The following Fedora 29 Security updates need testing:
Age URL
229
https://bodhi.fedoraproject.org/updates/FEDORA-2019-fa5843e0e1
asterisk-16.2.1-1.fc29
216
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c84f291592
WALinuxAgent-2.2.38-1.fc29
211
https://bodhi.fedoraproject.org/updates/FEDORA-2019-7528388823
chicken-5.0.0-2.fc29
170
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9839aded3f
python-gnupg-0.4.4-1.fc29
166
https://bodhi.fedoraproject.org/updates/FEDORA-2019-35cb5a4785
kubernetes-1.13.5-1.fc29
104
https://bodhi.fedoraproject.org/updates/FEDORA-2019-32f7cd9b66
dosbox-0.74.3-2.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-65c33bdc2a
radare2-3.9.0-3.fc29.1
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-7ab0c9faf9
firefox-69.0.3-1.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b92ce3144a
libpcap-1.9.1-1.fc29
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d49c8ec32b scapy-2.4.3-2.fc29
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e70f89fa34
wordpress-5.2.4-1.fc29
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-41e28660ae
kernel-5.3.6-100.fc29 kernel-headers-5.3.6-100.fc29 kernel-tools-5.3.6-100.fc29
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-23638d42f3
mod_auth_openidc-2.4.0.3-1.fc29
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-72755db9c7 sudo-1.8.28-1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4d33c62860 jss-4.6.2-1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-fc95e6255c
chromium-77.0.3865.120-1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-85d92df70f
tcpdump-4.9.3-1.fc29
The following Fedora 29 Critical Path updates have yet to be approved:
Age URL
142
https://bodhi.fedoraproject.org/updates/FEDORA-2019-06a2d1c7fb
anaconda-29.24.7-3.fc29
140
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4cefd3161a
nfs-utils-2.3.3-4.rc2.fc29
113
https://bodhi.fedoraproject.org/updates/FEDORA-2019-583d9d5a56
mutter-3.30.2-3.fc29
99
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6f13c38d0d
python-urllib3-1.24.3-2.fc29
97
https://bodhi.fedoraproject.org/updates/FEDORA-2019-62e681b68b ipset-7.2-1.fc29
29
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3bdedf56fb sssd-2.2.2-1.fc29
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4bf63b7592
ibus-1.5.19-18.fc29
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-5468235704
openssl-1.1.1d-2.fc29
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b54a9b5130 rsync-3.1.3-8.fc29
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c15ad33a2a
glusterfs-5.10-1.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-0fc03df5c7 satyr-0.29-1.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b92ce3144a
libpcap-1.9.1-1.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-7ab0c9faf9
firefox-69.0.3-1.fc29
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-fc68cd365a
python-rpm-macros-3-38.fc29
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-72755db9c7 sudo-1.8.28-1.fc29
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-41e28660ae
kernel-5.3.6-100.fc29 kernel-headers-5.3.6-100.fc29 kernel-tools-5.3.6-100.fc29
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4fb3314f2e
vte291-0.54.5-1.fc29
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-a122d9c41c
appstream-data-29-16.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-fea597de4b
libreport-2.11.1-1.fc29
The following builds have been pushed to Fedora 29 updates-testing
R-R.rsp-0.43.2-1.fc29
R-htmlwidgets-1.5.1-1.fc29
R-tinytest-1.1.0-1.fc29
WoeUSB-3.3.0-1.fc29
flatpak-module-tools-0.11-1.fc29
fpaste-0.4.0.1-1.fc29
java-1.8.0-openjdk-1.8.0.232.b09-0.fc29
kronosnet-1.13-1.fc29
libxmlb-0.1.13-1.fc29
openhantek-2.16-1.fc29
php-league-flysystem-1.0.57-1.fc29
php-zendframework-zend-mime-2.7.2-2.fc29
php-zendframework-zend-server-2.8.1-2.fc29
php-zendframework-zend-text-2.7.1-2.fc29
python3-3.7.5-1.fc29
python38-3.8.0-1.fc29
recoll-1.26.0-1.fc29
rsyslog-8.1910.0-1.fc29
sane-backends-1.0.28-3.fc29
sympa-6.2.48-2.fc29
vim-8.1.2168-1.fc29
virtme-0.1.1-12.fc29
virtualbox-guest-additions-6.0.14-1.fc29
xpdf-4.02-1.fc29
Details about builds:
================================================================================
R-R.rsp-0.43.2-1.fc29 (FEDORA-2019-19b5ae8fb2)
Dynamic Generation of Scientific Reports
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 17 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.43.2-1
- Update to latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1762641 - R-R.rsp-0.43.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1762641
--------------------------------------------------------------------------------
================================================================================
