The following Fedora 29 Security updates need testing:
Age URL
222
https://bodhi.fedoraproject.org/updates/FEDORA-2019-fa5843e0e1
asterisk-16.2.1-1.fc29
208
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c84f291592
WALinuxAgent-2.2.38-1.fc29
203
https://bodhi.fedoraproject.org/updates/FEDORA-2019-7528388823
chicken-5.0.0-2.fc29
163
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9839aded3f
python-gnupg-0.4.4-1.fc29
159
https://bodhi.fedoraproject.org/updates/FEDORA-2019-35cb5a4785
kubernetes-1.13.5-1.fc29
97
https://bodhi.fedoraproject.org/updates/FEDORA-2019-32f7cd9b66
dosbox-0.74.3-2.fc29
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-387474fa20
thunderbird-68.1.1-1.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-03aa4f746c
ming-0.4.9-0.2.20181112git5009802.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e32b440b86
radare2-3.9.0-1.fc29.1
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d2381feee9
libapreq2-2.13-38.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e1f0417a24
opendmarc-1.3.2-1.fc29
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e5ff5d0ffd
qt5-qtwebengine-5.12.5-2.fc29
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e99c1603c3
golang-1.11.13-2.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3fc86a518b
runc-1.0.0-95.rc9.gitc1485a1.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8fcf21a816
python-ecdsa-0.13.3-1.fc29
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b1586544bb
libnbd-1.0.3-1.fc29
The following Fedora 29 Critical Path updates have yet to be approved:
Age URL
135
https://bodhi.fedoraproject.org/updates/FEDORA-2019-06a2d1c7fb
anaconda-29.24.7-3.fc29
133
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4cefd3161a
nfs-utils-2.3.3-4.rc2.fc29
106
https://bodhi.fedoraproject.org/updates/FEDORA-2019-583d9d5a56
mutter-3.30.2-3.fc29
92
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6f13c38d0d
python-urllib3-1.24.3-2.fc29
90
https://bodhi.fedoraproject.org/updates/FEDORA-2019-62e681b68b ipset-7.2-1.fc29
22
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3bdedf56fb sssd-2.2.2-1.fc29
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-387474fa20
thunderbird-68.1.1-1.fc29
8
https://bodhi.fedoraproject.org/updates/FEDORA-2019-f6802f80f7
hwdata-0.328-1.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4bf63b7592
ibus-1.5.19-18.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-5468235704
openssl-1.1.1d-2.fc29
The following builds have been pushed to Fedora 29 updates-testing
fstrm-0.5.0-1.fc29
glusterfs-5.10-1.fc29
kernel-5.2.20-100.fc29
kernel-headers-5.2.20-100.fc29
kernel-tools-5.2.20-100.fc29
perl-Image-ExifTool-11.70-1.fc29
php-zendframework-zend-json-3.1.2-1.fc29
pioneer-20191009-1.fc29
rsync-3.1.3-8.fc29
srain-1.0.0-0.5.rc9999.fc29
wabt-1.0.12-1.fc29
Details about builds:
================================================================================
fstrm-0.5.0-1.fc29 (FEDORA-2019-430a87a768)
Frame Streams implementation in C
--------------------------------------------------------------------------------
Update Information:
- update to 0.5.0
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 10 2019 Tomas Krizek <tomas.krizek(a)nic.cz> - 0.5.0-1
- Update to new upstream version 0.5.0
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4.0-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
glusterfs-5.10-1.fc29 (FEDORA-2019-c15ad33a2a)
Distributed File System
--------------------------------------------------------------------------------
Update Information:
GlusterFS 5.10 GA
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 9 2019 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 5.10-1
- 5.10 GA
--------------------------------------------------------------------------------
================================================================================
kernel-5.2.20-100.fc29 (FEDORA-2019-9f9b38c8e5)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 5.2.20 stable kernel update contains a number of important fixes across the
tree.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 8 2019 Justin M. Forbes <jforbes(a)fedoraproject.org> - 5.2.20-100
- Linux v5.2.20
* Wed Oct 2 2019 Justin M. Forbes <jforbes(a)fedoraproject.org>
- Fix CVE-2019-17052 CVE-2019-17053 CVE-2019-17054 CVE-2019-17055 CVE-2019-17056
(rhbz 1758239 1758240 1758242 1758243 1758245 1758246 1758248 1758249 1758256 1758257)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1758256 - CVE-2019-17056 kernel: privilege escalation in llcp_sock_create in
