The following Fedora 29 Security updates need testing:
Age URL
149
https://bodhi.fedoraproject.org/updates/FEDORA-2019-49f80a78bc
mingw-sqlite-3.26.0.0-1.fc29
130
https://bodhi.fedoraproject.org/updates/FEDORA-2019-fa5843e0e1
asterisk-16.2.1-1.fc29
116
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c84f291592
WALinuxAgent-2.2.38-1.fc29
111
https://bodhi.fedoraproject.org/updates/FEDORA-2019-7528388823
chicken-5.0.0-2.fc29
70
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9839aded3f
python-gnupg-0.4.4-1.fc29
66
https://bodhi.fedoraproject.org/updates/FEDORA-2019-35cb5a4785
kubernetes-1.13.5-1.fc29
60
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9454ce61b2
freeradius-3.0.19-3.fc29
42
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4c71ff167a mutt-1.12.0-1.fc29
35
https://bodhi.fedoraproject.org/updates/FEDORA-2019-1b61a528dd
dovecot-2.3.6-3.fc29
33
https://bodhi.fedoraproject.org/updates/FEDORA-2019-cd8f4b9568
pam-u2f-1.0.8-1.fc29
15
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c8c0d441bf
thunderbird-60.7.2-2.fc29
11
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e612286002
radare2-3.6.0-1.fc29
11
https://bodhi.fedoraproject.org/updates/FEDORA-2019-139fcda84d expat-2.2.7-1.fc29
11
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8d98e2633a
chromium-75.0.3770.100-2.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-7df59302e0
python36-3.6.9-1.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8966706e33 libldb-1.4.7-1.fc29
samba-4.9.11-0.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-32f7cd9b66
dosbox-0.74.3-2.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e61a85c2bb
calamares-3.2.11-1.fc29
The following Fedora 29 Critical Path updates have yet to be approved:
Age URL
76
https://bodhi.fedoraproject.org/updates/FEDORA-2019-201c9dce0a
libXt-1.1.5-11.20190424gitba4ec9376.fc29
70
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d762a7ad70
kexec-tools-2.0.19-1.fc29
69
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e6d2bef148
python2-2.7.16-2.fc29
61
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e513e057d5
python-blivet-3.1.2-5.fc29
60
https://bodhi.fedoraproject.org/updates/FEDORA-2019-719c8264ca lorax-29.29-1.fc29
59
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3b38d20c4a
alsa-lib-1.1.9-1.fc29 alsa-plugins-1.1.9-1.fc29 alsa-utils-1.1.9-1.fc29
42
https://bodhi.fedoraproject.org/updates/FEDORA-2019-06a2d1c7fb
anaconda-29.24.7-3.fc29
40
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4cefd3161a
nfs-utils-2.3.3-4.rc2.fc29
28
https://bodhi.fedoraproject.org/updates/FEDORA-2019-137e67d3b8
python-mako-1.0.12-1.fc29
28
https://bodhi.fedoraproject.org/updates/FEDORA-2019-1623b3a6c7
osinfo-db-20190611-1.fc29
27
https://bodhi.fedoraproject.org/updates/FEDORA-2019-37faa13746
fontconfig-2.13.1-8.fc29
22
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9c557fd104
switcheroo-control-1.3.1-1.fc29
22
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9b58ce0731
vim-8.1.1561-1.fc29
22
https://bodhi.fedoraproject.org/updates/FEDORA-2019-55be013e5c
libbluray-1.1.2-1.fc29
20
https://bodhi.fedoraproject.org/updates/FEDORA-2019-58753df163
kernel-5.1.12-200.fc29 kernel-headers-5.1.12-200.fc29 kernel-tools-5.1.12-200.fc29
20
https://bodhi.fedoraproject.org/updates/FEDORA-2019-48e5c2afa5
linux-firmware-20190618-97.fc29
20
https://bodhi.fedoraproject.org/updates/FEDORA-2019-096a80ef39
selinux-policy-3.14.2-61.fc29
15
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c8c0d441bf
thunderbird-60.7.2-2.fc29
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-583d9d5a56
mutter-3.30.2-3.fc29
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-05496c236e
squashfs-tools-4.3-21.fc29
11
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4448e01a41
createrepo_c-0.14.2-1.fc29
11
https://bodhi.fedoraproject.org/updates/FEDORA-2019-139fcda84d expat-2.2.7-1.fc29
11
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6d7c278c3a
