The following Fedora 29 Security updates need testing:
Age URL
107
https://bodhi.fedoraproject.org/updates/FEDORA-2018-51ce232320
xerces-c27-2.7.0-28.fc29
43
https://bodhi.fedoraproject.org/updates/FEDORA-2018-36115ae788
mysql-selinux-1.0.0-5.fc29
36
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b89746cb9b
tomcat-9.0.13-1.fc29
8
https://bodhi.fedoraproject.org/updates/FEDORA-2019-2e385f97e2
mingw-libvorbis-1.3.6-2.fc29
8
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c7da53319c
haproxy-1.8.17-1.fc29
8
https://bodhi.fedoraproject.org/updates/FEDORA-2019-a018522ba3
mingw-libjpeg-turbo-2.0.0-2.fc29
8
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4d914f9257
matrix-synapse-0.34.0.1-1.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-a171d0d192 irssi-1.1.2-1.fc29
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b4356521ba
runc-1.0.0-67.dev.git12f6a99.fc29
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-00870e8bfc
anaconda-29.24.7-2.fc29 python3-3.7.2-4.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-376ecc221c
nagios-4.4.3-1.fc29
The following Fedora 29 Critical Path updates have yet to be approved:
Age URL
37
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3d43e7dd21
SLOF-0.1.git20180702-2.fc29
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e5b3682470
perl-File-Temp-0.230.900-1.fc29
8
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b1190b5494
pcmanfm-1.3.1-2.D20181227git0619a81f.fc29
8
https://bodhi.fedoraproject.org/updates/FEDORA-2019-27778372a6
pungi-4.1.32-3.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-a022691b72
breeze-icon-theme-5.54.0-1.fc29 extra-cmake-modules-5.54.0-1.fc29 kf5-5.54.0-1.fc29
kf5-attica-5.54.0-1.fc29 kf5-baloo-5.54.0-1.fc29 kf5-bluez-qt-5.54.0-1.fc29
kf5-frameworkintegration-5.54.0-1.fc29 kf5-kactivities-5.54.0-1.fc29
kf5-kactivities-stats-5.54.0-1.fc29 kf5-kapidox-5.54.0-1.fc29 kf5-karchive-5.54.0-1.fc29
kf5-kauth-5.54.0-1.fc29 kf5-kbookmarks-5.54.0-1.fc29 kf5-kcmutils-5.54.0-1.fc29
kf5-kcodecs-5.54.0-1.fc29 kf5-kcompletion-5.54.0-1.fc29 kf5-kconfig-5.54.0-1.fc29
kf5-kconfigwidgets-5.54.0-1.fc29 kf5-kcoreaddons-5.54.0-1.fc29 kf5-kcrash-5.54.0-1.fc29
kf5-kdbusaddons-5.54.0-1.fc29 kf5-kdeclarative-5.54.0-1.fc29 kf5-kded-5.54.0-1.fc29
kf5-kdelibs4support-5.54.0-1.fc29 kf5-kdesignerplugin-5.54.0-1.fc29
kf5-kdesu-5.54.0-1.fc29 kf5-kdewebkit-5.54.0-1.fc29 kf5-kdnssd-5.54.0-1.fc29
kf5-kdoctools-5.54.0-1.fc29 kf5-kemoticons-5.54.0-1.fc29 kf5-kfilemetadata-5.54.0-1.fc29
kf5-kglobalaccel-5.54.0-1.fc29 kf5-kguiad
dons-5.54.0-1.fc29 kf5-kholidays-5.54.0-1.fc29 kf5-khtml-5.54.0-1.fc29
kf5-ki18n-5.54.0-1.fc29 kf5-kiconthemes-5.54.0-1.fc29 kf5-kidletime-5.54.0-1.fc29
kf5-kimageformats-5.54.0-1.fc29 kf5-kinit-5.54.0-1.fc29 kf5-kio-5.54.1-1.fc29
kf5-kirigami2-5.54.0-1.fc29 kf5-kitemmodels-5.54.0-1.fc29 kf5-kitemviews-5.54.0-1.fc29
kf5-kjobwidgets-5.54.0-1.fc29 kf5-kjs-5.54.0-1.fc29 kf5-kjsembed-5.54.0-1.fc29
kf5-kmediaplayer-5.54.0-1.fc29 kf5-knewstuff-5.54.0-1.fc29
kf5-knotifications-5.54.0-1.fc29 kf5-knotifyconfig-5.54.0-1.fc29
