The following Fedora 29 Security updates need testing:
Age URL
163
https://bodhi.fedoraproject.org/updates/FEDORA-2019-49f80a78bc
mingw-sqlite-3.26.0.0-1.fc29
144
https://bodhi.fedoraproject.org/updates/FEDORA-2019-fa5843e0e1
asterisk-16.2.1-1.fc29
130
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c84f291592
WALinuxAgent-2.2.38-1.fc29
125
https://bodhi.fedoraproject.org/updates/FEDORA-2019-7528388823
chicken-5.0.0-2.fc29
84
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9839aded3f
python-gnupg-0.4.4-1.fc29
80
https://bodhi.fedoraproject.org/updates/FEDORA-2019-35cb5a4785
kubernetes-1.13.5-1.fc29
74
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9454ce61b2
freeradius-3.0.19-3.fc29
47
https://bodhi.fedoraproject.org/updates/FEDORA-2019-cd8f4b9568
pam-u2f-1.0.8-1.fc29
18
https://bodhi.fedoraproject.org/updates/FEDORA-2019-32f7cd9b66
dosbox-0.74.3-2.fc29
14
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e61a85c2bb
calamares-3.2.11-1.fc29
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-60a1defcd1
python3-3.7.4-1.fc29 python3-docs-3.7.4-1.fc29
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d2cde4761e
libosinfo-1.2.0-8.fc29
11
https://bodhi.fedoraproject.org/updates/FEDORA-2019-1a87523729
squirrelmail-1.4.23-1.fc29.20190710
10
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3f5c670a8f
thunderbird-60.8.0-1.fc29
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-5409bb5e68
oniguruma-6.9.1-2.fc29
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-28a3675529
gnupg2-2.2.17-1.fc29
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-a1af621faf
chromium-75.0.3770.100-3.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e43f49b428
postgresql-10.9-1.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3d204785d5
libreoffice-6.1.6.3-2.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-da6be81bd3
libmspack-0.10.1-0.1.alpha.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e6b02af8b8 gvfs-1.38.3-1.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b6f0495f51 bind-9.11.8-1.fc29
bind-dyndb-ldap-11.1-17.fc29 dhcp-4.3.6-32.fc29 dnsperf-2.3.0-1.fc29
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-f27e187c76
java-latest-openjdk-12.0.2.9-1.rolling.fc29
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-5885663621
libssh2-1.9.0-1.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-75a6f3b711 squid-4.8-1.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-43a707d14f
kernel-5.1.19-200.fc29 kernel-headers-5.1.19-200.fc29
The following Fedora 29 Critical Path updates have yet to be approved:
Age URL
89
https://bodhi.fedoraproject.org/updates/FEDORA-2019-201c9dce0a
libXt-1.1.5-11.20190424gitba4ec9376.fc29
84
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d762a7ad70
kexec-tools-2.0.19-1.fc29
83
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e6d2bef148
python2-2.7.16-2.fc29
75
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e513e057d5
python-blivet-3.1.2-5.fc29
74
https://bodhi.fedoraproject.org/updates/FEDORA-2019-719c8264ca lorax-29.29-1.fc29
73
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3b38d20c4a
alsa-lib-1.1.9-1.fc29 alsa-plugins-1.1.9-1.fc29 alsa-utils-1.1.9-1.fc29
56
https://bodhi.fedoraproject.org/updates/FEDORA-2019-06a2d1c7fb
anaconda-29.24.7-3.fc29
54
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4cefd3161a
nfs-utils-2.3.3-4.rc2.fc29
41
https://bodhi.fedoraproject.org/updates/FEDORA-2019-137e67d3b8
python-mako-1.0.12-1.fc29
40
https://bodhi.fedoraproject.org/updates/FEDORA-2019-37faa13746
fontconfig-2.13.1-8.fc29
36
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9c557fd104
switcheroo-control-1.3.1-1.fc29
33
https://bodhi.fedoraproject.org/updates/FEDORA-2019-58753df163
kernel-5.1.12-200.fc29 kernel-headers-5.1.12-200.fc29 kernel-tools-5.1.12-200.fc29
27
https://bodhi.fedoraproject.org/updates/FEDORA-2019-583d9d5a56
mutter-3.30.2-3.fc29
20
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6579cf8565
net-snmp-5.8-10.fc29
16
https://bodhi.fedoraproject.org/updates/FEDORA-2019-952ea2e45b
highlight-3.52-1.fc29
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-60a1defcd1
python3-3.7.4-1.fc29 python3-docs-3.7.4-1.fc29
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6f13c38d0d
python-urllib3-1.24.3-2.fc29
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d2cde4761e
libosinfo-1.2.0-8.fc29
11
https://bodhi.fedoraproject.org/updates/FEDORA-2019-62e681b68b ipset-7.2-1.fc29
10
https://bodhi.fedoraproject.org/updates/FEDORA-2019-0b00516723
