The following Fedora 29 Security updates need testing:
Age URL
20
https://bodhi.fedoraproject.org/updates/FEDORA-2018-51ce232320
xerces-c27-2.7.0-28.fc29
15
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9cdbb641f9
mod_http2-1.11.1-1.fc29
15
https://bodhi.fedoraproject.org/updates/FEDORA-2018-06116a0f7f
openvswitch-2.10.0-1.fc29
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-672c028631
sos-collector-1.5-3.fc29
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6fa1017c1d
python-django-2.0.9-1.fc29
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-89a3999673
rpm-4.14.2.1-1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5702dc9bdf
teeworlds-0.6.5-1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-06d56c8c9d
lldpad-1.0.1-12.git036e314.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7734354526
libarchive-3.3.3-1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-369ab0efc9
java-11-openjdk-11.0.1.13-1.fc29
The following Fedora 29 Critical Path updates have yet to be approved:
Age URL
44
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7a207f18aa sudo-1.8.25-1.fc29
15
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ea93149b97
iio-sensor-proxy-2.5-1.fc29
12
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1b45275249
libosinfo-1.2.0-5.fc29
12
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ed27f1c5c4
osinfo-db-20181011-1.fc29
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-87016c10b0 lorax-29.19-1.fc29
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-17567f45a5
pungi-4.1.29-3.fc29
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f678399231
yum-utils-1.1.31-518.fc29
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8d6bf13e5c
xorg-x11-drv-ati-18.1.0-1.fc29
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7407e04b27
kernel-headers-4.18.15-300.fc29 kernel-tools-4.18.15-300.fc29 kernel-4.18.15-300.fc29
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-aee5f83cfb vim-8.1.483-1.fc29
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5be740cab4
openssh-7.9p1-1.fc29
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-efe5c1eea0 opus-1.3-1.fc29
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-76ba6cb081
glusterfs-5.0-1.fc29
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7be27ff1d8
asterisk-16.0.0-1.fc29 getdns-1.4.2-4.fc29 gnutls-3.6.4-4.fc29 libreswan-3.27-1.fc29
netresolve-0.0.1-0.22.20160317git.fc29 unbound-1.8.1-1.fc29
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-fef9d9176e qt-4.8.7-44.fc29
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-888b752f06
libtasn1-4.13-5.fc29
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-89a3999673
rpm-4.14.2.1-1.fc29
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8838c72162
cairo-1.16.0-1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7734354526
libarchive-3.3.3-1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-099adf1f84
lxde-common-0.99.2-6.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-06d56c8c9d
lldpad-1.0.1-12.git036e314.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b5a870dcff
libappstream-glib-0.7.14-2.fc29 gnome-software-3.30.5-1.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3eebae99eb
libinput-1.12.2-1.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4814c56802
alsa-lib-1.1.7-2.fc29 alsa-plugins-1.1.7-2.fc29 alsa-tools-1.1.7-2.fc29
alsa-utils-1.1.7-2.fc29
The following builds have been pushed to Fedora 29 updates-testing
ansible-lint-3.4.23-7.fc29
collectd-5.8.1-1.fc29
dracut-049-11.git20181024.fc29
gfal2-python-1.9.5-1.fc29
gnome-boxes-3.30.2-1.fc29
golang-github-mattn-go-sqlite3-1.9.0-1.fc29
gsi-openssh-7.9p1-1.fc29
gxemul-0.6.0.2-1.fc29
jbigkit-2.1-15.fc29
lollypop-0.9.609-1.fc29
opam-2.0.0-0.12.rc.fc29
python3-3.7.1-1.fc29
qt5-qtbase-5.11.1-8.fc29
ravada-0.3.1-1.fc29
salt-2018.3.3-1.fc29
slurm-17.11.12-1.fc29
sssd-2.0.0-4.fc29
sugar-0.112-5.fc29
traverso-0.49.5-1.fc29
xorgxrdp-0.2.8-2.fc29
Details about builds:
================================================================================
ansible-lint-3.4.23-7.fc29 (FEDORA-2018-f3732e4361)
Best practices checker for Ansible
--------------------------------------------------------------------------------
Update Information:
Add back Provides: ansible-lint ---- Fix the upgrade path (rh#1634352)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 25 2018 Parag Nemade <pnemade AT redhat DOT com> - 3.4.23-7
- Add back Provides: ansible-lint
* Sun Oct 7 2018 Parag Nemade <pnemade AT redhat DOT com> - 3.4.23-6
- Fix the upgrade path (rh#1634352)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1634352 - python3-ansible-lint should replace python2-ansible-lint when
upgrading from F28 to F29
https://bugzilla.redhat.com/show_bug.cgi?id=1634352
--------------------------------------------------------------------------------
================================================================================
collectd-5.8.1-1.fc29 (FEDORA-2018-b61ee55c91)
Statistics collection daemon for filling RRD files
--------------------------------------------------------------------------------
Update Information:
Upstream released new version
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 24 2018 Ruben Kerkhof <ruben(a)rubenkerkhof.com> - 5.8.1-1
- Upstream released new version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1593460 - collectd-5.8.0 has a regression breaking udev support for disk
plugin [patch provided]
https://bugzilla.redhat.com/show_bug.cgi?id=1593460
--------------------------------------------------------------------------------
================================================================================
dracut-049-11.git20181024.fc29 (FEDORA-2018-cf5015ab11)
Initramfs generator using udev
--------------------------------------------------------------------------------
Update Information:
- various bugfixes and improvements - fixes device timeouts for iSCSI with
resume= on the kernel cmdline
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 24 2018 Harald Hoyer <harald(a)redhat.com> - 049-11.git20181024
- git snapshot
* Wed Oct 10 2018 Harald Hoyer <harald(a)redhat.com> - 049-4.git20181010
- fixed spec file
- git snapshot
* Mon Oct 8 2018 Harald Hoyer <harald(a)redhat.com> - 049-1
- version 049
* Fri Sep 21 2018 Harald Hoyer <harald(a)redhat.com> - 048-99.git20180921
- git snapshot
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1641268 - dracut-network: iscsi module causes device timeout on boots with
resume= cmdline arg
https://bugzilla.redhat.com/show_bug.cgi?id=1641268
--------------------------------------------------------------------------------
================================================================================
gfal2-python-1.9.5-1.fc29 (FEDORA-2018-1f97b5c007)
Python bindings for gfal 2
--------------------------------------------------------------------------------
Update Information:
* new upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 25 2018 Andrea Manzi <amanzi(a)cern.ch> - 1.9.5-2
- Update for release 1.9.5
--------------------------------------------------------------------------------
================================================================================
gnome-boxes-3.30.2-1.fc29 (FEDORA-2018-fef7f7957f)
A simple GNOME 3 application to access remote or virtual systems
--------------------------------------------------------------------------------
Update Information:
Update to 3.30.2
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 24 2018 Felipe Borges <feborges(a)redhat.com> - 3.30.2-1
- Update to 3.30.2
* Wed Oct 10 2018 Cole Robinson <crobinso(a)redhat.com> - 3.30.1-2.1
- Re-enable 'default' network dep for F29 GA, see bz 1164492#c71
--------------------------------------------------------------------------------
================================================================================
golang-github-mattn-go-sqlite3-1.9.0-1.fc29 (FEDORA-2018-5a63d6fc80)
Sqlite3 driver for go that using database/sql
--------------------------------------------------------------------------------
Update Information:
Release 1.9.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 24 2018 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.9.0-1
- Release 1.9.0
- Fixes #1508415 and #1636247
* Tue Oct 23 2018 Nicolas Mailhot <nim(a)fedoraproject.org> - 1.0.0-12
- redhat-rpm-config-123 triggers bugs in gosetup, remove it from Go spec files as it���s
just an alias
-
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.o...
