The following Fedora 29 Security updates need testing:
Age URL
9
https://bodhi.fedoraproject.org/updates/FEDORA-2018-51ce232320
xerces-c27-2.7.0-28.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a0d22c2a21
strongswan-5.7.1-1.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-39be36e9fc
chromium-69.0.3497.100-1.fc29
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3119a06646 gdal-2.3.2-1.fc29
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9cdbb641f9
mod_http2-1.11.1-1.fc29
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-06116a0f7f
openvswitch-2.10.0-1.fc29
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3058a87e60
audiofile-0.3.6-21.fc29
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6c9873a3df
libtiff-4.0.9-13.fc29
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-90af6f5b8a patch-2.7.6-7.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-672c028631
sos-collector-1.5-1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-792ff3cafa
hesiod-3.2.1-14.fc29
The following Fedora 29 Critical Path updates have yet to be approved:
Age URL
32
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7a207f18aa sudo-1.8.25-1.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e204a15424
xfce4-settings-4.13.5-1.fc29
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ea93149b97
iio-sensor-proxy-2.5-1.fc29
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-17567f45a5
pungi-4.1.29-2.fc29
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b1d8c6335d
selinux-policy-3.14.2-37.fc29
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-90af6f5b8a patch-2.7.6-7.fc29
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6c9873a3df
libtiff-4.0.9-13.fc29
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b76111b18e libSM-1.2.3-1.fc29
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7be27ff1d8 getdns-1.4.2-4.fc29
gnutls-3.6.4-2.fc29 libreswan-3.27-1.fc29 netresolve-0.0.1-0.22.20160317git.fc29
unbound-1.8.1-1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-da1ddf23ad
libX11-1.6.7-1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3e770a0027 fwupd-1.1.3-1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ac3ce96ad9 curl-7.61.1-3.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1b45275249
libosinfo-1.2.0-5.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ed27f1c5c4
osinfo-db-20181011-1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3e4ee09428
appstream-0.12.2-2.fc29 appstream-data-29-7.fc29
The following builds have been pushed to Fedora 29 updates-testing
BackupPC-4.2.1-3.fc29
flatpak-1.0.4-1.fc29
gcc-8.2.1-4.fc29
liblouis-3.7.0-2.fc29
libuv-1.23.2-1.fc29
lirc-0.10.0-14.fc29
lorax-29.19-1.fc29
nodejs-10.12.0-1.fc29
openldap-2.4.46-9.fc29
perl-File-Remove-1.58-1.fc29
perl-File-Slurp-9999.21-1.fc29
perl-IO-Handle-Util-0.02-1.fc29
purple-facebook-0.9.5-11.9ff9acf9fa14.fc29
scala-2.10.6-14.fc29
Details about builds:
================================================================================
BackupPC-4.2.1-3.fc29 (FEDORA-2018-4a2a561306)
High-performance backup system
--------------------------------------------------------------------------------
Update Information:
* Revert accidental change to log dir permissions. * Don't package /run dir when
using tmpfiles.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 11 2018 Richard Shaw <hobbes1069(a)gmail.com> - 4.2.1-3
- Revert accidental change to log dir permissions.
- Don't package /run dir when using tmpfiles.
--------------------------------------------------------------------------------
================================================================================
flatpak-1.0.4-1.fc29 (FEDORA-2018-9d1dcacde8)
Application deployment framework for desktop apps
--------------------------------------------------------------------------------
Update Information:
flatpak 1.0.4 release. * Flatpak 0.99.1 removed the inheritance of permissions
from the runtime due to concerns with dynamic app permissions. Due to popular
requests, this version re-introduces such inheritance, but does it instead at
build time. This solved the issues with dynamic permissions while still
allowing runtimes to have default permissions. Apps can disable this by
passing --no-inherit-permissions to build-finish. * The sandbox now always
includes a /etc/timezone file, following the (old) debian standard for this.