kf5-kpackage-5.54.0-1.fc29 kf5-kparts-5.54.0-1.fc29 kf5-kpeople-5.54.0-1.fc29
kf5-kplotting-5.54.0-1.fc29 kf5-kpty-5.54.0-1.fc29 kf5-kross-5.54.0-1.fc29
kf5-krunner-5.54.0-1.fc29 kf5-kservice-5.54.0-1.fc29 kf5-ktexteditor-5.54.0-1.fc29
kf5-ktextwidgets-5.54.0-1.fc29 kf5-kunitconversion-5.54.0-1.fc29 kf5-kwallet-5.54.0-1.fc29
kf5-kwayland-5.54.0-1.fc29 kf5-kwidgetsaddons-5.54.0-1.fc29
kf5-kwindowsystem-5.54.0-1.fc29 kf5-kxmlgui-5.54.0-1.fc29 kf5-kxmlrpcclient-5.54.0-1.fc29
kf5-modemmanager-qt-5.54.0-1.fc29 kf5-networkmanager-qt-5.54.0-1.fc29
kf5-plasma-5.54.0-1.fc29 kf5-prison-5.54.0-1.fc29 kf5-purpose-5.54.0-1.fc29
kf5-solid-5.54.0-1.fc29 kf5-sonnet-5.54.0-1.fc29 kf5-syndication-5.54.0-1.fc29
kf5-syntax-highlighting-5.54.0-1.fc29 kf5-threadweaver-5.54.0-1.fc29
oxygen-icon-theme-5.54.0-1.fc29 qqc2-desktop-style-5.54.0-1.fc29
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-00870e8bfc
anaconda-29.24.7-2.fc29 python3-3.7.2-4.fc29
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6a1e571c4e
corosync-3.0.1-1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-5d537224ef
kernel-headers-4.20.3-200.fc29 kernel-4.20.3-200.fc29 kernel-tools-4.20.3-200.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-0ab485544f
libguestfs-1.40.1-2.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-063d6e79f1
hivex-1.3.16-1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-f357f36983
supermin-5.1.20-1.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ca705d784a lorax-29.25-1.fc29
The following builds have been pushed to Fedora 29 updates-testing
chirp-20190112-1.fc29
dar-2.6.1-1.fc29
docker-1.13.1-63.git1185cfd.fc29
docker-latest-1.13.1-40.git1185cfd.fc29
gnome-shell-extension-system-monitor-applet-36-2.20190116gitd341bf6.fc29
gsequencer-2.1.38-0.fc29
java-runtime-decompiler-2.0-5.fc29
jhead-3.03-1.fc29
network-manager-applet-1.8.18-3.fc29
numix-icon-theme-circle-0.1.0-18.20181201.git085899f.fc29
numix-icon-theme-square-0.1.0-3.20181201.git70711c2.fc29
perl-Net-SSLeay-1.85-9.fc29
poedit-2.2.1-1.fc29
sagemath-8.3-2.fc29
vips-8.6.5-3.fc29
Details about builds:
================================================================================
chirp-20190112-1.fc29 (FEDORA-2019-72909621a9)
A tool for programming two-way radio equipment
--------------------------------------------------------------------------------
Update Information:
Changes for Build #546 [Dan Smith <dsmith(a)danplanet.com>] Fix a few style issues
from the FT818 patch Related to #6289 [Mike Pittaro <mikeyp(a)lhrc.com>]
FT-818ND US Model Fix 144 and 430 channel names #6289 [Vinny Stipo
<v(a)xpctech.com>] FT-818ND US Model Fixed 60 Meter Memory Index #6289 [Bruno
Maire <bruno(a)e48.ch>] Yaesu FT-7100 Fixed style errors #6259 All style errors
are fixed. Commented-out code is removed. Clariifed some comments. [Pavel
Milanes (CO7WT) <pavelmc(a)gmail.com>] [btech.py] New QYT KT-8900 variant in the
wild, fixes #6265 Add new QYT KT-8900 variant in the wild, new id2
fingerprint.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 19 2019 Richard Shaw <hobbes1069(a)gmail.com> - 20190112-1
- Update to 20190112.
