The following Fedora 29 Security updates need testing:
Age URL
226
https://bodhi.fedoraproject.org/updates/FEDORA-2019-fa5843e0e1
asterisk-16.2.1-1.fc29
213
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c84f291592
WALinuxAgent-2.2.38-1.fc29
207
https://bodhi.fedoraproject.org/updates/FEDORA-2019-7528388823
chicken-5.0.0-2.fc29
167
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9839aded3f
python-gnupg-0.4.4-1.fc29
163
https://bodhi.fedoraproject.org/updates/FEDORA-2019-35cb5a4785
kubernetes-1.13.5-1.fc29
101
https://bodhi.fedoraproject.org/updates/FEDORA-2019-32f7cd9b66
dosbox-0.74.3-2.fc29
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-387474fa20
thunderbird-68.1.1-1.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3fc86a518b
runc-1.0.0-95.rc9.gitc1485a1.fc29
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8fcf21a816
python-ecdsa-0.13.3-1.fc29
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b1586544bb
libnbd-1.0.3-1.fc29
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9f9b38c8e5
kernel-5.2.20-100.fc29 kernel-headers-5.2.20-100.fc29 kernel-tools-5.2.20-100.fc29
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-65c33bdc2a
radare2-3.9.0-3.fc29.1
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-7ab0c9faf9
firefox-69.0.3-1.fc29
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b92ce3144a
libpcap-1.9.1-1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d49c8ec32b scapy-2.4.3-2.fc29
The following Fedora 29 Critical Path updates have yet to be approved:
Age URL
139
https://bodhi.fedoraproject.org/updates/FEDORA-2019-06a2d1c7fb
anaconda-29.24.7-3.fc29
137
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4cefd3161a
nfs-utils-2.3.3-4.rc2.fc29
110
https://bodhi.fedoraproject.org/updates/FEDORA-2019-583d9d5a56
mutter-3.30.2-3.fc29
96
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6f13c38d0d
python-urllib3-1.24.3-2.fc29
94
https://bodhi.fedoraproject.org/updates/FEDORA-2019-62e681b68b ipset-7.2-1.fc29
26
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3bdedf56fb sssd-2.2.2-1.fc29
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-387474fa20
thunderbird-68.1.1-1.fc29
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-f6802f80f7
hwdata-0.328-1.fc29
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4bf63b7592
ibus-1.5.19-18.fc29
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-5468235704
openssl-1.1.1d-2.fc29
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b54a9b5130 rsync-3.1.3-8.fc29
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c15ad33a2a
glusterfs-5.10-1.fc29
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9f9b38c8e5
kernel-5.2.20-100.fc29 kernel-headers-5.2.20-100.fc29 kernel-tools-5.2.20-100.fc29
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-0fc03df5c7 satyr-0.29-1.fc29
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b92ce3144a
libpcap-1.9.1-1.fc29
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-7ab0c9faf9
firefox-69.0.3-1.fc29
The following builds have been pushed to Fedora 29 updates-testing
claws-mail-3.17.4-3.fc29
cutter-1.2.7-1.fc29
dmenu-4.9-2.fc29
ephemeral-6.0.0-1.fc29
kmodtool-1-37.fc29
mysql-connector-java-8.0.16-3.fc29
nwipe-0.26-1.fc29
php-league-flysystem-1.0.56-1.fc29
php-zendframework-zend-validator-2.12.1-1.fc29
proftpd-1.3.6a-1.fc29
pyodbc-3.0.10-16.fc29
python-impacket-0.9.20-1.fc29
python-rpm-macros-3-38.fc29
qsstv-9.4.4-1.fc29
radeontop-1.2-3.20191001git50cc248.fc29
Details about builds:
================================================================================
claws-mail-3.17.4-3.fc29 (FEDORA-2019-05f119a340)
Email client and news reader based on GTK+
--------------------------------------------------------------------------------
Update Information:
Emacs still prints "Selection owner couldn't convert: MULTIPLE", but
copy'n'paste works again.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 11 2019 Michael Schwendt <mschwendt(a)fedoraproject.org> - 3.17.4-3
- Merge fix for copy'n'paste from Emacs (#4257) rhbz#1760557
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1760557 - paste into message area not working
https://bugzilla.redhat.com/show_bug.cgi?id=1760557
--------------------------------------------------------------------------------
================================================================================
cutter-1.2.7-1.fc29 (FEDORA-2019-34ebbda47c)
Unit Testing Framework for C/C++
--------------------------------------------------------------------------------
Update Information:
New upstream release.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 3 2019 Kentaro hayashi <hayashi(a)clear-code.com> - 1.2.7-1
- New upstream release.
* Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.6-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.6-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
dmenu-4.9-2.fc29 (FEDORA-2019-5a1eb36b76)
Generic menu for X
--------------------------------------------------------------------------------
Update Information:
Fix dmenu crash in XmbLookupString() (BZ#1761325) Backport patches regarding
the focus issues in various WMs
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 14 2019 Frantisek Sumsal <frantisek(a)sumsal.cz> - 4.9-2
- Fix dmenu crash in XmbLookupString() (BZ#1761325)
- Backport patches regarding the focus issues in various WMs
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1761325 - Segmentation fault when LANG=C.utf8
https://bugzilla.redhat.com/show_bug.cgi?id=1761325
--------------------------------------------------------------------------------
================================================================================
ephemeral-6.0.0-1.fc29 (FEDORA-2019-c1d1eb01a1)
Private-by-default, always-incognito browser
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 14 2019 Artem Polishchuk <ego.cordatus(a)gmail.com> - 6.0.0-1
- Update to 6.0.0
--------------------------------------------------------------------------------
================================================================================
kmodtool-1-37.fc29 (FEDORA-2019-f9646d6e32)
Tool for building kmod packages
--------------------------------------------------------------------------------
Update Information:
More bug fixing ---- - Fix naming conflict with kmod meta package
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 13 2019 S��rgio Basto <sergio(a)serjux.com> - 1-37
- Fix package name in epel scriptlets
* Thu Oct 10 2019 Leigh Scott <leigh123linux(a)gmail.com> - 1-36
- Fix naming conflict with kmod meta package
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1-35
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Thu May 16 2019 Nicolas Chauvet <kwizart(a)gmail.com> - 1-34
- Add _kmodtool_depmod_post - rhbz#1703715
--------------------------------------------------------------------------------
================================================================================
mysql-connector-java-8.0.16-3.fc29 (FEDORA-2019-6b033c8359)
Official JDBC driver for MySQL
--------------------------------------------------------------------------------
Update Information:
removed c3p0 dependency
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 14 2019 Ondrej Dubaj <odubaj(a)redhat.com> - 1:8.0.16-3
- removed c3p0 dependency
--------------------------------------------------------------------------------
================================================================================
nwipe-0.26-1.fc29 (FEDORA-2019-c2c79caec0)
Securely erase disks using a variety of recognized methods
--------------------------------------------------------------------------------
Update Information:
upgrade to bugfix release 0.26
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 12 2019 Michal Ambroz <rebus at, seznam.cz> 0.26-1
- bump to 0.26
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.25-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Mon Apr 1 2019 Michal Ambroz <rebus at, seznam.cz> 0.25-1
- bump to 0.25
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.24-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1748848 - nwipe-.026 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1748848
--------------------------------------------------------------------------------
================================================================================
php-league-flysystem-1.0.56-1.fc29 (FEDORA-2019-209239110e)
Filesystem abstraction: Many filesystems, one API
--------------------------------------------------------------------------------
Update Information:
**Version 1.0.56** - 2019-10-12 * Improved packagist artifact * Added missing
mime-type.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 13 2019 Remi Collet <remi(a)remirepo.net> - 1.0.56-1
- update to 1.0.56
--------------------------------------------------------------------------------
================================================================================
php-zendframework-zend-validator-2.12.1-1.fc29 (FEDORA-2019-0a43b01d08)
Zend Framework Validator component
