The following Fedora 29 Security updates need testing:
Age URL
58
https://bodhi.fedoraproject.org/updates/FEDORA-2018-51ce232320
xerces-c27-2.7.0-28.fc29
19
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6aada550ca bird-1.6.4-2.fc29
14
https://bodhi.fedoraproject.org/updates/FEDORA-2018-87f2ace20d qemu-3.0.0-2.fc29
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4003413459
mingw-uriparser-0.9.0-1.fc29
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c5c72a45ea
uriparser-0.9.0-1.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3fbc181b3e
keepalived-2.0.10-1.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-22c609e92a
cobbler-2.8.4-5.fc29
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-937e8a39c4
python36-3.6.7-1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e14840a7f5
pdns-recursor-4.1.8-1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-42555731d2
nagios-4.4.2-3.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-beec9e3fda
hadoop-2.7.7-1.fc29
The following Fedora 29 Critical Path updates have yet to be approved:
Age URL
14
https://bodhi.fedoraproject.org/updates/FEDORA-2018-004d2f4e6f
xfconf-4.13.6-2.fc29
14
https://bodhi.fedoraproject.org/updates/FEDORA-2018-87f2ace20d qemu-3.0.0-2.fc29
9
https://bodhi.fedoraproject.org/updates/FEDORA-2018-17cbc3c616 dnf-4.0.9-1.fc29
dnf-plugins-core-4.0.2-1.fc29 dnf-plugins-extras-4.0.0-1.fc29 libdnf-0.22.3-1.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6682778e13
pungi-4.1.31-1.fc29
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c3dd0383fa
PackageKit-1.1.12-1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ae0be48c15
perl-threads-shared-1.59-1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4418fc329b kobo-0.8.0-1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b1deef70ad lorax-29.21-1.fc29
The following builds have been pushed to Fedora 29 updates-testing
NetworkManager-1.12.6-1.fc29
calibre-3.34.0-1.fc29
debootstrap-1.0.109-3.fc29
dogtag-pki-10.6.8-1.fc29
gsequencer-2.1.3-0.fc29
haproxy-1.8.14-2.fc29
jss-4.5.1-1.fc29
kmymoney-5.0.2-1.fc29
mmapper-2.7.1-1.fc29
nuxwdog-1.0.5-3.fc29
openqa-4.6-5.20181121gitb543647.fc29
pam_mysql-0.8.1-0.2.fc29
pki-core-10.6.8-1.fc29
pygobject3-3.30.4-1.fc29
python-wikitcms-2.4.2-1.fc29
radeontop-1.2-0.1.20181031git7474f50.fc29
switchboard-plug-sharing-2.1.3-1.fc29
tomcatjss-7.3.6-2.fc29
Details about builds:
================================================================================
NetworkManager-1.12.6-1.fc29 (FEDORA-2018-3edec78f47)
Network connection manager and user applications
--------------------------------------------------------------------------------
Update Information:
Update to 1.12.6 release --- NEWS: * Support hidden SSID in wifi AP mode. *
Fix a vulnerability in the internal DHCPv6 client (CVE-2018-15688). * Avoid
expiring the lifetime of IPv6 addresses from router advertisements. * Fix
handling "serial.parity" and "serial.send-delay" properties in nmcli.
* Avoid
taking down device when changing MAC address. * Fix crash with internal DHCPv6
client. * Various minor bugfixes and translation updates. --- Note:
CVE-2018-15688 was already fixed by NetworkManager-1.12.4-2.fc29
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 1 2018 Thomas Haller <thaller(a)redhat.com> - 1:1.12.6-1
- Update to 1.12.6 release
--------------------------------------------------------------------------------
================================================================================
calibre-3.34.0-1.fc29 (FEDORA-2018-deea788d2d)
E-book converter and library manager
--------------------------------------------------------------------------------
Update Information:
Update to 3.34.0 with bugfixes and new hardware enablement.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 1 2018 Kevin Fenzi <kevin(a)scrye.com> - 3.34.0-1
- Update to 3.34.