This is needed, because the more modern way of exposing the timezone name by
having /etc/localtime be a symlink into /usr/share/zoneinfo doesn't work when
exposing the host timezone. * All apps now have automatic permissions to own
their own app id as a subname of org.mpris.MediaPlayer2. * We now properly
re-load remote state in FlatpakTransaction if the metadata was updated for
the remote. * The signature of the FlatpakTransaction::operation-done signal
was wrong in the header and has now been corrected to the signature that is
actually emitted. * A crash was fixed when reading invalid .flatpakref
files. * A crash during updates when a local ref was unexpectedly missing was
fixed. * An error case on uninstalling was incorrectly returning success even
thought there was an error. * flatpak_installation_modify_remote did not
correctly save the nodeps state. * flatpak_installation_load_app_overrides()
was improperly returning freed memory. * The tarball now ships with an icon
(flatpak.png).
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 12 2018 Kalev Lember <klember(a)redhat.com> - 1.0.4-1
- Update to 1.0.4
--------------------------------------------------------------------------------
================================================================================
gcc-8.2.1-4.fc29 (FEDORA-2018-e4030f4df4)
Various compilers (C, C++, Objective-C, ...)
--------------------------------------------------------------------------------
Update Information:
Upstream bugs (
http://gcc.gnu.org/PRNNNNN) fixed: 60555, 80925, 82699, 83999,
84535, 84940, 85070, 85395, 85666, 85774, 85859, 85871, 85954, 86022, 86109,
86111, 86116, 86153, 86190, 86328, 86372, 86386, 86456, 86505, 86597, 86640,
86662, 86704, 86705, 86706, 86728, 86731, 86738, 86760, 86763, 86767, 86771,
86816, 86817, 86820, 86830, 86835, 86836, 86837, 86844, 86861, 86871, 86874,
86881, 86882, 86906, 86914, 86927, 86945, 86989, 86992, 87014, 87024, 87033,
87065, 87074, 87093, 87095, 87099, 87116, 87122, 87137, 87138, 87155, 87185,
87188, 87198, 87224, 87225, 87248, 87277, 87278, 87284, 87353, 87370, 87414,
87467, 87517, 87522, 87538, 87550, 87582
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 11 2018 Jakub Jelinek <jakub(a)redhat.com> 8.2.1-4
- update from the 8 branch
- PRs bootstrap/87225, c++/84940, c++/85070, c++/86881, c++/87093,
c++/87137, c++/87185, c++/87582, fortran/83999, fortran/85395,
fortran/85954, fortran/86111, fortran/86116, fortran/86372,
fortran/86830, fortran/87277, fortran/87284, gcov-profile/85871,
gcov-profile/86109, libstdc++/87278, libstdc++/87538,
middle-end/87188, middle-end/87248, other/87353,
rtl-optimization/86771, rtl-optimization/86882, sanitizer/85774,
target/82699, target/85666, target/86731, target/86989, target/87033,
target/87224, target/87370, target/87414, target/87467, target/87517,
target/87522, target/87550, tree-optimization/86844
* Wed Sep 5 2018 Jakub Jelinek <jakub(a)redhat.com> 8.2.1-3
- update from the 8 branch
- PRs c++/86190, c++/86706, c++/86728, c++/86738, c++/86763, c++/86767,
c++/86836, c++/87095, c++/87122, c++/87155, fortran/86328,
fortran/86760, fortran/86837, fortran/86906, gcov-profile/86817,
libfortran/86704, libstdc++/60555, libstdc++/84535, libstdc++/86597,
libstdc++/86861, libstdc++/86874, libstdc++/87116, lto/86456,
middle-end/86505, middle-end/86705, middle-end/87024,
middle-end/87099, middle-end/87138, other/86992,
rtl-optimization/87065, sanitizer/86022, target/86386, target/86640,
target/86662, target/86820, target/87014, target/87198,
testsuite/86153, tree-optimization/80925, tree-optimization/85859,
tree-optimization/86816, tree-optimization/86835,
tree-optimization/86871, tree-optimization/86914,
tree-optimization/86927, tree-optimization/86945,
tree-optimization/87074
--------------------------------------------------------------------------------
================================================================================
liblouis-3.7.0-2.fc29 (FEDORA-2018-5673235640)
Braille translation and back-translation library
--------------------------------------------------------------------------------
Update Information:
The utility package _liblouis-utils_ no longer depends on Python.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 13 2018 Martin Gieseking <martin.gieseking(a)uos.de> - 3.7.0-2
- Dropped Python dependency from utils package because it doesn't contain Python
scripts any longer
- Added BR:libyaml-devel to enable YAML support
--------------------------------------------------------------------------------
================================================================================
libuv-1.23.2-1.fc29 (FEDORA-2018-927acdd658)
Platform layer for node.js
--------------------------------------------------------------------------------
Update Information:
Update to Node.js 10.12.0
https://nodejs.org/en/blog/release/v10.12.0/