perl-threads-shared-1.59-2.fc29
10
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3f5c670a8f
thunderbird-60.8.0-1.fc29
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-28a3675529
gnupg2-2.2.17-1.fc29
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-775e6ef8de
libwebp-1.0.3-1.fc29 mingw-libwebp-1.0.3-1.fc29
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-35f47106d2
appstream-data-29-14.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b6f0495f51 bind-9.11.8-1.fc29
bind-dyndb-ldap-11.1-17.fc29 dhcp-4.3.6-32.fc29 dnsperf-2.3.0-1.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e6b02af8b8 gvfs-1.38.3-1.fc29
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-697821c525
glusterfs-5.8-1.fc29
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6d17b00236
linux-firmware-20190717-99.fc29
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-902bfc21b9
vim-8.1.1713-1.fc29
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-5885663621
libssh2-1.9.0-1.fc29
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8071724c9b
selinux-policy-3.14.2-63.fc29
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-221bb9e793
perl-5.28.2-433.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-43a707d14f
kernel-5.1.19-200.fc29 kernel-headers-5.1.19-200.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8016b5dca7
systemd-239-13.gitf4afb95.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d4419f5f1f pcre2-10.33-9.fc29
The following builds have been pushed to Fedora 29 updates-testing
ansible-freeipa-0.1.6-1.fc29
apachetop-0.19.7-1.fc29
cc65-2.18-8.fc29
dynafed-1.5.0-1.fc29
hostapd-2.8-1.fc29
lsp-plugins-1.1.10-1.fc29
lua-psl-0.3-2.fc29
mingw-jansson-2.12-1.fc29
mingw-speexdsp-1.2.0-1.fc29
mingw-yaml-cpp-0.6.2-1.fc29
proftpd-1.3.6-21.fc29
python-bitstring-3.1.6-1.fc29
python-operator-courier-2.1.3-1.fc29
rabbitmq-server-3.6.16-4.fc29
sqlite-3.26.0-4.fc29
swtpm-0.2.0-1.20190723gitf0b4137.fc29
udisks2-2.8.4-1.fc29
whois-5.5.0-1.fc29
Details about builds:
================================================================================
ansible-freeipa-0.1.6-1.fc29 (FEDORA-2019-be94f9c975)
Roles and playbooks to deploy FreeIPA servers, replicas and clients
--------------------------------------------------------------------------------
Update Information:
Update to version 0.1.6 - Lots of documentation updates in READMEs and
modules - library/ipaclient_get_otp: Enable force mode for host_add call
(fixes #74) - Flake8 and pylint reated fixes - Fixed wrong path to
CheckedIPAddress class in ipareplica_test - Remove unused
ipaserver/library/ipaserver.py - No not use wildcard imports for modules -
ipareplica: Add support for pki_config_override - ipareplica: Initialize
dns.ip_addresses and dns.reverse_zones for dns setup - ipareplica_prepare:
Properly initialize pin and cert_name variables - ipareplica: Fail with proper
error messages - ipaserver: Properly set settings related to pkcs12 files -
ipaclient: RawConfigParser is not always provided by six.moves.configparser -
ipaclient_setup_nss: paths.GETENT is not available before
freeipa-4.6.90.pre1 - ipaserver_test: Initialize value from options.zonemgr
- ipareplica_setup_custodia: create_replica only available in newer releases -
ipaclient: Fix typo in dnsok assignment for ipaclient_setup_nss -
ipa[server,replica]: Set _packages_adtrust for Ubuntu - New build script for
galaxy release - New utils script to update module docs
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 23 2019 Thomas Woerner <twoerner(a)redhat.com> - 0.1.6-1
- Update to version 0.1.6
- Lots of documentation updates in READMEs and modules
- library/ipaclient_get_otp: Enable force mode for host_add call (fixes #74)
- Flake8 and pylint reated fixes
- Fixed wrong path to CheckedIPAddress class in ipareplica_test
- Remove unused ipaserver/library/ipaserver.py
- No not use wildcard imports for modules
- ipareplica: Add support for pki_config_override
- ipareplica: Initialize dns.ip_addresses and dns.reverse_zones for dns setup
- ipareplica_prepare: Properly initialize pin and cert_name variables
- ipareplica: Fail with proper error messages
- ipaserver: Properly set settings related to pkcs12 files
- ipaclient: RawConfigParser is not always provided by six.moves.configparser
- ipaclient_setup_nss: paths.GETENT is not available before
freeipa-4.6.90.pre1
- ipaserver_test: Initialize value from options.zonemgr
- ipareplica_setup_custodia: create_replica only available in newer releases