net/nfc/llcp_sock.c in the AF_NFC network module
https://bugzilla.redhat.com/show_bug.cgi?id=1758256
[ 2 ] Bug #1758248 - CVE-2019-17055 kernel: privilege escalation in base_sock_create in
drivers/isdn/mISDN/socket.c in the AF_ISDN network module
https://bugzilla.redhat.com/show_bug.cgi?id=1758248
[ 3 ] Bug #1758245 - CVE-2019-17054 kernel: privilege escalation in atalk_create in
net/appletalk/ddp.c in the AF_APPLETALK network module
https://bugzilla.redhat.com/show_bug.cgi?id=1758245
[ 4 ] Bug #1758242 - CVE-2019-17053 kernel: privilege escalation in ieee802154_create in
net/ieee802154/socket.c in the AF_IEEE802154 network module
https://bugzilla.redhat.com/show_bug.cgi?id=1758242
[ 5 ] Bug #1758239 - CVE-2019-17052 kernel: privilege escalation in ax25_create in
net/ax25/af_ax25.c in the AF_AX25 network module
https://bugzilla.redhat.com/show_bug.cgi?id=1758239
--------------------------------------------------------------------------------
================================================================================
kernel-headers-5.2.20-100.fc29 (FEDORA-2019-9f9b38c8e5)
Header files for the Linux kernel for use by glibc
--------------------------------------------------------------------------------
Update Information:
The 5.2.20 stable kernel update contains a number of important fixes across the
tree.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 8 2019 Justin M. Forbes <jforbes(a)fedoraproject.org> - 5.2.20-100
- Linux v5.2.20
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1758256 - CVE-2019-17056 kernel: privilege escalation in llcp_sock_create in
net/nfc/llcp_sock.c in the AF_NFC network module
https://bugzilla.redhat.com/show_bug.cgi?id=1758256
[ 2 ] Bug #1758248 - CVE-2019-17055 kernel: privilege escalation in base_sock_create in
drivers/isdn/mISDN/socket.c in the AF_ISDN network module
https://bugzilla.redhat.com/show_bug.cgi?id=1758248
[ 3 ] Bug #1758245 - CVE-2019-17054 kernel: privilege escalation in atalk_create in
net/appletalk/ddp.c in the AF_APPLETALK network module
https://bugzilla.redhat.com/show_bug.cgi?id=1758245
[ 4 ] Bug #1758242 - CVE-2019-17053 kernel: privilege escalation in ieee802154_create in
net/ieee802154/socket.c in the AF_IEEE802154 network module
https://bugzilla.redhat.com/show_bug.cgi?id=1758242
[ 5 ] Bug #1758239 - CVE-2019-17052 kernel: privilege escalation in ax25_create in
net/ax25/af_ax25.c in the AF_AX25 network module
https://bugzilla.redhat.com/show_bug.cgi?id=1758239
--------------------------------------------------------------------------------
================================================================================
kernel-tools-5.2.20-100.fc29 (FEDORA-2019-9f9b38c8e5)
Assortment of tools for the Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 5.2.20 stable kernel update contains a number of important fixes across the
tree.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 8 2019 Justin M. Forbes <jforbes(a)fedoraproject.org> - 5.2.20-100
- Linux v5.2.20
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1758256 - CVE-2019-17056 kernel: privilege escalation in llcp_sock_create in
net/nfc/llcp_sock.c in the AF_NFC network module
https://bugzilla.redhat.com/show_bug.cgi?id=1758256
[ 2 ] Bug #1758248 - CVE-2019-17055 kernel: privilege escalation in base_sock_create in
drivers/isdn/mISDN/socket.c in the AF_ISDN network module
https://bugzilla.redhat.com/show_bug.cgi?id=1758248
[ 3 ] Bug #1758245 - CVE-2019-17054 kernel: privilege escalation in atalk_create in
net/appletalk/ddp.c in the AF_APPLETALK network module
https://bugzilla.redhat.com/show_bug.cgi?id=1758245
[ 4 ] Bug #1758242 - CVE-2019-17053 kernel: privilege escalation in ieee802154_create in
net/ieee802154/socket.c in the AF_IEEE802154 network module
https://bugzilla.redhat.com/show_bug.cgi?id=1758242
[ 5 ] Bug #1758239 - CVE-2019-17052 kernel: privilege escalation in ax25_create in
net/ax25/af_ax25.c in the AF_AX25 network module
https://bugzilla.redhat.com/show_bug.cgi?id=1758239
--------------------------------------------------------------------------------
================================================================================
perl-Image-ExifTool-11.70-1.fc29 (FEDORA-2019-a4be15821b)
Utility for reading and writing image meta info
--------------------------------------------------------------------------------
Update Information:
Update to latest stable (11.70).