R-htmlwidgets-1.5.1-1.fc29 (FEDORA-2019-bc771f3f6c)
HTML Widgets for R
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 16 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 1.5.1-1
- Update to latest version
--------------------------------------------------------------------------------
================================================================================
R-tinytest-1.1.0-1.fc29 (FEDORA-2019-3140771975)
Lightweight and Feature Complete Unit Testing Framework
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 16 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 1.1.0-1
- Update to latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1762562 - R-tinytest-1.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1762562
--------------------------------------------------------------------------------
================================================================================
WoeUSB-3.3.0-1.fc29 (FEDORA-2019-00a9df6efa)
Windows USB installation media creator
--------------------------------------------------------------------------------
Update Information:
Release v3.3.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 16 2019 mprahl <mprahl(a)redhat.com> - 3.3.0-1
- new version
* Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.2.12-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.2.12-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1712606 - WoeUSB-3.3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1712606
--------------------------------------------------------------------------------
================================================================================
flatpak-module-tools-0.11-1.fc29 (FEDORA-2019-9c8aa9edef)
Tools for maintaining Flatpak applications and runtimes as Fedora modules
--------------------------------------------------------------------------------
Update Information:
flatpak-module-tools-0.11: add standard labels like `name` and
`com.redhat.component` to the generated container images, and allow using labels
instead of annotations for Flatpak metadata. ---- Fix some problems with the
libmodulemd v2 api conversion in flatpak-module-tools-0.10.1-1 ---- * Fixes
problem where generated flatpak runtimes would show errors with `flatpak repair`
[#2](https://pagure.io/flatpak-module-tools/issue/2) * Fixes compatibility with
module-build-service >= 2.21 and newer. flatpak-module-tools now uses the v2 API
of libmodulemd.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 17 2019 Fedora <otaylor(a)redhat.com> - 0.11-1
- Version 0.11 - add standard labels, and allow using labels
instead of annotations for Flatpak metadata.
* Wed Jul 24 2019 Owen Taylor <otaylor(a)redhat.com> - 0.10.4-2
- Fix requirements
* Wed Jul 24 2019 Owen Taylor <otaylor(a)redhat.com> - 0.10.4-1
- Version 0.10.4 - fix bugs with libmodulemd v2 api conversion
* Fri Jul 12 2019 Owen Taylor <otaylor(a)redhat.com> - 0.10.1-1
- Version 0.10.1 - fix compatibility with newer module-build-service
and avoid flatpak-repair issues.
--------------------------------------------------------------------------------
================================================================================
fpaste-0.4.0.1-1.fc29 (FEDORA-2019-320ab15d46)
A simple tool for pasting info onto the Fedora community paste server
--------------------------------------------------------------------------------
Update Information:
* Improves the usage message that is displayed when `--help` is used. ---- *
No functional changes, only updates the description + summary of the RPM
package.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 17 2019 Ankur Sinha <ankursinha AT fedoraproject DOT org> - 0.4.0.1-1
- Update to release 0.4.0.1
* Thu Oct 17 2019 Ankur Sinha <ankursinha AT fedoraproject DOT org> - 0.4.0.0-2
- Update summary and description
--------------------------------------------------------------------------------
================================================================================
java-1.8.0-openjdk-1.8.0.232.b09-0.fc29 (FEDORA-2019-a87aba290f)
OpenJDK Runtime Environment 8
--------------------------------------------------------------------------------
Update Information:
OpenJDK October CPU security update. See:
https://openjdk.java.net/groups/vulnerability/advisories/2019-10-15
http://mail.openjdk.java.net/pipermail/jdk8u-dev/2019-October/010452.html
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 11 2019 Andrew Hughes <gnu.andrew(a)redhat.com> - 1:1.8.0.232.b09-0
- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
* Fri Oct 11 2019 Andrew Hughes <gnu.andrew(a)redhat.com> - 1:1.8.0.232.b08-0.0.ea
- Update to aarch64-shenandoah-jdk8u232-b08.