- ipaclient: Fix typo in dnsok assignment for ipaclient_setup_nss
- ipa[server,replica]: Set _packages_adtrust for Ubuntu
- New build script for galaxy release
- New utils script to update module docs
--------------------------------------------------------------------------------
================================================================================
apachetop-0.19.7-1.fc29 (FEDORA-2019-e5ce168b05)
A top-like display of Apache logs
--------------------------------------------------------------------------------
Update Information:
ApacheTop 0.19.7 (20th July, 2019) ================================== *
attempt to find ncurses via `pkg-config` first * add `.editorconfig` for
consistent coding style
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 23 2019 Robert Scheck <robert(a)fedoraproject.org> - 0.19.7-1
- Upgrade to 0.19.7
--------------------------------------------------------------------------------
================================================================================
cc65-2.18-8.fc29 (FEDORA-2019-ecba24c412)
A free C compiler for 6502 based systems
--------------------------------------------------------------------------------
Update Information:
- Add a set of upstream patches to fix several minor bugs.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 22 2019 Bj��rn Esser <besser82(a)fedoraproject.org> - 2.18-8
- Add a set of upstream patches to fix several minor bugs
* Mon Jul 15 2019 Bj��rn Esser <besser82(a)fedoraproject.org> - 2.18-7
- Add two upstream patches for minor fixes
--------------------------------------------------------------------------------
================================================================================
dynafed-1.5.0-1.fc29 (FEDORA-2019-02fea3dbf7)
Ultra-scalable dynamic system for federating HTTP-based storage resources
--------------------------------------------------------------------------------
Update Information:
* new upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 15 2019 Andrea Manzi <andrea.manzi(a)cern.ch> - 1.5.0-1
- Upstream 1.5.0
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Wed Jan 30 2019 Jonathan Wakely <jwakely(a)redhat.com> - 1.4.0-2
- Rebuilt for Boost 1.69
--------------------------------------------------------------------------------
================================================================================
hostapd-2.8-1.fc29 (FEDORA-2019-d6bc3771a4)
IEEE 802.11 AP, IEEE 802.1X/WPA/WPA2/EAP/RADIUS Authenticator
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2019-11555 Update to version 2.8 from upstream Drop
obsoleted patches
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 15 2019 John W. Linville <linville(a)redhat.com> - 2.8-1
- Update to version 2.8 from upstream
- Drop obsoleted patches
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1703417 - CVE-2019-11555 wpa_supplicant: NULL pointer dereference due to
improper fragmentation reassembly state validation in EAP-pwd implementation
https://bugzilla.redhat.com/show_bug.cgi?id=1703417
--------------------------------------------------------------------------------
================================================================================
lsp-plugins-1.1.10-1.fc29 (FEDORA-2019-a0f707df84)
Linux Studio Plugins
--------------------------------------------------------------------------------
Update Information:
Update to 1.1.10.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 23 2019 Vasiliy Glazov <vascom2(a)gmail.com> - 1.1.10-1
- Update to 1.1.10
--------------------------------------------------------------------------------
================================================================================
lua-psl-0.3-2.fc29 (FEDORA-2019-f8414e777c)
Lua bindings to Public Suffix List library
--------------------------------------------------------------------------------
Update Information:
initial release of lua-psl package
--------------------------------------------------------------------------------
================================================================================
mingw-jansson-2.12-1.fc29 (FEDORA-2019-0cd56a1ca8)
C library for encoding, decoding and manipulating JSON data
--------------------------------------------------------------------------------
Update Information:
Initial MinGW packaging
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1726851 - Review Request: mingw-jansson - C library for encoding, decoding
and manipulating JSON data
https://bugzilla.redhat.com/show_bug.cgi?id=1726851