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1508415 - golang-github-mattn-go-sqlite3-v1.9.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1508415
[ 2 ] Bug #1636247 - fatal error: code/sqlite3-binding.h: No such file or directory
https://bugzilla.redhat.com/show_bug.cgi?id=1636247
--------------------------------------------------------------------------------
================================================================================
gsi-openssh-7.9p1-1.fc29 (FEDORA-2018-f61e811486)
An implementation of the SSH protocol with GSI authentication
--------------------------------------------------------------------------------
Update Information:
Sync with openssh package.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 23 2018 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 7.9p1-1
- Based on openssh-7.9p1-1.fc29
* Tue Oct 23 2018 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 7.8p1-1
- Based on openssh-7.8p1-3.fc28
--------------------------------------------------------------------------------
================================================================================
gxemul-0.6.0.2-1.fc29 (FEDORA-2018-0f7d5c2bb7)
Instruction-level machine emulator
--------------------------------------------------------------------------------
Update Information:
Update to 0.6.0.2.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 24 2018 Tom Callaway <spot(a)fedoraproject.org> - 0.6.0.2-1
- update to 0.6.0.2
--------------------------------------------------------------------------------
================================================================================
jbigkit-2.1-15.fc29 (FEDORA-2018-bc422da332)
JBIG1 lossless image compression tools
--------------------------------------------------------------------------------
Update Information:
fixed typo found by coverity
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 25 2018 Zdenek Dohnal <zdohnal(a)redhat.com> - 2.1-15
- fixed typo found by coverity
--------------------------------------------------------------------------------
================================================================================
lollypop-0.9.609-1.fc29 (FEDORA-2018-d0a5db3549)
Music player for GNOME
--------------------------------------------------------------------------------
Update Information:
Update to 0.9.609 ---- Update to 0.9.608
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 25 2018 Martin Gansser <martinkg(a)fedoraproject.org> - 0.9.609-1
- Update to 0.9.609
* Thu Oct 25 2018 Martin Gansser <martinkg(a)fedoraproject.org> - 0.9.608-1
- Update to 0.9.608
* Mon Oct 22 2018 Martin Gansser <martinkg(a)fedoraproject.org> - 0.9.607-1
- Update to 0.9.607
* Fri Oct 19 2018 Martin Gansser <martinkg(a)fedoraproject.org> - 0.9.605-1
- Update to 0.9.605
* Mon Oct 8 2018 Martin Gansser <martinkg(a)fedoraproject.org> - 0.9.604-1
- Update to 0.9.604
* Sun Oct 7 2018 Martin Gansser <martinkg(a)fedoraproject.org> - 0.9.602-1
- Update to 0.9.602
--------------------------------------------------------------------------------
================================================================================
opam-2.0.0-0.12.rc.fc29 (FEDORA-2018-7d1a5918bc)
Source-based package manager for OCaml
--------------------------------------------------------------------------------
Update Information:
Add requires on make and m4 for opam init setup. ---- Add Requires on gcc so
that opam init works properly (rhbz#1631969). ---- Add missing Requires on
patch, unzip (rhbz#1631969).
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 24 2018 Ben Rosser <rosser.bjr(a)gmail.com> - 2.0.0-0.12.rc
- Add requires on make and m4 for opam init setup.
* Tue Oct 2 2018 Ben Rosser <rosser.bjr(a)gmail.com> - 2.0.0-0.11.rc
- Add Requires on gcc so that opam init works properly (rhbz#1631969).
* Sat Sep 22 2018 Ben Rosser <rosser.bjr(a)gmail.com> - 2.0.0-0.10.rc
- Add missing Requires on patch, unzip (rhbz#1631969).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1631969 - opam missing dependencies: patch and unzip
https://bugzilla.redhat.com/show_bug.cgi?id=1631969
--------------------------------------------------------------------------------
================================================================================
python3-3.7.1-1.fc29 (FEDORA-2018-9860917db0)
Interpreter of the Python programming language
--------------------------------------------------------------------------------
Update Information:
Update to 3.7.1, Security fix for CVE-2018-14647
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 22 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 3.7.1-1
- Update to 3.7.1
* Thu Sep 27 2018 Petr Viktorin <pviktori(a)redhat.com> - 3.7.0-10
- Compile the debug build with -Og rather than -O0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1631822 - CVE-2018-14647 python: Missing salt initialization in
_elementtree.c module
https://bugzilla.redhat.com/show_bug.cgi?id=1631822
--------------------------------------------------------------------------------
================================================================================
qt5-qtbase-5.11.1-8.fc29 (FEDORA-2018-1fdfed503a)
Qt5 - QtBase components
--------------------------------------------------------------------------------
Update Information:
Avoid using gold linker, avoids duplicate symbol errors.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 24 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 5.11.1-8
- (branch) -no-use-gold-linker (#1635973)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1635973 - Linker failure with duplicate symbols
https://bugzilla.redhat.com/show_bug.cgi?id=1635973
--------------------------------------------------------------------------------
================================================================================