* Fri Oct 11 2019 Andrew Hughes <gnu.andrew(a)redhat.com> - 1:1.8.0.232.b05-0.1.ea
- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
* Thu Oct 10 2019 Andrew Hughes <gnu.andrew(a)redhat.com> - 1:1.8.0.232.b05-0.0.ea
- Update to aarch64-shenandoah-jdk8u232-b05.
- Drop upstreamed patch JDK-8141570/PR3548.
- Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570.
* Fri Sep 27 2019 Andrew Hughes <gnu.andrew(a)redhat.com> - 1:1.8.0.232.b01-0.0.ea
- Update to aarch64-shenandoah-jdk8u232-b01.
- Switch to EA mode.
- Drop JDK-8210761/RH1632174 as now upstream.
- Drop JDK-8223219 as now upstream.
- JDK-8226870 removed clhsdb and hdsdb from the JRE bin directory, so we should do
likewise.
- Add alternatives support for these two new SDK binaries.
* Thu Aug 15 2019 Andrew Hughes <gnu.andrew(a)redhat.com> - 1:1.8.0.222.b10-3
- Switch to in-tree SunEC code, dropping NSS runtime dependencies and patches to link
against it.
* Thu Aug 8 2019 Andrew Hughes <gnu.andrew(a)redhat.com> - 1:1.8.0.222.b10-2
- Drop unnecessary build requirement on gtk2-devel, as OpenJDK searches for Gtk+ at
runtime.
- Add missing build requirements for libXext-devel and libXrender-devel, previously masked
by Gtk2+ dependency.
- fontconfig build requirement should be fontconfig-devel, previously masked by Gtk2+
dependency
* Wed Jul 31 2019 Andrew Hughes <gnu.andrew(a)redhat.com> - 1:1.8.0.222.b10-1
- Obsolete javadoc-debug and javadoc-debug-zip packages via javadoc and javadoc-zip
respectively.
* Wed Jul 31 2019 Severin Gehwolf <sgehwolf(a)redhat.com> - 1:1.8.0.222.b10-1
- Don't produce javadoc/javadoc-zip sub packages for the debug variant build.
- Don't perform a bootcycle build for the debug variant build.
--------------------------------------------------------------------------------
================================================================================
kronosnet-1.13-1.fc29 (FEDORA-2019-96adb2ff8d)
Multipoint-to-Multipoint VPN daemon
--------------------------------------------------------------------------------
Update Information:
New upstream release, fixes more memory corruption problems on unstable
networks.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 16 2019 Fabio M. Di Nitto <fdinitto(a)redhat.com> - 1.13-1
- New upstream release
- Fixes more memory corruption problems on unstable networks.