hwdata-0.325-1.fc29
11
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8fc0de507e dnf-4.2.5-2.fc29
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-7ee12c4d8f
pungi-4.1.38-1.fc29
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-de7a6aec17 xen-4.11.2-1.fc29
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-0e0464252c
gnupg2-2.2.16-1.fc29
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6579cf8565
net-snmp-5.8-10.fc29
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-0f3d77c500
librepo-1.10.2-2.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8966706e33 libldb-1.4.7-1.fc29
samba-4.9.11-0.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-7eabf18cbc nss-3.44.1-1.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e551fe2217
libbytesize-2.1-1.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-db58172e05
libreport-2.10.1-1.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4ba0a06434 pcre2-10.33-6.fc29
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-cf0463b5e1 sssd-2.2.0-3.fc29
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d84ff2fe9f
glusterfs-5.7-1.fc29
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-952ea2e45b
highlight-3.52-1.fc29
The following builds have been pushed to Fedora 29 updates-testing
ansible-freeipa-0.1.5-2.fc29
cros-guest-tools-1.0-0.14.20190703gita30bd3e.fc29
fedfind-4.2.6-1.fc29
freetds-1.1.11-1.fc29
gsequencer-2.2.17-0.fc29
php-netresearch-jsonmapper-1.5.1-1.fc29
podman-1.4.4-2.fc29
python-urllib3-1.24.3-2.fc29
python3-3.7.4-1.fc29
python3-docs-3.7.4-1.fc29
snownews-1.5.12-20.fc29
virt-bootstrap-1.1.1-1.fc29
xe-guest-utilities-7.12.0-1.fc29
Details about builds:
================================================================================
ansible-freeipa-0.1.5-2.fc29 (FEDORA-2019-e200886e58)
Roles and playbooks to deploy FreeIPA servers, replicas and clients
--------------------------------------------------------------------------------
Update Information:
Update to ansible-freeipa 0.1.5 with lots of enhancements and fixes.
https://github.com/freeipa/ansible-freeipa/ Release information:
https://github.com/freeipa/ansible-freeipa/releases ---- New ansible-freeipa
package providing roles and playbooks to deploy FreeIPA servers, replicas and
clients
--------------------------------------------------------------------------------
================================================================================
cros-guest-tools-1.0-0.14.20190703gita30bd3e.fc29 (FEDORA-2019-ba249139d2)
Chromium OS integration meta package
--------------------------------------------------------------------------------
Update Information:
Update to master a30bd3e.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 9 2019 Jason Montleon jmontleo(a)redhat.com 1.0-0.14.20190703gita30bd3e
- Removed cros-gpu and workaround services.
- Added an Environment setting to sommelier-x service to get it working instead
* Sun Jul 7 2019 Jason Montleon jmontleo(a)redhat.com 1.0-0.13.20190703gita30bd3e
- Added cros-gpu package with service to work around 3d acceleration issues.
* Wed Jul 3 2019 Jason Montleon jmontleo(a)redhat.com 1.0-0.12.20190703gita30bd3e
- Updated to master a30bd3e
- Removed tsched=0 fix. This is now default upstream
--------------------------------------------------------------------------------
================================================================================
fedfind-4.2.6-1.fc29 (FEDORA-2019-e137f9cc87)
Fedora compose and image finder
--------------------------------------------------------------------------------
Update Information:
This new release of fedfind contains a single change. The regex used to identify
respin release images is updated to match the current name format. This fixes
fedfind so it is once again able to find these "releases". (The author would be
happy if the respin maintainer would stop changing the darn name format on a
whim).
