates for all users with yum-utils installed: https://bugzilla.redhat.com/show_bug.cgi?id=1680221 (Workaround: dnf update --exclude=dnf-utils on the command line.)

karma: -1

Add Comment & Feedback

Please login to add feedback.

Content Type
RPM
Status
stable
Test Gating
Submitted by
Update Type
security
Update Severity
unspecified
Karma
+6
stable threshold: 5
unstable threshold: -3
Autopush (karma)
Enabled
Autopush (time)
Disabled
Dates
submitted 8 months ago
in testing 8 months ago
in stable 8 months ago

Related Bugs 37

00 #1495482 system-upgrade fails when snapper plugin installed
00 #1509393 Translation missing, when more than one process run
00 #1515848 dnf makes it hard to debug SSL related issues
00 #1539620 The --setopt=ID.metadata_expire=1 doesn't work
00 #1569908 decompress compressed files
0+1 #1585509 Translation of "Size" in different contexts ought to be different.
00 #1589832 Private bug
00 #1590358 Private bug
00 #1594121 Private bug
00 #1600722 Private bug
00 #1609335 CVE-2018-10897 dnf-plugins-core: yum-utils: reposync: improper path validation may lead to directory traversal [fedora-all]
00 #1637923 [abrt] PackageKit: repo_mirrorlist_failure_cb(): packagekitd killed by SIGSEGV
00 #1638669 Private bug
00 #1642791 Private bug
00 #1643129 Private bug
00 #1644588 Private bug
00 #1647760 Private bug
00 #1648274 dnf fails to refresh expired metadata
00 #1648839 Private bug
00 #1649356 Private bug
00 #1649745 system-upgrade fails with JSONDecodeError if state file corrupt
00 #1650157 Private bug
00 #1651280 Private bug
00 #1651646 Private bug
00 #1651701 DNF module conflict error on dependencies
00 #1653623 Private bug
00 #1654529 dnf versionlock will accept NEVRA forms for additions which it then cannot match when deleting
00 #1654738 hotfix repository content is not used when installing a module stream
00 #1656019 dnf doesn't complain on conflict in modulemd defaults
00 #1656726 Show excluded packages
00 #1657703 [abrt] [faf] dnf: hdrFromFdno(): /usr/lib64/python3.6/site-packages/rpm/transaction.py killed by _rpm.error
00 #1659390 [RFE] print additional information about skipped packages after the transaction
00 #1660863 Private bug
00 #1666648 dnf download command downloads also a srpm
00 #1667423 The doc/examples/install_plugin.py leads to traceback
00 #1667426 The doc/examples/list_obsoletes_plugin.py produces traceback
00 #1672432 Group and module operations in transaction table not marked for translation

Automated Test Results

Test Cases

0+1 Test Case base update cli
0+1 Test Case langpacks packages