* Fri Sep 21 2018 Jan Grulich <jgrulich(a)redhat.com> - 3.29.0-2
- rebuild (qt5)
--------------------------------------------------------------------------------
================================================================================
debootstrap-1.0.109-3.fc29 (FEDORA-2018-2dee2f3447)
Debian GNU/Linux bootstrapper
--------------------------------------------------------------------------------
Update Information:
- Don't mangling shebang in /usr/sbin/debootstrap from /bin/sh to /usr/bin/sh
(#1654765), thanks to Laurent Vivier
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 1 2018 S��rgio Basto <sergio(a)serjux.com> - 1.0.109-3
- Don't mangling shebang in /usr/sbin/debootstrap from /bin/sh to /usr/bin/sh
(#1654765), thanks to Laurent Vivier
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1654765 - chroot: failed to run command './debootstrap/debootstrap':
No such file or directory
https://bugzilla.redhat.com/show_bug.cgi?id=1654765
--------------------------------------------------------------------------------
================================================================================
dogtag-pki-10.6.8-1.fc29 (FEDORA-2018-3241dd6a7f)
Dogtag PKI Package
--------------------------------------------------------------------------------
Update Information:
Rebased: * **pki-core** to *10.6.8* * **dogtag-pki** to *10.6.8* * **jss**
to *4.5.1* Resubmitting the following since it didn't make it to the stable: *
nuxwdog 1.0.5-3 * tomcatjss 7.3.6-2
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 30 2018 Dogtag PKI Team <pki-team(a)redhat.com> - 10.6.8-1
- Rebased to PKI 10.6.8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1582323 - DER encoding error for enumerated types with a value of zero
https://bugzilla.redhat.com/show_bug.cgi?id=1582323
[ 2 ] Bug #1534765 - javadoc for org.mozilla.jss.pkix.cms.SignedData.getSignerInfos() is
incorrect
https://bugzilla.redhat.com/show_bug.cgi?id=1534765
--------------------------------------------------------------------------------
================================================================================
gsequencer-2.1.3-0.fc29 (FEDORA-2018-fcb2a20793)
Audio processing engine
--------------------------------------------------------------------------------
Update Information:
updated Source to point to new minor version directory
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 1 2018 Jo��l Kr��hemann <jkraehemann(a)gmail.com> 2.1.3-0
- updated Source to point to new minor version directory
- removed build dependency ladspa-cmt-plugins and lv2-swh-plugins
--------------------------------------------------------------------------------
================================================================================
haproxy-1.8.14-2.fc29 (FEDORA-2018-7d14594565)
HAProxy reverse proxy for high availability environments
--------------------------------------------------------------------------------
Update Information:
Use of crpyt() is not thread safe (#1643941)
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 1 2018 Ryan O'Hara <rohara(a)redhat.com> - 1.8.14-2
- Use of crpyt() is not thread safe (#1643941)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1643941 - haproxy basic auth broken when using nbthread
https://bugzilla.redhat.com/show_bug.cgi?id=1643941
--------------------------------------------------------------------------------
================================================================================
jss-4.5.1-1.fc29 (FEDORA-2018-3241dd6a7f)
Java Security Services (JSS)
--------------------------------------------------------------------------------
Update Information:
Rebased: * **pki-core** to *10.6.8* * **dogtag-pki** to *10.6.8* * **jss**
to *4.5.1* Resubmitting the following since it didn't make it to the stable: *
nuxwdog 1.0.5-3 * tomcatjss 7.3.6-2
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 29 2018 Dogtag PKI Team <pki-devel(a)redhat.com> 4.5.1-1
- Rebased to JSS 4.5.1
- Red Hat Bugzilla #1582323 - DER encoding error for enumerated types with a value of
zero
- Red Hat Bugzilla #1534765 - javadoc for
org.mozilla.jss.pkix.cms.SignedData.getSignerInfos() is incorrect
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1582323 - DER encoding error for enumerated types with a value of zero
https://bugzilla.redhat.com/show_bug.cgi?id=1582323
[ 2 ] Bug #1534765 - javadoc for org.mozilla.jss.pkix.cms.SignedData.getSignerInfos() is
incorrect
https://bugzilla.redhat.com/show_bug.cgi?id=1534765
--------------------------------------------------------------------------------
================================================================================
kmymoney-5.0.2-1.fc29 (FEDORA-2018-7654366328)
Personal finance
--------------------------------------------------------------------------------
Update Information:
New upstream release, see also
https://kmymoney.org/release-notes.php