ravada-0.3.1-1.fc29 (FEDORA-2018-8e48460a72)
Remote Virtual Desktops Manager
--------------------------------------------------------------------------------
Update Information:
Release 0.3.1 ---- Release 0.3.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 24 2018 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.3.1-1
- Release 0.3.1
* Thu Oct 18 2018 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.3.0-1
- Release 0.3.0
--------------------------------------------------------------------------------
================================================================================
salt-2018.3.3-1.fc29 (FEDORA-2018-378feb1129)
A parallel remote execution system
--------------------------------------------------------------------------------
Update Information:
Update to feature release 2018.3.3-1 for Python 2
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 15 2018 SaltStack Packaging Team <packaging(a)Ch3LL.com> - 2018.3.3-1
- Update to feature release 2018.3.3-1 for Python 2
- Revised versions of cherrypy acceptable
--------------------------------------------------------------------------------
================================================================================
slurm-17.11.12-1.fc29 (FEDORA-2018-3aef5ebf35)
Simple Linux Utility for Resource Management
--------------------------------------------------------------------------------
Update Information:
Release of 17.11.12
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 24 2018 Philip Kovacs <pkdevel(a)yahoo.com> - 17.11.12-1
- Release of 17.11.12
* Sat Oct 20 2018 Philip Kovacs <pkdevel(a)yahoo.com> - 17.11.11-1
- Release of 17.11.11
* Thu Oct 11 2018 Yu Watanabe <watanabe.yu(a)gmail.com> - 17.11.10-1
- Release of 17.11.10
* Fri Sep 28 2018 Philip Kovacs <pkdevel(a)yahoo.com> - 17.11.9-2
- Release of 17.11.9-2 (new upstream tarball)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1642730 - Release of 17.11.12
https://bugzilla.redhat.com/show_bug.cgi?id=1642730
--------------------------------------------------------------------------------
================================================================================
sssd-2.0.0-4.fc29 (FEDORA-2018-6b9c9c4f85)
System Security Services Daemon
--------------------------------------------------------------------------------
Update Information:
Resolves: upstream#3821 - crash related to sbus_router_destructor() Resolves:
upstream#3810 - sbus2: fix memory leak in sbus_message_bound_ref Resolves:
upstream#3819 - sssd only sets the SELinux login context if it differs from the
default Resolves: upstream#3807 - The sbus codegen script relies on "python"
which might not be available on all distributions Resolves: upstream#3820 -
sudo: search with lower cased name for case insensitive domains Resolves:
upstream#3701 - [RFE] Allow changing default behavior of SSSD from an allow-any
default to a deny-any default when it can't find any GPOs to apply to a user
login. Resolves: upstream#3828 - Invalid domain provider causes SSSD to abort
startup Resolves: upstream#3500 - Make sure sssd is a replacement for
pam_pkcs11 also for local account authentication Resolves: upstream#3812 - sssd
2.0.0 segfaults on startup Resolves: upstream#3826 - Remove references of
sss_user/group/add/del commands in man pages since local provider is deprecated
Resolves: upstream#3827 - SSSD should log to syslog if a domain is not started
due to a misconfiguration Resolves: upstream#3830 - Printing incorrect
information about domain with sssctl utility Resolves: upstream#3489 -
p11_child should work wit openssl1.0+ Resolves: upstream#3750 - [RFE] man 5
sssd-files should mention necessary changes in nsswitch.conf Resovles:
upstream#3650 - RFE: Require smartcard authentication Resolves: upstream#3334 -
sssctl config-check does not check any special characters in domain name of
domain section Resolves: upstream#3849 - Files: The files provider always
enumerates which causes duplicate when running getent passwd Related:
upstream#3855 - session not recording for local user when groups defined
Resolves: upstream#3802 - Reuse sysdb_error_to_errno() outside sysdb Related:
upstream#3493 - Remove the pysss.local interface
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
sugar-0.112-5.fc29 (FEDORA-2018-098f17b382)
Constructionist learning platform
--------------------------------------------------------------------------------
Update Information:
Fix Network Control panel
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 25 2018 Peter Robinson <pbrobinson(a)fedoraproject.org> 0.112-5
- Fix Network Control panel
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1642828 - Sugar network control panel broken due to deprecation of NM-glib
https://bugzilla.redhat.com/show_bug.cgi?id=1642828
--------------------------------------------------------------------------------
================================================================================
traverso-0.49.5-1.fc29 (FEDORA-2018-ca93a0e10e)
Multitrack Audio Recording and Editing Suite
--------------------------------------------------------------------------------
Update Information:
Multitrack Audio Recording and Editing Suite. Qt5 GUI. Previously was at
rpmfusion repo.
--------------------------------------------------------------------------------
================================================================================
xorgxrdp-0.2.8-2.fc29 (FEDORA-2018-f802e91fac)
Implementation of xrdp backend as Xorg modules
--------------------------------------------------------------------------------
Update Information:
Rebuild against xorg-x11-server 1.20.2.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 25 2018 Bojan Smojver <bojan(a)rexursive.com> - 0.2.8-2
- Rebuild against Xorg 1.20.2
--------------------------------------------------------------------------------