--------------------------------------------------------------------------------
================================================================================
dar-2.6.1-1.fc29 (FEDORA-2019-73616ffc34)
Software for making/restoring incremental CD/DVD backups
--------------------------------------------------------------------------------
Update Information:
New upstream version ---- New upstream version
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 19 2019 Luis Bazan <lbazan(a)fedoraproject.org> - 2.6.1-1
- New upstream version
* Tue Jan 8 2019 Luis Bazan <lbazan(a)fedoraproject.org> - 2.6.0-1
- New upstream version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1667658 - dar-2.6.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1667658
--------------------------------------------------------------------------------
================================================================================
docker-1.13.1-63.git1185cfd.fc29 (FEDORA-2019-a034423db8)
Automates deployment of containerized applications
--------------------------------------------------------------------------------
Update Information:
- Resolves: #1666565, #1666566 - CVE-2018-20699 - Resolves: #1663068, #1667622
- umount all procfs and sysfs with --no-pivot - built docker
@projectatomic/docker-1.13.1 commit 1185cfd - built docker-runc
@projectatomic/docker-1.13.1 commit e4ffe43
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 19 2019 Lokesh Mandvekar <lsm5(a)fedoraproject.org> -
2:1.13.1-63.git1185cfd
- Resolves: #1666565, #1666566 - CVE-2018-20699
- Resolves: #1663068, #1667622 - umount all procfs and sysfs with --no-pivot
- built docker @projectatomic/docker-1.13.1 commit 1185cfd
- built docker-runc @projectatomic/docker-1.13.1 commit e4ffe43
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1663068 - runc: not using pivot_root allows mounting of /proc
https://bugzilla.redhat.com/show_bug.cgi?id=1663068
[ 2 ] Bug #1666565 - CVE-2018-20699 docker: Memory exhaustion via large integer used
with --cpuset-mems or --cpuset-cpus
https://bugzilla.redhat.com/show_bug.cgi?id=1666565
--------------------------------------------------------------------------------
================================================================================
docker-latest-1.13.1-40.git1185cfd.fc29 (FEDORA-2019-f5b57646b7)
Automates deployment of containerized applications
--------------------------------------------------------------------------------
Update Information:
- Resolves: #1666565, #1667625 - CVE-2018-20699 - Resolves: #1663068, #1667626 -
umount all procfs and sysfs with --no-pivot - built docker
@projectatomic/docker-1.13.1 commit 1185cfd - built docker-runc
@projectatomic/docker-1.13.1 commit e4ffe43
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 19 2019 Lokesh Mandvekar <lsm5(a)fedoraproject.org> -
2:1.13.1-40.git1185cfd
- Resolves: #1666565, #1667625 - CVE-2018-20699
- Resolves: #1663068, #1667626 - umount all procfs and sysfs with --no-pivot
- built docker @projectatomic/docker-1.13.1 commit 1185cfd
- built docker-runc @projectatomic/docker-1.13.1 commit e4ffe43
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
2:1.13.1-38.git9cb56fd
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1663068 - runc: not using pivot_root allows mounting of /proc
https://bugzilla.redhat.com/show_bug.cgi?id=1663068
[ 2 ] Bug #1666565 - CVE-2018-20699 docker: Memory exhaustion via large integer used
with --cpuset-mems or --cpuset-cpus
https://bugzilla.redhat.com/show_bug.cgi?id=1666565
--------------------------------------------------------------------------------
================================================================================
gnome-shell-extension-system-monitor-applet-36-2.20190116gitd341bf6.fc29
(FEDORA-2019-31fd2b33c7)
A Gnome shell system monitor extension
--------------------------------------------------------------------------------
Update Information:
Updated to last upstream commits
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 18 2019 Nicolas Vi��ville <nicolas.vieville(a)uphf.fr> -
1:36-2.20190116gitd341bf6
- Updated to last upstream commits
- Updating battery, check prefs
- Bugfix/fix net mount related login hangs after suspend
- Make the log messages more easy to filter from journalctl
--------------------------------------------------------------------------------
================================================================================
gsequencer-2.1.38-0.fc29 (FEDORA-2019-0076e52045)