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 5 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 5.0.2-1
- 5.0.2
- (re)enable sqlcipher support
--------------------------------------------------------------------------------
================================================================================
mmapper-2.7.1-1.fc29 (FEDORA-2018-8d8f66da39)
Graphical MUME mapper
--------------------------------------------------------------------------------
Update Information:
mmapper 2.7.1 release. For details, see
https://github.com/MUME/MMapper/releases/tag/v2.7.1 ---- mmapper 2.7.0
release. For details, see
https://github.com/MUME/MMapper/releases/tag/v2.7.0
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 1 2018 Kalev Lember <klember(a)redhat.com> - 2.7.1-1
- Update to 2.7.1
* Tue Nov 27 2018 Kalev Lember <klember(a)redhat.com> - 2.7.0-1
- Update to 2.7.0
--------------------------------------------------------------------------------
================================================================================
nuxwdog-1.0.5-3.fc29 (FEDORA-2018-3241dd6a7f)
Watchdog server to start and stop processes, and prompt for passwords
--------------------------------------------------------------------------------
Update Information:
Rebased: * **pki-core** to *10.6.8* * **dogtag-pki** to *10.6.8* * **jss**
to *4.5.1* Resubmitting the following since it didn't make it to the stable: *
nuxwdog 1.0.5-3 * tomcatjss 7.3.6-2
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 30 2018 Dogtag PKI Team (pki-devel(a)redhat.com) 1.0.5-3
- Rebuild for submission to bodhi since 1.0.5-2 didn't make it to stable
* Wed Aug 22 2018 Alexander Bokovoy <abokovoy(a)redhat.com> - 1.0.5-2
- Remove obsolete ExcludeArch statement for RHEL builds
- Syncing with upstream changes
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1582323 - DER encoding error for enumerated types with a value of zero
https://bugzilla.redhat.com/show_bug.cgi?id=1582323
[ 2 ] Bug #1534765 - javadoc for org.mozilla.jss.pkix.cms.SignedData.getSignerInfos() is
incorrect
https://bugzilla.redhat.com/show_bug.cgi?id=1534765
--------------------------------------------------------------------------------
================================================================================
openqa-4.6-5.20181121gitb543647.fc29 (FEDORA-2018-45c0b4716b)
OS-level automated testing framework
--------------------------------------------------------------------------------
Update Information:
This update switches the openQA fedmsg plugin to using `fedmsg-logger-3` rather
than `fedmsg-logger` - so, the Python 3 version - to send messages. This is the
only change.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 30 2018 Adam Williamson <awilliam(a)redhat.com> - 4.6-5.20181121gitb543647
- Backport PR #1901 to use Python 3 fedmsg-logger in fedmsg plugin
--------------------------------------------------------------------------------
================================================================================
pam_mysql-0.8.1-0.2.fc29 (FEDORA-2018-e600272170)
PAM module for auth UNIX users using MySQL data base
--------------------------------------------------------------------------------
Update Information:
Rebase pam_mysql to Nigel Cunningham's fork.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 1 2018 Paul Komkoff <i(a)stingr.net> - 1:0.8.1-0.2
- fix fat-fingered spec.
* Sat Dec 1 2018 Paul Komkoff <i(a)stingr.net> - 1:0.8.1-0.1
- move from unmaintained 0.7RC1 upstream to newer repo by Nigel Cunningham.
this should fix a lot of issues.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1588004 - pam_mysql segfaults if the passwords starts with not-letter
character
https://bugzilla.redhat.com/show_bug.cgi?id=1588004
[ 2 ] Bug #1506858 - /usr/lib64/security/pam_mysql.so: undefined symbol:
my_make_scrambled_password
https://bugzilla.redhat.com/show_bug.cgi?id=1506858
[ 3 ] Bug #1587980 - pam_mysql memory leak
https://bugzilla.redhat.com/show_bug.cgi?id=1587980
[ 4 ] Bug #1615900 - PAM unable to dlopen(/usr/lib64/security/pam_mysql.so):
/usr/lib64/security/pam_mysql.so: undefined symbol: my_make_scrambled_password
https://bugzilla.redhat.com/show_bug.cgi?id=1615900
--------------------------------------------------------------------------------
================================================================================
pki-core-10.6.8-1.fc29 (FEDORA-2018-3241dd6a7f)
PKI Core Package
--------------------------------------------------------------------------------
Update Information:
Rebased: * **pki-core** to *10.6.8* * **dogtag-pki** to *10.6.8* * **jss**
to *4.5.1* Resubmitting the following since it didn't make it to the stable: *
nuxwdog 1.0.5-3 * tomcatjss 7.3.6-2
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 30 2018 Dogtag PKI Team <pki-devel(a)redhat.com> - 10.6.8-1
- Rebased to PKI 10.6.8
* Fri Oct 26 2018 Dogtag PKI Team <pki-devel(a)redhat.com> - 10.6.7-3