--------------------------------------------------------------------------------
================================================================================
libxmlb-0.1.13-1.fc29 (FEDORA-2019-224acac697)
Library for querying compressed XML metadata
--------------------------------------------------------------------------------
Update Information:
New upstream release - Export xb_silo_query_full() - Show the XPath that was
used in the query in the error message
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 17 2019 Richard Hughes <richard(a)hughsie.com> 0.1.13-1
- New upstream release
- Export xb_silo_query_full()
- Show the XPath that was used in the query in the error message
* Fri Sep 27 2019 Richard Hughes <richard(a)hughsie.com> 0.1.12-1
- New upstream release
- Add xb_node_transmogrify to allow changing XML format
- Do not escape a single quote with '
- Don't invalidate the silo for a GIO temp file
- Fix up two memory leaks if using libxmlb from an introspected binding
* Mon Jul 15 2019 Richard Hughes <richard(a)hughsie.com> 0.1.11-1
- New upstream release
- Add xb_node_query_first_full() API
- Rebuild the XbMachine parser to support 'and' and 'or' predicates
--------------------------------------------------------------------------------
================================================================================
openhantek-2.16-1.fc29 (FEDORA-2019-cd10b9055e)
Hantek and compatible USB digital signal oscilloscope
--------------------------------------------------------------------------------
Update Information:
Update to 2.16.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 17 2019 Vasiliy N. Glazov <vascom2(a)gmail.com> - 2.16-1
- Update to 2.16
--------------------------------------------------------------------------------
================================================================================
php-league-flysystem-1.0.57-1.fc29 (FEDORA-2019-6cca648133)
Filesystem abstraction: Many filesystems, one API
--------------------------------------------------------------------------------
Update Information:
**Version 1.0.57** - 2019-10-16 * Added more missing mime-types. ----
**Version 1.0.56** - 2019-10-12 * Improved packagist artifact * Added missing
mime-type.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 17 2019 Remi Collet <remi(a)remirepo.net> - 1.0.57-1
- update to 1.0.57
* Sun Oct 13 2019 Remi Collet <remi(a)remirepo.net> - 1.0.56-1
- update to 1.0.56
--------------------------------------------------------------------------------
================================================================================
php-zendframework-zend-mime-2.7.2-2.fc29 (FEDORA-2019-c8f7acaad5)
Zend Framework Mime component
--------------------------------------------------------------------------------
Update Information:
**Version 2.7.2** - 2019-10-16 **Added** -
[#37](https://github.com/zendframework/zend-mime/pull/37) adds support for PHP
7.3. **Fixed** - [#36](https://github.com/zendframework/zend-mime/pull/36)
fixes `Zend\Mime\Decode::splitMessage` to set `Zend\Mail\Headers` instance
always for `$headers` parameter. Before, when messages without headers was
provided, `$headers` was an empty array.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 17 2019 Remi Collet <remi(a)remirepo.net> - 2.7.2-1
- update to 2.7.2
--------------------------------------------------------------------------------
================================================================================
php-zendframework-zend-server-2.8.1-2.fc29 (FEDORA-2019-fc346f3fa2)
Zend Framework Server component
--------------------------------------------------------------------------------
Update Information:
**Version 2.8.1** - 2019-10-16 **Added** -
[#27](https://github.com/zendframework/zend-server/pull/27) adds support for PHP
7.3. **Fixed** - [#30](https://github.com/zendframework/zend-server/pull/30)
provides fixes to ensure the various Reflection classes can be safely
de/serialized under PHP 7.4.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 17 2019 Remi Collet <remi(a)remirepo.net> - 2.8.1-1
- update to 2.8.1
--------------------------------------------------------------------------------
================================================================================
php-zendframework-zend-text-2.7.1-2.fc29 (FEDORA-2019-cdc66ca749)
Zend Framework Text component
--------------------------------------------------------------------------------
Update Information:
**Version 2.7.1** - 2019-10-16 **Added** -
[#20](https://github.com/zendframework/zend-text/pull/20) adds support for PHP
7.3.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 17 2019 Remi Collet <remi(a)remirepo.net> - 2.7.1-1
- update to 2.7.1
--------------------------------------------------------------------------------
================================================================================
python3-3.7.5-1.fc29 (FEDORA-2019-986622833f)
Interpreter of the Python programming language
--------------------------------------------------------------------------------
Update Information:
Python 3.7.5 is the fifth and most recent maintenance release of Python 3.7.