--------------------------------------------------------------------------------
================================================================================
mingw-speexdsp-1.2.0-1.fc29 (FEDORA-2019-247cde5289)
A voice compression format (DSP)
--------------------------------------------------------------------------------
Update Information:
Initial MinGW packaging
--------------------------------------------------------------------------------
================================================================================
mingw-yaml-cpp-0.6.2-1.fc29 (FEDORA-2019-918d57a588)
A YAML parser and emitter for C++
--------------------------------------------------------------------------------
Update Information:
Initial MinGW packaging
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1726863 - Review Request: mingw-yaml-cpp - A YAML parser and emitter for C++
https://bugzilla.redhat.com/show_bug.cgi?id=1726863
--------------------------------------------------------------------------------
================================================================================
proftpd-1.3.6-21.fc29 (FEDORA-2019-82b0f48691)
Flexible, stable and highly-configurable FTP server
--------------------------------------------------------------------------------
Update Information:
This update addresses an arbitrary file copy vulnerability in mod_copy in
ProFTPD, which allowed for remote code execution and information disclosure
without authentication due to not honoring `<Limit>` constraints. Upstream bug:
http://bugs.proftpd.org/show_bug.cgi?id=4372
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 23 2019 Paul Howarth <paul(a)city-fan.org> - 1.3.6-21
- An arbitrary file copy vulnerability in mod_copy in ProFTPD allowed for
remote code execution and information disclosure without authentication
(CVE-2019-12815)
http://bugs.proftpd.org/show_bug.cgi?id=4372
https://github.com/proftpd/proftpd/pull/816
* Sat Feb 2 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.6-20
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Mon Jan 14 2019 Bj��rn Esser <besser82(a)fedoraproject.org> - 1.3.6-19
- Rebuilt for libcrypt.so.2 (#1666033)
* Thu Sep 6 2018 Paul Howarth <paul(a)city-fan.org> - 1.3.6-18
- Switch from postgresql-devel to libpq-devel from Fedora 30 onwards
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1732365 - CVE-2019-12815 proftpd: file copy vulnerability in mod_copy allows
for remote code execution
https://bugzilla.redhat.com/show_bug.cgi?id=1732365
--------------------------------------------------------------------------------
================================================================================
python-bitstring-3.1.6-1.fc29 (FEDORA-2019-089f214c7c)
Simple construction, analysis and modification of binary data
--------------------------------------------------------------------------------
Update Information:
Update to 3.1.6. This is described as a "maintenance release" upstream.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 9 2019 Scott K Logan <logans(a)cottsay.net> - 3.1.6-1
- Update to 3.1.6
- Introduce Python 3 subpackage in EPEL
* Sat Feb 2 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.1.5-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Wed Oct 17 2018 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 3.1.5-7
- Subpackage python2-bitstring has been removed
See
https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1728037 - python-bitstring-3.1.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1728037
--------------------------------------------------------------------------------
================================================================================
python-operator-courier-2.1.3-1.fc29 (FEDORA-2019-8009d01596)
Library and CLI tool to build, verify and push operator metadata
--------------------------------------------------------------------------------
Update Information:
Latest upstream.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 23 2019 Ralph Bean <rbean(a)redhat.com> - 2.1.3-1
- new version
--------------------------------------------------------------------------------
================================================================================
rabbitmq-server-3.6.16-4.fc29 (FEDORA-2019-a5c0fee5fd)
The RabbitMQ server
--------------------------------------------------------------------------------
Update Information:
* Disable excessive coredumps during checking for EPMD in some corner cases
(OpenStack-related).