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 10 2019 Tom Callaway <spot(a)fedoraproject.org> - 11.70-1
- update to latest stable (11.70)
* Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 11.50-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
php-zendframework-zend-json-3.1.2-1.fc29 (FEDORA-2019-f2fd751b90)
Zend Framework Json component
--------------------------------------------------------------------------------
Update Information:
**Version 3.1.2** - 2019-10-09 **Fixed** -
[#46](https://github.com/zendframework/zend-json/pull/46) changes curly braces
in array and string offset access to square brackets in order to prevent
issues under the upcoming PHP 7.4 release. -
[#37](https://github.com/zendframework/zend-json/pull/37) fixes output of
`\Zend\Json::prettyPrint` to not remove spaces after commas in value.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 9 2019 Remi Collet <remi(a)remirepo.net> - 3.1.2-1
- update to 3.1.2
--------------------------------------------------------------------------------
================================================================================
pioneer-20191009-1.fc29 (FEDORA-2019-80c61d11f0)
A game of lonely space adventure
--------------------------------------------------------------------------------
Update Information:
- Release 20191009
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 9 2019 Antonio Trande <sagitter(a)fedoraproject.org> - 20191009-1
- Release 20191009
* Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> -
20190203-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1759866 - missing env variable to avoid fullscreen unfocus shenanigans
https://bugzilla.redhat.com/show_bug.cgi?id=1759866
[ 2 ] Bug #1759327 - pioneer crashes on startup and load game, when DE as language is
selected
https://bugzilla.redhat.com/show_bug.cgi?id=1759327
--------------------------------------------------------------------------------
================================================================================
rsync-3.1.3-8.fc29 (FEDORA-2019-b54a9b5130)
A program for synchronizing files over a network
--------------------------------------------------------------------------------
Update Information:
Enabling upstream test suite during build
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 10 2019 Michal Ruprich <mruprich(a)redhat.com> - 3.1.3-8
- Enabling upstream test suite during build rhbz#1533846
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1533846 - [RFE] Turn on upstream tests for rsync
https://bugzilla.redhat.com/show_bug.cgi?id=1533846
--------------------------------------------------------------------------------
================================================================================
srain-1.0.0-0.5.rc9999.fc29 (FEDORA-2019-e91f5ce75b)
Modern, beautiful IRC client written in GTK+ 3
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 10 2019 Artem Polishchuk <ego.cordatus(a)gmail.com> - 1.0.0-0.5.rc9999
- Update to 1.0.0rc9999
* Sat Jul 27 2019 Fedora Release Engineering <releng(a)fedoraproject.org> -
1.0.0-0.4.rc5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
wabt-1.0.12-1.fc29 (FEDORA-2019-744819aecb)
The WebAssembly Binary Toolkit
--------------------------------------------------------------------------------
Update Information:
Latest stable upstream release. Multiple bug fixes.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Sep 28 2019 Dominik Mierzejewski <rpm(a)greysector.net> 1.0.12-1
- update to 1.0.12 (#1755644)
- drop obsolete patch
- disable regress/regress-30.txt until fixed for python3
- fix running test/wasm2c/spec tests under python3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1755644 - wabt-1.0.12 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1755644
--------------------------------------------------------------------------------