--------------------------------------------------------------------------------
Update Information:
**Version 2.12.1** - 2019-10-12 **Fixed** -
[#272](https://github.com/zendframework/zend-validator/pull/272) changes curly
braces in array and string offset access to square brackets in order to
prevent issues under the upcoming PHP 7.4 release. -
[#231](https://github.com/zendframework/zend-validator/pull/231) fixes
validation of input hashes in `Zend\Validator\File\Hash` validator when provided
as array. Only string hashes are allowed. If different type is provided
`Zend\Validator\Exception\InvalidArgumentException` is thrown.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 13 2019 Remi Collet <remi(a)remirepo.net> - 2.12.1-1
- update to 2.12.1
--------------------------------------------------------------------------------
================================================================================
proftpd-1.3.6a-1.fc29 (FEDORA-2019-ae019c7e9f)
Flexible, stable and highly-configurable FTP server
--------------------------------------------------------------------------------
Update Information:
This is a cumulative bug-fix update from upstream.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 13 2019 Paul Howarth <paul(a)city-fan.org> - 1.3.6a-1
- Update to 1.3.6a
- Configure script wrongly detected AIX lastlog functions
(
http://bugs.proftpd.org/show_bug.cgi?id=4304)
- AllowChrootSymlinks off could cause login failures depending on filesystem
permissions (
http://bugs.proftpd.org/show_bug.cgi?id=4306)
- mod_ctrls: error: unable to bind to local socket: Address already in use
(
https://github.com/proftpd/proftpd/issues/501)
- Failed to handle multiple %{env:...} variables in single word in
configuration (
https://github.com/proftpd/proftpd/issues/507)
- mod_sftp failed to check shadow password information when publickey
authentication used (
http://bugs.proftpd.org/show_bug.cgi?id=4308)
- Use of "AllowEmptyPasswords off" broke SFTP/SCP logins
(
http://bugs.proftpd.org/show_bug.cgi?id=4309)
- Use of mod_facl as static module caused ProFTPD to die on SIGHUP/restart
(
http://bugs.proftpd.org/show_bug.cgi?id=4310)
- Use of curve25519-sha256(a)libssh.org SSH2 key exchange sometimes failed
(
https://github.com/proftpd/proftpd/issues/556)
- Close extra file descriptors at startup
(
http://bugs.proftpd.org/show_bug.cgi?id=4312)
- <Anonymous> with AuthAliasOnly in effect did not work as expected
(
http://bugs.proftpd.org/show_bug.cgi?id=4314)
- CreateHome NoRootPrivs only worked partially
(
https://github.com/proftpd/proftpd/issues/568)
- SFTP OPEN response included attribute flags that are not actually provided
(
https://github.com/proftpd/proftpd/issues/578)
- Truncation of file while being downloaded with sendfile enabled caused
timeouts due to infinite loop (
http://bugs.proftpd.org/show_bug.cgi?id=4318)
- FTP uploads frequently broke due to "Interrupted system call" error
(
http://bugs.proftpd.org/show_bug.cgi?id=4319)
- Site-to-site transfers over TLS failed
(
https://github.com/proftpd/proftpd/issues/618)
- Can't see symlinks using any FTP client when using MLSD
(
http://bugs.proftpd.org/show_bug.cgi?id=4322)
- mod_tls 1.3.6 failed to compile using OpenSSL 0.9.8e
(
http://bugs.proftpd.org/show_bug.cgi?id=4325)
- Using MaxClientsPerHost 1 in <Anonymous> section denied logins
(
http://bugs.proftpd.org/show_bug.cgi?id=4326)
- SQLNamedConnectInfo with different backend database did not work properly
(
https://github.com/proftpd/proftpd/issues/642)
- Segfault with mod_sftp+mod_sftp_pam after successful authentication using
keyboard-interactive method (
https://github.com/proftpd/proftpd/issues/656)
- autoconf always failed to detect support for FIPS
(
https://github.com/proftpd/proftpd/issues/660)
- SFTP connections failed when using "arcfour256" cipher
(
https://github.com/proftpd/proftpd/issues/663)
- mod_auth_otp failed to build with OpenSSL 1.1.x
(
http://bugs.proftpd.org/show_bug.cgi?id=4335)
- scp broken on FreeBSD 11 (
http://bugs.proftpd.org/show_bug.cgi?id=4341)
- Update mod_sftp to handle changed APIs in OpenSSL 1.1.x releases
(
https://github.com/proftpd/proftpd/issues/674)
- Infinite loop possible in mod_sftp's set_sftphostkey() function
(
http://bugs.proftpd.org/show_bug.cgi?id=4356)
- Some ASCII text files corrupted when downloading
(
http://bugs.proftpd.org/show_bug.cgi?id=4352)