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 11 2018 Stephen Gallagher <sgallagh(a)redhat.com> - 1.23.2-1
- Update to 1.23.2
-
https://github.com/libuv/libuv/blob/v1.23.2/ChangeLog
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1631863 - nodejs-10.11.0-1 errors with /usr/bin/node: symbol lookup error:
/usr/bin/node: undefined symbol: uv_os_setpriority
https://bugzilla.redhat.com/show_bug.cgi?id=1631863
--------------------------------------------------------------------------------
================================================================================
lirc-0.10.0-14.fc29 (FEDORA-2018-4ea82e1cdd)
The Linux Infrared Remote Control package
--------------------------------------------------------------------------------
Update Information:
Fix a crash in lirc-setup(1) on startup ---- Add a fix for lirc-setup(1)
crash on startup.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 12 2018 Alec Leamas <leamas.alec(a)gmail.com> - 0.10.0-14
- Rework patch for lirc-setup crash on startup.
* Fri Oct 12 2018 Alec Leamas <leamas.alec(a)gmail.com> - 0.10.0-13
- Added patch for lirc-setup crash on startup.
--------------------------------------------------------------------------------
================================================================================
lorax-29.19-1.fc29 (FEDORA-2018-87016c10b0)
Tool for creating the anaconda install images
--------------------------------------------------------------------------------
Update Information:
- Update depsolving with suggestions from dnf (#1636239) (bcl(a)redhat.com)
- Disable false context-manager pylint error (bcl(a)redhat.com) - Fix
directory creation for blueprints (bcl(a)redhat.com) - Update the tests for
new make_dnf_dir arguments. (bcl(a)redhat.com) - Change make_dnf_dirs to be
run as root (bcl(a)redhat.com)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 12 2018 Brian C. Lane <bcl(a)redhat.com> 29.19-1
- Update depsolving with suggestions from dnf (#1636239) (bcl(a)redhat.com)
- Disable false context-manager pylint error (bcl(a)redhat.com)
- Fix directory creation for blueprints (bcl(a)redhat.com)
- Update the tests for new make_dnf_dir arguments. (bcl(a)redhat.com)
- Change make_dnf_dirs to be run as root (bcl(a)redhat.com)
* Tue Oct 9 2018 Brian C. Lane <bcl(a)redhat.com> 29.18-1
- Add an openstack image type (bcl(a)redhat.com)
- Add cloud-init to vhd images. (dshea(a)redhat.com)
- Replace /etc/machine-id with an empty file (dshea(a)redhat.com)
* Mon Oct 8 2018 Brian C. Lane <bcl(a)redhat.com> 29.17-1
- Update cli tests to use composer-cli name (bcl(a)redhat.com)
- Revert "Rename composer-cli to composer" (bcl(a)redhat.com)
--------------------------------------------------------------------------------
================================================================================
nodejs-10.12.0-1.fc29 (FEDORA-2018-927acdd658)
JavaScript runtime
--------------------------------------------------------------------------------
Update Information:
Update to Node.js 10.12.0
https://nodejs.org/en/blog/release/v10.12.0/
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 11 2018 Stephen Gallagher <sgallagh(a)redhat.com> - 1:10.12.0-1
- Update to 10.12.0
-
https://nodejs.org/en/blog/release/v10.12.0/
* Wed Oct 10 2018 Jan Stan��k <jstanek(a)redhat.com> - 1:10.11.0-2
- Add non-bootstrap BR for nodejs-packaging
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1631863 - nodejs-10.11.0-1 errors with /usr/bin/node: symbol lookup error:
/usr/bin/node: undefined symbol: uv_os_setpriority
https://bugzilla.redhat.com/show_bug.cgi?id=1631863
--------------------------------------------------------------------------------
================================================================================
openldap-2.4.46-9.fc29 (FEDORA-2018-569a02f893)
LDAP support libraries
--------------------------------------------------------------------------------
Update Information:
Add support for EC crypto which effectively disappeared since MozNSS to OpenSSL
migration. Unlike with MozNSS before, with OpenSSL it is required to set ECDH
curve in OpenLDAP with TLSECName parameter explicitly.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 8 2018 Matus Honek <mhonek(a)redhat.com> - 2.4.46-9
- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1623495)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1623495 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1623495
--------------------------------------------------------------------------------
================================================================================
perl-File-Remove-1.58-1.fc29 (FEDORA-2018-e080402ee8)
Convenience module for removing files and directories
--------------------------------------------------------------------------------
Update Information:
Upsteam update.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 12 2018 Ralf Cors��pius <corsepiu(a)fedoraproject.org> - 1.58-1
- Update to 1.58.