- Fixed default token normalization in initialization.py
* Thu Oct 25 2018 Dogtag PKI Team <pki-devel(a)redhat.com> - 10.6.7-2
- Fixed missing token in verify_certificate_exists
* Thu Oct 4 2018 Dogtag PKI Team <pki-devel(a)redhat.com> - 10.6.7-1
- Rebased to PKI 10.6.7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1582323 - DER encoding error for enumerated types with a value of zero
https://bugzilla.redhat.com/show_bug.cgi?id=1582323
[ 2 ] Bug #1534765 - javadoc for org.mozilla.jss.pkix.cms.SignedData.getSignerInfos() is
incorrect
https://bugzilla.redhat.com/show_bug.cgi?id=1534765
--------------------------------------------------------------------------------
================================================================================
pygobject3-3.30.4-1.fc29 (FEDORA-2018-7a2a3c6ddd)
Python bindings for GObject Introspection
--------------------------------------------------------------------------------
Update Information:
pygobject 3.30.4 release. * gtk overrides: Fix rows getting inserted on the
wrong level with TreeStore.insert_before/inster_after if parent=None.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 1 2018 Kalev Lember <klember(a)redhat.com> - 3.30.4-1
- Update to 3.30.4
--------------------------------------------------------------------------------
================================================================================
python-wikitcms-2.4.2-1.fc29 (FEDORA-2018-1e52a27cb7)
Fedora QA wiki test management Python library
--------------------------------------------------------------------------------
Update Information:
This update provides a new release of python-wikitcms, which fixes a flow issue
that - combined with [a bug](https://pagure.io/fedora-infrastructure/issue/7415)
in the Fedora wiki itself - was preventing the Current redirect pages (e.g.
[Current Installation
Test](https://fedoraproject.org/wiki/Test_Results:Current_Installation_Test))
from being updated when new validation events were created.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 30 2018 Adam Williamson <awilliam(a)redhat.com> - 2.4.2-1
- New release 2.4.2: fix a test bug exposed by the 2.4.1 bug fix
* Fri Nov 30 2018 Adam Williamson <awilliam(a)redhat.com> - 2.4.1-1
- New release 2.4.1: fix Current redirect page updates
* Thu Nov 22 2018 Adam Williamson <awilliam(a)redhat.com> - 2.4.0-2
- Disable Python 2 build on F30+, EL8+
--------------------------------------------------------------------------------
================================================================================
radeontop-1.2-0.1.20181031git7474f50.fc29 (FEDORA-2018-82a995db75)
View GPU utilization of AMD/ATI Radeon devices
--------------------------------------------------------------------------------
Update Information:
This update add support of newer AMD APU and Radeon GPU
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 30 2018 Luya Tshimbalanga <luya(a)fedoraproject.org>
1.2-0.1.20181031git7474f50
- Update to 20181031 which support newer AMD APU and GPU
--------------------------------------------------------------------------------
================================================================================
switchboard-plug-sharing-2.1.3-1.fc29 (FEDORA-2018-b70677ea21)
Switchboard Sharing Plug
--------------------------------------------------------------------------------
Update Information:
Initial official packaging for fedora. This package was previously available
from the elementary-staging and elementary-nightly COPR repositories.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1654869 - Review Request: switchboard-plug-sharing - Switchboard Sharing
Plug
https://bugzilla.redhat.com/show_bug.cgi?id=1654869
--------------------------------------------------------------------------------
================================================================================
tomcatjss-7.3.6-2.fc29 (FEDORA-2018-3241dd6a7f)
JSS Connector for Apache Tomcat
--------------------------------------------------------------------------------
Update Information:
Rebased: * **pki-core** to *10.6.8* * **dogtag-pki** to *10.6.8* * **jss**
to *4.5.1* Resubmitting the following since it didn't make it to the stable: *
nuxwdog 1.0.5-3 * tomcatjss 7.3.6-2
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 30 2018 Dogtag PKI Team <pki-team(a)redhat.com> 7.3.6-2
- Rebuilt for submitting bodhi update
* Wed Oct 3 2018 Dogtag PKI Team <pki-team(a)redhat.com> 7.3.6-1
- Rebased to TomcatJSS 7.3.6
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1582323 - DER encoding error for enumerated types with a value of zero
https://bugzilla.redhat.com/show_bug.cgi?id=1582323
[ 2 ] Bug #1534765 - javadoc for org.mozilla.jss.pkix.cms.SignedData.getSignerInfos() is
incorrect
https://bugzilla.redhat.com/show_bug.cgi?id=1534765
--------------------------------------------------------------------------------