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 23 2019 Peter Lemenkov <lemenkov(a)gmail.com> - 3.6.16-4
- Disable erlang_crash.dump generation while checking for EPMD
--------------------------------------------------------------------------------
================================================================================
sqlite-3.26.0-4.fc29 (FEDORA-2019-3377813d18)
Library that implements an embeddable SQL database engine
--------------------------------------------------------------------------------
Update Information:
Fixed out of bounds heap read in function rtreenode() Enhance the rtreenode()
function of rtree (used for testing) so that it uses the newer sqlite3_str
object for better performance and improved error reporting.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 26 2019 Ondrej Dubaj <odubaj(a)redhat.com> - 3.26.0-4
- Fixed CVE-2019-8457 (#1719121)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1719121 - CVE-2019-8457 sqlite: sqlite3: heap out-of-bound read in function
rtreenode() [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1719121
--------------------------------------------------------------------------------
================================================================================
swtpm-0.2.0-1.20190723gitf0b4137.fc29 (FEDORA-2019-5504308ccf)
TPM Emulator
--------------------------------------------------------------------------------
Update Information:
follow stable-0.2.0 branch with some bug fixes ---- (tentative) v0.2.0 release
of swtpm
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 23 2019 Stefan Berger <stefanb(a)linux.ibm.com> -
0.2.0-1.20190723gitf0b4137
- follow stable-0.2.0 branch with some bug fixes
* Tue Jul 16 2019 Stefan Berger <stefanb(a)linux.ibm.com> -
0.2.0-0.20190716git374b669
- (tentative) v0.2.0 release of swtpm
--------------------------------------------------------------------------------
================================================================================
udisks2-2.8.4-1.fc29 (FEDORA-2019-ae2aef8fb8)
Disk Manager
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release 2.8.4.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 22 2019 Tomas Bzatek <tbzatek(a)redhat.com> - 2.8.4-1
- Version 2.8.4
* Thu Jun 13 2019 Tomas Bzatek <tbzatek(a)redhat.com> - 2.8.3-1
- Version 2.8.3
* Fri Mar 15 2019 Debarshi Ray <rishi(a)fedoraproject.org> - 2.8.2-2
- Update for tmpfiles.d snippet
--------------------------------------------------------------------------------
================================================================================
whois-5.5.0-1.fc29 (FEDORA-2019-b1d72eef5c)
Improved WHOIS client
--------------------------------------------------------------------------------
Update Information:
This release updates a list of RIPE WHOIS servers, adds reclaimed IPv4 blocks,
and updates a record for zm. TLD. A new -I option was added to whois tool to
enable looking up for a delegated RIR WHOIS server. mkpasswd tool supports GOST
algorithm now.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 23 2019 Petr Pisar <ppisar(a)redhat.com> - 5.5.0-1
- 5.5.0 bump
--------------------------------------------------------------------------------