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 9 2019 Adam Williamson <awilliam(a)redhat.com> - 4.2.6-1
- New release 4.2.6: update the respin image regex, again
--------------------------------------------------------------------------------
================================================================================
freetds-1.1.11-1.fc29 (FEDORA-2019-14d102033e)
Implementation of the TDS (Tabular DataStream) protocol
--------------------------------------------------------------------------------
Update Information:
Upgrade to 1.1.11
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 9 2019 Dmitry Butskoy <Dmitry(a)Butskoy.name> - 1.1.11-1
- Upgrade to 1.1.11 (#1728191)
* Sun Feb 17 2019 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 1.00.38-8
- Rebuild for readline 8.0
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.00.38-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1728191 - Private bug
https://bugzilla.redhat.com/show_bug.cgi?id=1728191
--------------------------------------------------------------------------------
================================================================================
gsequencer-2.2.17-0.fc29 (FEDORA-2019-56fcb6d1ce)
Audio processing engine
--------------------------------------------------------------------------------
Update Information:
updated Source to point to new minor version directory ---- updated Source to
point to new minor version directory
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
php-netresearch-jsonmapper-1.5.1-1.fc29 (FEDORA-2019-5080b7e224)
Map nested JSON structures onto PHP classes
--------------------------------------------------------------------------------
Update Information:
**Version 1.5.1** - 2019-07-08 * Fix support for "mixed" in namespaced classes
---- **Version 1.5.0** - 2019-07-07 * Add support for PHP 7 scalar type hints
(issue #98) by @patrickallaert * Add support for namespaced classes in
classMap keys without backslash (issue #111) * Throw exception when an object
shall be converted into a string (pull request #106) by @m1ke * Throw
exception when an object is passed as value into a string array (pull request
#107) by @m1ke * Correctly support setting private properties defined in
parent classes (issue #109) * Use class map as early as possible (issues #96 and
#122)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 9 2019 Remi Collet <remi(a)remirepo.net> - 1.5.1-1
- update to 1.5.1
* Mon Jul 8 2019 Remi Collet <remi(a)remirepo.net> - 1.5.0-1
- update to 1.5.0
--------------------------------------------------------------------------------
================================================================================
podman-1.4.4-2.fc29 (FEDORA-2019-cd5786f7a7)
Manage Pods, Containers and Container Images
--------------------------------------------------------------------------------
Update Information:
add runtime depend for libssecomp
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 8 2019 bbaude <bbaude(a)redhat.com> - 2:1.4.4-2
- add runtime depend for libssecomp
* Tue Jul 2 2019 bbaude <bbaude(a)redhat.com> - 2:1.4.4-1
- Bump to v1.4.4
* Wed Jun 26 2019 Dan Walsh <dwalsh(a)redhat.com> - 2:1.4.3-1
- Bump to v1.4.3
--------------------------------------------------------------------------------
================================================================================
python-urllib3-1.24.3-2.fc29 (FEDORA-2019-6f13c38d0d)
Python HTTP library with thread-safe connection pooling and file post
--------------------------------------------------------------------------------
Update Information:
Update the RECENT_DATE for detecting system clock problems in TLS verification.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 8 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 1.24.3-2
- Set RECENT_DATE not to be older than 2 years (#1727796)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1727796 - python-urllib3 fails to build: Too old
urllib3.connection.RECENT_DATE
https://bugzilla.redhat.com/show_bug.cgi?id=1727796
--------------------------------------------------------------------------------
================================================================================
python3-3.7.4-1.fc29 (FEDORA-2019-60a1defcd1)
Interpreter of the Python programming language
--------------------------------------------------------------------------------
Update Information:
[Python
3.7.4](https://www.python.org/downloads/release/python-374/) is the
fourth and most recent maintenance release of Python 3.7. [Changelog for
final](https://docs.python.org/3.7/whatsnew/changelog.html#python-3-7-4-f...,
[3.7.4 release candidate
2](https://docs.python.org/3.7/whatsnew/changelog.html#python-3-7-4-release-
candidate-2) and [3.7.4 release candidate
1](https://docs.python.org/3.7/whatsnew/changelog.html#python-3-7-4-release-