Audio processing engine
--------------------------------------------------------------------------------
Update Information:
- New upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 14 2019 Bj��rn Esser <besser82(a)fedoraproject.org> - 2.1.33-1
- Rebuilt for libcrypt.so.2 (#1666033)
--------------------------------------------------------------------------------
================================================================================
java-runtime-decompiler-2.0-5.fc29 (FEDORA-2019-4e123d0d0e)
Application for extraction and decompilation of JVM byte code
--------------------------------------------------------------------------------
Update Information:
Added system bindings for system procyon decompiler - so please check in
conjunction with: f29:
[
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6e65692739] ; f28
[
https://bodhi.fedoraproject.org/updates/FEDORA-2019-354b2328cc]
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 17 2019 Jiri Vanek <jvanek(a)redhat.com> - 2.0-5
- improved Patch3, includeLambdas.patch to sort the lamdas t the bottom
* Thu Jan 17 2019 Jiri Vanek <jvanek(a)redhat.com> - 2.0-4
- added depndence of procyon decompiler (currenlty under review
- added and applied Patch2, systemProcyon.patch to enable system procyon out of thebox
- added and applied Patch3, includeLambdas.patch to at least list lamdas untill fixed in
upstream
--------------------------------------------------------------------------------
================================================================================
jhead-3.03-1.fc29 (FEDORA-2019-e80c95ac61)
Tool for displaying EXIF data embedded in JPEG images
--------------------------------------------------------------------------------
Update Information:
updated to 3.03 (#1667491)
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 19 2019 Adrian Reber <adrian(a)lisas.de> - 3.03-1
- updated to 3.03 (#1667491)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1667491 - Update to jhead 3.03
https://bugzilla.redhat.com/show_bug.cgi?id=1667491
--------------------------------------------------------------------------------
================================================================================
network-manager-applet-1.8.18-3.fc29 (FEDORA-2019-64aa26db80)
A network control and status applet for NetworkManager
--------------------------------------------------------------------------------
Update Information:
wifi-dialog: fix widget hiding logic (bz #1665653)
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 19 2019 Beniamino Galvani <bgalvani(a)redhat.com> - 1.8.18-3
- wifi-dialog: fix widget hiding logic (rh #1665653)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1665653 - can't connect to wifi through specific device
https://bugzilla.redhat.com/show_bug.cgi?id=1665653
--------------------------------------------------------------------------------
================================================================================
numix-icon-theme-circle-0.1.0-18.20181201.git085899f.fc29 (FEDORA-2019-e5fc3da9ac)
Numix Project circle icon theme
--------------------------------------------------------------------------------
Update Information:
Update the release 18.12.01
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 18 2019 Brendan Early <mymindstorm1(a)gmail.com> -
0.1.0-18.20181201.git085899f
- Update to release 18.12.01
--------------------------------------------------------------------------------
================================================================================
numix-icon-theme-square-0.1.0-3.20181201.git70711c2.fc29 (FEDORA-2019-c1b321379e)
Numix Project square icon theme
--------------------------------------------------------------------------------
Update Information:
Update the release 18.12.01
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 18 2019 Brendan Early <mymindstorm1(a)gmail.com> -
0.1.0-3.20181201.git70711c2
- Update to release 18.12.01
--------------------------------------------------------------------------------
================================================================================
perl-Net-SSLeay-1.85-9.fc29 (FEDORA-2019-81fa598fb2)
Perl extension for using OpenSSL
--------------------------------------------------------------------------------
Update Information:
This update drops a build-time test that fails now that OpenSSL in Fedora 29 no
longer supports SSLv3.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Sep 29 2018 Paul Howarth <paul(a)city-fan.org> - 1.85-9