Includes a security fix for CVE-2019-16056.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 15 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 3.7.5-1
- Update to 3.7.5
* Wed Oct 2 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 3.7.5~rc1-1
- Update to 3.7.5rc1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1749839 - CVE-2019-16056 python: email.utils.parseaddr wrongly parses email
addresses
https://bugzilla.redhat.com/show_bug.cgi?id=1749839
--------------------------------------------------------------------------------
================================================================================
python38-3.8.0-1.fc29 (FEDORA-2019-9eade0e7c2)
Version 3.8 of the Python interpreter
--------------------------------------------------------------------------------
Update Information:
This is the stable release of Python 3.8.0. Python 3.8.0 is the newest major
release of the Python programming language, and it contains many new features
and optimizations.
https://www.python.org/downloads/release/python-380/
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 14 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 3.8.0-1
- Update to Python 3.8.0 final
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1762694 - Upgrade python38 package to the final release
https://bugzilla.redhat.com/show_bug.cgi?id=1762694
--------------------------------------------------------------------------------
================================================================================
recoll-1.26.0-1.fc29 (FEDORA-2019-52c5a15636)
Desktop full text search tool with Qt GUI
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release recoll 1.26.0.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 16 2019 Terje Rosten <terje.rosten(a)ntnu.no> - 1.26.0-1
- 1.26.0
* Wed Sep 4 2019 Terje Rosten <terje.rosten(a)ntnu.no> - 1.25.2-1
- 1.25.22
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 1.25.20-3
- Rebuilt for Python 3.8
* Mon Aug 5 2019 Terje Rosten <terje.rosten(a)ntnu.no> - 1.25.20-2
- Remove all Python 2 deps and provides
* Mon Aug 5 2019 Terje Rosten <terje.rosten(a)ntnu.no> - 1.25.20-1
- 1.25.20
* Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.25.16-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1759104 - recoll-1.26.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1759104
--------------------------------------------------------------------------------
================================================================================
rsyslog-8.1910.0-1.fc29 (FEDORA-2019-a589c36379)
Enhanced system logging and kernel message trapping daemon
--------------------------------------------------------------------------------
Update Information:
- rebase to 8.1910.0 upstream version - few changes in imjournal behavior
(mainly error reporting)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 17 2019 Jiri Vymazal <jvymazal(a)redhat.com> - 8.1910.0-1
- rebase to upstream version 8.1910.0
resolves: rhbz#1743537
* Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> -
8.1907.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1743537 - rsyslog-8.1908.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1743537
--------------------------------------------------------------------------------
================================================================================
sane-backends-1.0.28-3.fc29 (FEDORA-2019-b2e5c68317)
Scanner access software
--------------------------------------------------------------------------------
Update Information:
qcam backend support is tricky among different Fedora releases and archs - let
the wildcard cover it
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 17 2019 Zdenek Dohnal <zdohnal(a)redhat.com> - 1.0.28-3
- qcam backend support is tricky among different Fedora releases and archs - let the
wildcard cover it
* Thu Oct 17 2019 Zdenek Dohnal <zdohnal(a)redhat.com> - 1.0.28-2
- 1761145, 1761001, 1761051, 1761234 - genesys backend now needs gcc-c++, it is not built
otherwise
- 1758886 - CanoScan LiDE scanners supported by genesys backend are not detected
- 1760916 - Samsung C460 does not have JPEG support
- 1761530 - genesys aborts when accessing invalid vector index and built with
GLIBCXX_ASSERTIONS
- remove qcam from armvhl7 too
--------------------------------------------------------------------------------
================================================================================
sympa-6.2.48-2.fc29 (FEDORA-2019-c2bcb23920)
Powerful multilingual List Manager
--------------------------------------------------------------------------------
Update Information:
Fixes a packaging bug preventing to update the aliases file on new mailing list
creation.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 16 2019 Xavier Bachelot <xavier(a)bachelot.org> 6.2.48-2
- Don't require optional perl modules unavailable on EL8.
- Disable httpd and lighttpd support for EL8 until missing bits are available.