- Properly use the --includedir, --libdir configure variables in the
generated proftpd.pc pkgconfig file
(
https://github.com/proftpd/proftpd/issues/797)
- Reading invalid SSH key from database resulted in unexpected/unlogged
disconnect failures (
http://bugs.proftpd.org/show_bug.cgi?id=4350)
- Symlink navigation broken after 1.3.6 update
(
http://bugs.proftpd.org/show_bug.cgi?id=4332)
- Unable to connect to ProFTPD using TLSSessionTickets and TLSv1.3
(
https://github.com/proftpd/proftpd/issues/795)
- SITE CPFR/CPTO did not honor <Limit> configurations
(
http://bugs.proftpd.org/show_bug.cgi?id=4372)
- Using "TLSProtocol SSLv23" did not enable all protocol versions
(
https://github.com/proftpd/proftpd/issues/807)
--------------------------------------------------------------------------------
================================================================================
pyodbc-3.0.10-16.fc29 (FEDORA-2019-9892234132)
Python DB API 2.0 Module for ODBC
--------------------------------------------------------------------------------
Update Information:
fix BuildRequirements gcc-c++
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 14 2019 Filip Janu�� <fjanus(a)redhat.com> - 3.0.10-16
- Add gcc-c++ into BuildRequires (bug #1605562)
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.0.10-15
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1605562 - pyodbc: FTBFS in Fedora rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1605562
--------------------------------------------------------------------------------
================================================================================
python-impacket-0.9.20-1.fc29 (FEDORA-2019-4492e69e5b)
Collection of Python classes providing access to network packets
--------------------------------------------------------------------------------
Update Information:
update to 0.9.20, add support for python3
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 12 2019 Michal Ambroz <rebus _AT seznam.cz> - 0.9.20-1
- bump to version 0.9.20
- generate python3 packages, preference goes to python3
- omit python2 for fc32+ rhel8+
* Tue Sep 17 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 0.9.19-2
- Only recommend packages needed for examples
* Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> -
0.9.19-1.1
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
python-rpm-macros-3-38.fc29 (FEDORA-2019-fc68cd365a)
The unversioned Python RPM macros
--------------------------------------------------------------------------------
Update Information:
Define %python2 and %python3
--------------------------------------------------------------------------------
ChangeLog:
* Fri Sep 27 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 3-38
- Define %python2 and %python3
--------------------------------------------------------------------------------
================================================================================
qsstv-9.4.4-1.fc29 (FEDORA-2019-49a4a59a2e)
Qt-based slow-scan TV and fax
--------------------------------------------------------------------------------
Update Information:
20190803 QSSTV 9.4.4 - added -Wno-implicit-fallthrough to qsstv.pro -
macro text \%s (SNR) is now supported in template - change in Test FTP
Connections - improved sync detection in SSTV mode - documentation
update - lowered audio level of WF ID - a number of small bug fixes
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 29 2019 Richard Shaw <hobbes1069(a)gmail.com> - 9.4.4-1
- Update to 9.4.4.
* Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 9.4.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1742481 - qsstv-9.4.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1742481
--------------------------------------------------------------------------------
================================================================================
radeontop-1.2-3.20191001git50cc248.fc29 (FEDORA-2019-af7ba3a25f)
View GPU utilization of AMD/ATI Radeon devices
--------------------------------------------------------------------------------
Update Information:
This update improves support of AMD APU
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 13 2019 Luya Tshimbalanga <luya(a)fedoraproject.org> 1.2-1
- Latest upstream git snapshot fixing AMD APU detection
* Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------