- Modernize spec.
--------------------------------------------------------------------------------
================================================================================
perl-File-Slurp-9999.21-1.fc29 (FEDORA-2018-a44e606dd7)
Efficient Reading/Writing of Complete Files
--------------------------------------------------------------------------------
Update Information:
Upstream update.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 13 2018 Ralf Cors��pius <corsepiu(a)fedoraproject.org> - 9999.21-1
- Update to 9999.21-1.
- Rework BRs.
- Drop xt-test.
- Spec file cosmetics.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1638230 - Upgrade perl-File-Slurp to 9999.21
https://bugzilla.redhat.com/show_bug.cgi?id=1638230
--------------------------------------------------------------------------------
================================================================================
perl-IO-Handle-Util-0.02-1.fc29 (FEDORA-2018-73f6c0a2f9)
Utilities for working with IO::Handle-like objects
--------------------------------------------------------------------------------
Update Information:
Upstream update
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 13 2018 Ralf Cors��pius <corsepiu(a)fedoraproject.org> - 0.02-1
- Update to 0.02.
- Switch to Build.PL.
- Rework deps.
- Modernize spec.
--------------------------------------------------------------------------------
================================================================================
purple-facebook-0.9.5-11.9ff9acf9fa14.fc29 (FEDORA-2018-d7f2ed3e19)
Facebook protocol plugin for purple2
--------------------------------------------------------------------------------
Update Information:
- Backported upstream patch for Facebook Work Chat. - Backported pull-request
adding an option to show inactive friends as away. - Backported pull-request
fixing compiler warnings. - Add disclaimer to %description. - Optimize
sortability of patches. - Refactor patches for smooth alignment.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 13 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 0.9.5-11.9ff9acf9fa14
- Backported upstream patch for Facebook Work Chat
* Sat Oct 13 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 0.9.5-10.9ff9acf9fa14
- Optimize sortability of patches
- Refactor patches for smooth alignment
- Remove empty line from spec file
* Fri Oct 5 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 0.9.5-9.9ff9acf9fa14
- Update Patch101 to match upstream PR
* Thu Oct 4 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 0.9.5-8.9ff9acf9fa14
- Backported pull-request fixing compiler warnings
* Thu Oct 4 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 0.9.5-7.9ff9acf9fa14
- Add disclaimer to %description
* Thu Oct 4 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 0.9.5-6.9ff9acf9fa14
- Backported pull-request adding an option to show inactive friends as away
--------------------------------------------------------------------------------
================================================================================
scala-2.10.6-14.fc29 (FEDORA-2018-425db0f4b6)
A hybrid functional/object-oriented language for the JVM
--------------------------------------------------------------------------------
Update Information:
Fixes scaladoc crash
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 12 2018 Mikolaj Izdebski <mizdebsk(a)redhat.com> - 2.10.6-14
- Re-enable docs generation during build
* Fri Oct 12 2018 Mikolaj Izdebski <mizdebsk(a)redhat.com> - 2.10.6-13
- Stop scaladoc from trying to bundle non-existent resources
- Temporarly disable docs generation during build
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1638863 - scala: FTBFS in Fedora rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1638863
--------------------------------------------------------------------------------