- Change sympa localstatedir owner/group to sympa:sympa. Fixes RHBZ#1761455.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1761455 - Unable update sympa_aliases file
https://bugzilla.redhat.com/show_bug.cgi?id=1761455
--------------------------------------------------------------------------------
================================================================================
vim-8.1.2168-1.fc29 (FEDORA-2019-6f59a13d39)
The VIM editor
--------------------------------------------------------------------------------
Update Information:
The newest upstream commit
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 17 2019 Zdenek Dohnal <zdohnal(a)redhat.com> - 2:8.1.2168-1
- patchlevel 2168
* Mon Oct 7 2019 Zdenek Dohnal <zdohnal(a)redhat.com> - 2:8.1.2120-1
- patchlevel 2120
* Mon Sep 30 2019 Zdenek Dohnal <zdohnal(a)redhat.com> - 2:8.1.2102-1
- patchlevel 2102
* Thu Sep 19 2019 Zdenek Dohnal <zdohnal(a)redhat.com> - 2:8.1.2056-1
- patchlevel 2056
* Mon Sep 16 2019 Zdenek Dohnal <zdohnal(a)redhat.com> - 2:8.1.2019-2
- enable fips warning
* Tue Sep 10 2019 Zdenek Dohnal <zdohnal(a)redhat.com> - 2:8.1.2019-1
- patchlevel 2019
--------------------------------------------------------------------------------
================================================================================
virtme-0.1.1-12.fc29 (FEDORA-2019-1abcac03ca)
Virtualize the running distro or a simple rootfs
--------------------------------------------------------------------------------
Update Information:
Virtme 0.1.1 - major new release You may need to start using the --mods option.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 10 2019 luto(a)kernel.org - 0.1.1-1
- New release
* Thu Oct 3 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 0.0.3-12
- Rebuilt for Python 3.8.0rc1 (#1748018)
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 0.0.3-11
- Rebuilt for Python 3.8
* Sat Jul 27 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.0.3-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Sun Feb 3 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.0.3-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
virtualbox-guest-additions-6.0.14-1.fc29 (FEDORA-2019-5b2da340cd)
VirtualBox Guest Additions
--------------------------------------------------------------------------------
Update Information:
Update to 6.0.14
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 17 2019 S��rgio Basto <sergio(a)serjux.com> - 6.0.14-1
- Update Virtualbox Guest Additions to 6.0.14
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1744367 - The Guest window will flicker with the package
virtualbox-guest-additions
https://bugzilla.redhat.com/show_bug.cgi?id=1744367
[ 2 ] Bug #1762012 - virtualbox-guest-additions-6.0.14 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1762012
--------------------------------------------------------------------------------
================================================================================
xpdf-4.02-1.fc29 (FEDORA-2019-01da705767)
A PDF file viewer for the X Window System
--------------------------------------------------------------------------------
Update Information:
xpdf 4.02. Lots of security fixes here.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 16 2019 Tom Callaway <spot(a)fedoraproject.org> - 1:4.02-1
- update to 4.02
* Sat Jul 27 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:4.01-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1728103 - CVE-2019-13286 xpdf: heap-based buffer over-read in function
JBIG2Stream::readTextRegionSeg() in JBIG2Stream.cc [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1728103
[ 2 ] Bug #1727737 - CVE-2019-13281 xpdf: heap-based buffer overflow in
DCTStream::decodeImage() in Stream.cc [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1727737
[ 3 ] Bug #1727734 - CVE-2019-13282 xpdf: heap-based buffer over-read in
SampledFunction::transform in Function.cc [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1727734
[ 4 ] Bug #1727730 - CVE-2019-13283 xpdf: heap-based buffer over-read in
FoFiType1::parse in fofi/FoFiType1.cc [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1727730
[ 5 ] Bug #1725690 - CVE-2019-12957 CVE-2019-12958 xpdf: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1725690
[ 6 ] Bug #1716836 - CVE-2019-12493 xpdf: stack-based buffer over-read in function
PostScriptFunction::transform in Function.cc [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1716836
[ 7 ] Bug #1716827 - CVE-2019-12515 xpdf: out-of-bounds read in function
FlateStream::getChar() in Stream.cc [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1716827
--------------------------------------------------------------------------------