candidate-1). Contains security fixes for CVE-2019-9948 and CVE-2019-10160.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 9 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 3.7.4-1
- Update to 3.7.4
* Tue Jul 2 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 3.7.4~rc2-1
- Update to 3.7.4rc2
* Tue Jun 25 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 3.7.4~rc1-1
- Update to 3.7.4rc1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1718388 - CVE-2019-10160 python: regression of CVE-2019-9636 due to
functional fix to allow port numbers in netloc
https://bugzilla.redhat.com/show_bug.cgi?id=1718388
[ 2 ] Bug #1695570 - CVE-2019-9948 python: undocumented local_file protocol allows
remote attackers to bypass protection mechanisms
https://bugzilla.redhat.com/show_bug.cgi?id=1695570
--------------------------------------------------------------------------------
================================================================================
python3-docs-3.7.4-1.fc29 (FEDORA-2019-60a1defcd1)
Documentation for the Python 3 programming language
--------------------------------------------------------------------------------
Update Information:
[Python
3.7.4](https://www.python.org/downloads/release/python-374/) is the
fourth and most recent maintenance release of Python 3.7. [Changelog for
final](https://docs.python.org/3.7/whatsnew/changelog.html#python-3-7-4-f...,
[3.7.4 release candidate
2](https://docs.python.org/3.7/whatsnew/changelog.html#python-3-7-4-release-
candidate-2) and [3.7.4 release candidate
1](https://docs.python.org/3.7/whatsnew/changelog.html#python-3-7-4-release-
candidate-1). Contains security fixes for CVE-2019-9948 and CVE-2019-10160.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 9 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 3.7.4-1
- Update to 3.7.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1718388 - CVE-2019-10160 python: regression of CVE-2019-9636 due to
functional fix to allow port numbers in netloc
https://bugzilla.redhat.com/show_bug.cgi?id=1718388
[ 2 ] Bug #1695570 - CVE-2019-9948 python: undocumented local_file protocol allows
remote attackers to bypass protection mechanisms
https://bugzilla.redhat.com/show_bug.cgi?id=1695570
--------------------------------------------------------------------------------
================================================================================
snownews-1.5.12-20.fc29 (FEDORA-2019-b6db528251)
A text mode RSS/RDF newsreader
--------------------------------------------------------------------------------
Update Information:
This release fixes building this package.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 9 2019 Petr Pisar <ppisar(a)redhat.com> - 1.5.12-20
- Build with openssl-1.0.2 (bug #1606839)
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5.12-19
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5.12-18
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Thu Aug 3 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5.12-17
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Thu Jul 27 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5.12-16
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1606839 - snownews: FTBFS in Fedora ��� 29: conversions.c:621:13: error:
storage size of 'mdctx' isn't known
https://bugzilla.redhat.com/show_bug.cgi?id=1606839
--------------------------------------------------------------------------------
================================================================================
virt-bootstrap-1.1.1-1.fc29 (FEDORA-2019-e465ec0651)
System container rootfs creation tool
--------------------------------------------------------------------------------
Update Information:
Update to new upstream release: 1.1.1 Security fix for CVE-2019-13314
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 9 2019 Fabiano Fid��ncio <fabiano(a)fidencio.org> - 1.1.1-1
- Update to new upstream release: 1.1.1
- Resolves: rhbz#1727771
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1727770 - CVE-2019-13314 virt-bootstrap: allows local users to discover root
password via process listing
https://bugzilla.redhat.com/show_bug.cgi?id=1727770
--------------------------------------------------------------------------------
================================================================================
xe-guest-utilities-7.12.0-1.fc29 (FEDORA-2019-b43adc0da0)
XAPI Virtual Machine Monitoring Scripts
--------------------------------------------------------------------------------
Update Information:
Scripts for monitoring XAPI project virtual machine.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1707711 - Review Request: xe-guest-utilities - XAPI Virtual Machine
Monitoring Scripts
https://bugzilla.redhat.com/show_bug.cgi?id=1707711
--------------------------------------------------------------------------------