The following Fedora 29 Security updates need testing: Age URL 130 https://bodhi.fedoraproject.org/updates/FEDORA-2018-51ce232320 xerces-c27-2.7.0-28.fc29 58 https://bodhi.fedoraproject.org/updates/FEDORA-2018-b89746cb9b tomcat-9.0.13-1.fc29 12 https://bodhi.fedoraproject.org/updates/FEDORA-2019-ac70292cfc rdesktop-1.8.4-2.fc29 11 https://bodhi.fedoraproject.org/updates/FEDORA-2019-614f1cd5a8 community-mysql-8.0.14-1.fc29 11 https://bodhi.fedoraproject.org/updates/FEDORA-2019-b0bd3c604a mingw-poppler-0.67.0-3.fc29 10 https://bodhi.fedoraproject.org/updates/FEDORA-2019-f44f095639 pdns-recursor-4.1.9-1.fc29 10 https://bodhi.fedoraproject.org/updates/FEDORA-2019-73cbc02e14 perl-Email-Address-List-0.06-1.fc29 5 https://bodhi.fedoraproject.org/updates/FEDORA-2019-6cc827b7a1 podofo-0.9.6-5.fc29 mingw-podofo-0.9.6-7.fc29 1 https://bodhi.fedoraproject.org/updates/FEDORA-2019-df57551f6d bouncycastle-1.61-1.fc29 eclipse-jgit-5.2.0-4.fc29 eclipse-linuxtools-7.1.0-3.fc29 jackson-annotations-2.9.8-1.fc29 jackson-bom-2.9.8-1.fc29 jackson-core-2.9.8-1.fc29 jackson-databind-2.9.8-1.fc29 jackson-dataformat-xml-2.9.8-1.fc29 jackson-dataformats-binary-2.9.8-1.fc29 jackson-dataformats-text-2.9.8-1.fc29 jackson-datatype-jdk8-2.9.8-1.fc29 jackson-datatype-joda-2.9.8-1.fc29 jackson-datatypes-collections-2.9.8-1.fc29 jackson-jaxrs-providers-2.9.8-1.fc29 jackson-module-jsonSchema-2.9.8-1.fc29 jackson-modules-base-2.9.8-1.fc29 jackson-parent-2.9.1.2-1.fc29 1 https://bodhi.fedoraproject.org/updates/FEDORA-2019-af3d726d38 gsi-openssh-7.9p1-5.fc29 1 https://bodhi.fedoraproject.org/updates/FEDORA-2019-49f80a78bc mingw-sqlite-3.26.0.0-1.fc29 1 https://bodhi.fedoraproject.org/updates/FEDORA-2019-095c760511 python-markdown2-2.3.7-1.fc29 1 https://bodhi.fedoraproject.org/updates/FEDORA-2019-0723b8f333 netmask-2.4.4-1.fc29 1 https://bodhi.fedoraproject.org/updates/FEDORA-2019-032b36306f mosquitto-1.5.6-1.fc29
The following Fedora 29 Critical Path updates have yet to be approved: Age URL 60 https://bodhi.fedoraproject.org/updates/FEDORA-2018-3d43e7dd21 SLOF-0.1.git20180702-2.fc29 11 https://bodhi.fedoraproject.org/updates/FEDORA-2019-08018846dd lorax-29.26-1.fc29 9 https://bodhi.fedoraproject.org/updates/FEDORA-2019-0d0dab0484 iproute-4.20.0-1.fc29 5 https://bodhi.fedoraproject.org/updates/FEDORA-2019-3aa0fbffb4 ibus-1.5.19-16.fc29 1 https://bodhi.fedoraproject.org/updates/FEDORA-2019-89033102c0 libidn2-2.1.1a-1.fc29 1 https://bodhi.fedoraproject.org/updates/FEDORA-2019-7285a847c4 libproxy-0.4.15-10.fc29 1 https://bodhi.fedoraproject.org/updates/FEDORA-2019-93144c6642 kernel-headers-4.20.7-200.fc29 kernel-4.20.7-200.fc29 1 https://bodhi.fedoraproject.org/updates/FEDORA-2019-770bc0bbfc nss-pem-1.0.5-1.fc29 1 https://bodhi.fedoraproject.org/updates/FEDORA-2019-0576ad8060 openssh-7.9p1-4.fc29
The following builds have been pushed to Fedora 29 updates-testing
R-Rmpfr-0.7.2-1.fc29 babl-0.1.62-1.fc29 botan2-2.9.0-1.fc29 feedreader-2.8.1-1.fc29 golang-github-burntsushi-locker-0-0.1.20190210gita6e239e.fc29 golang-github-mitchellh-hashstructure-1.0.0-1.fc29 golang-github-spf13-viper-1.3.1-2.fc29 jglobus-2.1.0-13.fc29 kf5-kauth-5.54.0-2.fc29 libaec-1.0.3-3.fc29 mellowplayer-3.5.2-1.20190210git54a1714.fc29 nheko-0.6.3-1.fc29 pysnmp-4.4.9-1.fc29 safekeep-1.4.5-1.fc29 wpewebkit-2.22.4-1.fc29
Details about builds:
================================================================================ R-Rmpfr-0.7.2-1.fc29 (FEDORA-2019-ebe53c51cc) R MPFR - Multiple Precision Floating-Point Reliable -------------------------------------------------------------------------------- Update Information:
Update to latest version -------------------------------------------------------------------------------- ChangeLog:
* Sat Feb 9 2019 Elliott Sales de Andrade quantum.analyst@gmail.com - 0.7.2-1 - Update to latest version * Thu Jan 31 2019 Fedora Release Engineering releng@fedoraproject.org - 0.7.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1668517 - R-Rmpfr-0.7-2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1668517 --------------------------------------------------------------------------------
================================================================================ babl-0.1.62-1.fc29 (FEDORA-2019-318c40d295) A dynamic, any to any, pixel format conversion library -------------------------------------------------------------------------------- Update Information:
Update to 0.1.62 -------------------------------------------------------------------------------- ChangeLog:
* Sat Feb 9 2019 Debarshi Ray rishi@fedoraproject.org - 0.1.62-1 - version 0.1.62 --------------------------------------------------------------------------------
================================================================================ botan2-2.9.0-1.fc29 (FEDORA-2019-e0f5a82082) Crypto and TLS for C++11 -------------------------------------------------------------------------------- Update Information:
Update to 2.9.0 including security fix for CVE-2018-20187 -------------------------------------------------------------------------------- ChangeLog:
* Sat Feb 9 2019 Benjamin Kircher benjamin.kircher@gmail.com - 2.9.0-1 - Update to 2.9.0 * Thu Jan 31 2019 Fedora Release Engineering releng@fedoraproject.org - 2.8.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1664598 - CVE-2018-20187 botan: Side channel possible during ECC generation https://bugzilla.redhat.com/show_bug.cgi?id=1664598 --------------------------------------------------------------------------------
================================================================================ feedreader-2.8.1-1.fc29 (FEDORA-2019-639c9ecfa3) RSS desktop client -------------------------------------------------------------------------------- Update Information:
Update to 2.8.1 -------------------------------------------------------------------------------- ChangeLog:
* Sun Feb 10 2019 Pete Walter pwalter@fedoraproject.org - 2.8.1-1 - Update to 2.8.1 --------------------------------------------------------------------------------
================================================================================ golang-github-burntsushi-locker-0-0.1.20190210gita6e239e.fc29 (FEDORA-2019-1f9a9c2b5f) Simple package for conveniently using named read/write locks -------------------------------------------------------------------------------- Update Information:
Initial package of github.com/burntsushi/locker for Go -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1666221 - Review Request: golang-github-burntsushi-locker - Simple package for conveniently using named read/write locks https://bugzilla.redhat.com/show_bug.cgi?id=1666221 --------------------------------------------------------------------------------
================================================================================ golang-github-mitchellh-hashstructure-1.0.0-1.fc29 (FEDORA-2019-d36f1807a8) Get hash values for arbitrary values in Go -------------------------------------------------------------------------------- Update Information:
Initial package of github.com/mitchellh/hashstructure for Go -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1666285 - Review Request: golang-github-mitchellh-hashstructure - Get hash values for arbitrary values in Go https://bugzilla.redhat.com/show_bug.cgi?id=1666285 --------------------------------------------------------------------------------
================================================================================ golang-github-spf13-viper-1.3.1-2.fc29 (FEDORA-2019-0d94d7e2d9) Go configuration with fangs -------------------------------------------------------------------------------- Update Information:
Update to latest version -------------------------------------------------------------------------------- ChangeLog:
* Fri Feb 1 2019 Fedora Release Engineering releng@fedoraproject.org - 1.3.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Fri Jan 18 2019 Elliott Sales de Andrade quantum.analyst@gmail.com - 1.3.1-1 - Update to latest version * Tue Oct 23 2018 Nicolas Mailhot nim@fedoraproject.org - 1.0.0-4 - redhat-rpm-config-123 triggers bugs in gosetup, remove it from Go spec files as it���s just an alias - https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/... --------------------------------------------------------------------------------
================================================================================ jglobus-2.1.0-13.fc29 (FEDORA-2019-22a9a32dd8) Globus Java client libraries -------------------------------------------------------------------------------- Update Information:
Disallow TLS 1.1. -------------------------------------------------------------------------------- ChangeLog:
* Sun Feb 10 2019 Mattias Ellert mattias.ellert@physics.uu.se - 2.1.0-13 - Only allow TLSv1 and TLSv1.2 (not TLSv1.1) - Remove unused FORCE_SSLV3_AND_CONSTRAIN_CIPHERSUITES_FOR_GRAM - Adapt to changes in bouncycastle 1.61 * Fri Feb 1 2019 Fedora Release Engineering releng@fedoraproject.org - 2.1.0-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ kf5-kauth-5.54.0-2.fc29 (FEDORA-2019-19b1d53695) KDE Frameworks 5 Tier 2 integration module to perform actions as privileged user -------------------------------------------------------------------------------- Update Information:
Backport security fix for CVE-2019-7443 -------------------------------------------------------------------------------- ChangeLog:
* Sat Feb 9 2019 Rex Dieter rdieter@fedoraproject.org - 5.54.0-2 - (branch) Remove support for passing gui QVariants to KAuth helpers --------------------------------------------------------------------------------
================================================================================ libaec-1.0.3-3.fc29 (FEDORA-2019-27d58df9d9) Adaptive Entropy Coding library -------------------------------------------------------------------------------- Update Information:
Version bump to 1.0.3 -------------------------------------------------------------------------------- ChangeLog:
* Sat Feb 9 2019 Christoph Junghans junghans@votca.org - 1.0.3-3 - Include missing header * Tue Feb 5 2019 Christoph Junghans junghans@votca.org - 1.0.3-2 - Enable all tests * Mon Feb 4 2019 Christoph Junghans junghans@votca.org - 1.0.3-1 - Version bump to 1.0.3 (bug #1672326) * Fri Feb 1 2019 Fedora Release Engineering releng@fedoraproject.org - 1.0.2-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1672326 - libaec-1.0.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1672326 --------------------------------------------------------------------------------
================================================================================ mellowplayer-3.5.2-1.20190210git54a1714.fc29 (FEDORA-2019-bce126b398) Cloud music integration for your desktop -------------------------------------------------------------------------------- Update Information:
Update to mellowplayer-3.5.2-1.20190210git54a1714 ---- - Update to 3.5.1-1.20190206git402e336 - Add patch for F30 %%{name}-suppress-compiler- warnings.patch -------------------------------------------------------------------------------- ChangeLog:
* Sun Feb 10 2019 Martin Gansser martinkg@fedoraproject.org - 3.5.2-1.20190206git54a1714 - Update to 3.5.2-1.20190206git54a1714 * Thu Feb 7 2019 Martin Gansser martinkg@fedoraproject.org - 3.5.1-1.20190206git402e336 - Update to 3.5.1-1.20190206git402e336 - Add patch for F30 %{name}-suppress-compiler-warnings.patch * Fri Feb 1 2019 Fedora Release Engineering releng@fedoraproject.org - 3.5.0-2.20181227git40ef9dd - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ nheko-0.6.3-1.fc29 (FEDORA-2019-48dd45ea6f) Desktop client for the Matrix protocol -------------------------------------------------------------------------------- Update Information:
Features ======================= * Room notifications now distinguish between general and user mentions by using different colors * User names are now colored based on both the theme and a hash from their user id. * Add font selection preference * Restore emoji picker without forcing font. Improvements ========================== * Fix room joining issue by escaping (thanks rnhmjoj) * Mild tweaks to the dark and light themes * Add paragraph tags back to markdown, fixing #2 / mujx#438 * Tweak author text to help differentiate it from the message text * Some Russian translations have been added/fixed (thanks tim77) * Partially address some build issues (related to #10) -------------------------------------------------------------------------------- ChangeLog:
* Sun Feb 10 2019 Vitaly Zaitsev vitaly@easycoding.org - 0.6.3-1 - Switched upstream to a new maintained fork. - Updated to version 0.6.3. * Thu Jan 31 2019 Kalev Lember klember@redhat.com - 0.6.2-4 - Rebuilt for Boost 1.69 * Sat Jan 5 2019 Vitaly Zaitsev vitaly@easycoding.org - 0.6.2-3 - Rebuilt due to libolm update. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1634779 - [abrt] nheko: QListData::shared_null(): nheko killed by SIGILL https://bugzilla.redhat.com/show_bug.cgi?id=1634779 [ 2 ] Bug #1674237 - nheko-0.6.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1674237 --------------------------------------------------------------------------------
================================================================================ pysnmp-4.4.9-1.fc29 (FEDORA-2019-689f18525d) An SNMP engine written in Python -------------------------------------------------------------------------------- Update Information:
Updated to new upstream version 4.4.9 -------------------------------------------------------------------------------- ChangeLog:
* Sun Feb 10 2019 Fabian Affolter mail@fabian-affolter.ch - 4.4.9-1 - Updated to new upstream version 4.4.9 * Sat Feb 2 2019 Fedora Release Engineering releng@fedoraproject.org - 4.4.8-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Mon Jan 7 2019 Fabian Affolter mail@fabian-affolter.ch - 4.4.8-1 - Updated to new upstream version 4.4.8 --------------------------------------------------------------------------------
================================================================================ safekeep-1.4.5-1.fc29 (FEDORA-2019-187508fff6) The SafeKeep backup system -------------------------------------------------------------------------------- Update Information:
Latest upstream release -------------------------------------------------------------------------------- ChangeLog:
* Sun Feb 10 2019 Frank Crawford frank@crawford.emu.id.au 1.4.5-1 - Latest upstream release * Fri Feb 8 2019 Frank Crawford frank@crawford.emu.id.au - 1.4.4-8 - Correct FTBS error due to default in F30 as python3, replace with python2 * Sat Feb 2 2019 Fedora Release Engineering releng@fedoraproject.org - 1.4.4-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ wpewebkit-2.22.4-1.fc29 (FEDORA-2019-da5af25ac3) A WebKit port optimized for low-end devices -------------------------------------------------------------------------------- Update Information:
Adding another patch so the package properly installs -------------------------------------------------------------------------------- ChangeLog:
-------------------------------------------------------------------------------- References:
[ 1 ] Bug #1674069 - wpewebkit-2.22.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1674069 --------------------------------------------------------------------------------