- OpenSSL 1.1.1 in Fedora disables SSL3 API, so stop trying to test it
--------------------------------------------------------------------------------
================================================================================
poedit-2.2.1-1.fc29 (FEDORA-2019-dd286b998f)
GUI editor for GNU gettext .po files
--------------------------------------------------------------------------------
Update Information:
New upstream version 2.2.1
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 15 2019 Wolfgang St��ggl <c72578(a)yahoo.de> - 2.2.1-1
- New upstream version
- Remove patches:
poedit-2.0.8-configure_ppc64_ppc64le.patch
poedit-2.2-fix_dark_mode_assert.patch
poedit-2.2-fix_wayland_incompatibility.patch
- Remove obsolete pixmaps/* from files
--------------------------------------------------------------------------------
================================================================================
sagemath-8.3-2.fc29 (FEDORA-2019-f51ce43c89)
A free open-source mathematics software system
--------------------------------------------------------------------------------
Update Information:
Changes in this update: - Reduce build time by removing buildroot prefixes
immediately after cython generates the files so they do not have be compiled
twice - Do not force the C locale when launching sagemath - Allow the user to
override SAGE_DEBUG in /usr/bin/sage - Fix interactions with ecm, giac, and
latte-integrale - Prevent crashes due to SIGFPEs caused by ecl messing with the
floating point context - Fix flask_autoindex and flask_openid imports in the
notebook - Add Education category to the desktop file (bz 1624545) - Fix
SINGULAR_SO variable in /usr/bin/sage (bz 1636759 and 1655248) - Invoke twistd-2
instead of twistd (bz 1640890) - Improve jupyter integration (bz 1663165) - Move
existing jupyter integration into the notebook subpackage - Require python-
jupyter-filesystem instead of owning its directories Note this update does NOT
fix
https://bugzilla.redhat.com/show_bug.cgi?id=1663158. That bug is caused by
python-entrypoints requiring a newer version of python-configparser than is
available in Fedora. This problem cannot be fixed by a sagemath update.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 19 2019 Jerry James <loganjerry(a)gmail.com> - 8.3-2
- Add -buildroot patch and only build cython interfaces once
- Drop LANGUAGES variable setting, now ignored by the sagemath build system
- Drop unused SAGE_CBLAS variable from /usr/bin/sage
- Do not force the C locale when launching sagemath
- Allow the user to override SAGE_DEBUG in /usr/bin/sage
- Add -ecm, -giac, and -latte patches to fix interactions with external tools
- Add -sigfpe patch from upstream
- Fix flask_autoindex and flask_openid imports in sagenb
- Add Education category to the desktop file (bz 1624545)
- Fix SINGULAR_SO variable in /usr/bin/sage (bz 1636759 and 1655248)
- Invoke twistd-2 instead of twistd (bz 1640890)
- Improve jupyter integration (bz 1663165)
- Move existing jupyter integration into the notebook subpackage
- Require python-jupyter-filesystem instead of owning its directories
- Drop one more remnant of the F24 to F25 upgrade fixup
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1663165 - Sagemath lack jupyter integration
https://bugzilla.redhat.com/show_bug.cgi?id=1663165
[ 2 ] Bug #1655248 - Unable to see Singular
https://bugzilla.redhat.com/show_bug.cgi?id=1655248
[ 3 ] Bug #1640890 - sagemath notebook() throw "No module named 'sagenb'
https://bugzilla.redhat.com/show_bug.cgi?id=1640890
[ 4 ] Bug #1636759 - sage does not start: libSingular not found
https://bugzilla.redhat.com/show_bug.cgi?id=1636759
[ 5 ] Bug #1624545 - SageMath: better desktop configuration files would be ideal
https://bugzilla.redhat.com/show_bug.cgi?id=1624545
--------------------------------------------------------------------------------
================================================================================
vips-8.6.5-3.fc29 (FEDORA-2019-4ccb5f9744)
C/C++ library for processing large images
--------------------------------------------------------------------------------
Update Information:
- Fix write of uninitialized memory under some error conditions
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 19 2019 Benjamin Gilbert <bgilbert(a)backtick.net> - 8.6.5-3
- Fix write of uninit memory under some error conditions
- Update package URLs
--------------------------------------------------------------------------------