The following Fedora 29 Security updates need testing:
Age URL
220
https://bodhi.fedoraproject.org/updates/FEDORA-2019-fa5843e0e1
asterisk-16.2.1-1.fc29
207
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c84f291592
WALinuxAgent-2.2.38-1.fc29
201
https://bodhi.fedoraproject.org/updates/FEDORA-2019-7528388823
chicken-5.0.0-2.fc29
161
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9839aded3f
python-gnupg-0.4.4-1.fc29
157
https://bodhi.fedoraproject.org/updates/FEDORA-2019-35cb5a4785
kubernetes-1.13.5-1.fc29
95
https://bodhi.fedoraproject.org/updates/FEDORA-2019-32f7cd9b66
dosbox-0.74.3-2.fc29
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8ef33a69ca SDL2-2.0.10-1.fc29
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-dc4e1d0fb6
krb5-1.16.1-26.fc29
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-387474fa20
thunderbird-68.1.1-1.fc29
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ded15d6582
suricata-4.1.5-3.fc29
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-03aa4f746c
ming-0.4.9-0.2.20181112git5009802.fc29
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e32b440b86
radare2-3.9.0-1.fc29.1
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d2381feee9
libapreq2-2.13-38.fc29
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e1f0417a24
opendmarc-1.3.2-1.fc29
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e5ff5d0ffd
qt5-qtwebengine-5.12.5-2.fc29
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e99c1603c3
golang-1.11.13-2.fc29
The following Fedora 29 Critical Path updates have yet to be approved:
Age URL
133
https://bodhi.fedoraproject.org/updates/FEDORA-2019-06a2d1c7fb
anaconda-29.24.7-3.fc29
131
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4cefd3161a
nfs-utils-2.3.3-4.rc2.fc29
104
https://bodhi.fedoraproject.org/updates/FEDORA-2019-583d9d5a56
mutter-3.30.2-3.fc29
90
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6f13c38d0d
python-urllib3-1.24.3-2.fc29
88
https://bodhi.fedoraproject.org/updates/FEDORA-2019-62e681b68b ipset-7.2-1.fc29
20
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3bdedf56fb sssd-2.2.2-1.fc29
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3defb8f617
linux-firmware-20190923-102.fc29
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4b3dd5babe ethtool-5.3-1.fc29
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-dc4e1d0fb6
krb5-1.16.1-26.fc29
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8ef33a69ca SDL2-2.0.10-1.fc29
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-387474fa20
thunderbird-68.1.1-1.fc29
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-f6802f80f7
hwdata-0.328-1.fc29
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4bf63b7592
ibus-1.5.19-18.fc29
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-5468235704
openssl-1.1.1d-2.fc29
The following builds have been pushed to Fedora 29 updates-testing
R-gamlss.dist-5.1.5-1.fc29
autofs-5.1.4-41.fc29
colobot-0.1.12-3.fc29
knot-resolver-4.2.2-1.fc29
linuxconsoletools-1.7.0-1.fc29
nnn-2.7-1.fc29
octave-mcxlab-0.9.5-1.fc29
openhantek-2.15-1.fc29
php-pecl-memcached-3.1.4-1.fc29
proxysql-1.3.7-12.fc29
reportd-0.7.1-1.fc29
rubygem-rouge-3.11.1-1.fc29
runc-1.0.0-95.rc9.gitc1485a1.fc29
vit-2.0.0-3.fc29
Details about builds:
================================================================================
R-gamlss.dist-5.1.5-1.fc29 (FEDORA-2019-2a8dfe6bec)
Distributions for Generalized Additive Models for Location Scale and Shape
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 5 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 5.1.5-1
- Update to latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1758631 - R-gamlss.dist-5.1-5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1758631
--------------------------------------------------------------------------------
================================================================================
autofs-5.1.4-41.fc29 (FEDORA-2019-9588a98e1c)
A tool for automatically mounting and unmounting filesystems
--------------------------------------------------------------------------------
Update Information:
- update to recent upstream 5.1.6 release.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 7 2019 Ian Kent <ikent(a)redhat.com> - 1:5.1.4-41
- add krb5-devel BuildRequires.
* Mon Oct 7 2019 Ian Kent <ikent(a)redhat.com> - 1:5.1.4-40
- support strictexpire mount option.
- add NULL check for get_addr_string() return.
- use malloc(3) in spawn.c.
- add mount_verbose configuration option.
- optionally log mount requestor process info.
- log mount call arguments if mount_verbose is set.
- add ignore mount option.
- Fix NFS mount from IPv6 addresses.
- make expire remaining log level debug.
- allow period following macro in selector value.
- fix macro expansion in selector values.
- fix typing errors.
- Explain /etc/auto.master.d usage.
- plus map includes are only allowed in file sources.
- Update README.
- fix additional typing errors.
- update autofs(8) offset map entry update description.
- Increase group buffer size geometrically.
- also use strictexpire for offsets.
- remove unused function has_fstab_option().
- remove unused function reverse_mnt_list().
- remove a couple of old debug messages.
- fix amd entry memory leak.
- fix unlink_mount_tree() not umounting mounts.
- use ignore option for offset mounts as well.
- add config option for "ignore" mount option.
- use bit flags for autofs mount types in mnt_list.
- use mp instead of path in mnt_list entries.
- always use PROC_MOUNTS to make mount lists.
- add glibc getmntent_r().
- use local getmntent_r in table_is_mounte.d().
- refactor unlink_active_mounts() in direct.c.
- don't use tree_is_mounted() for mounted checks.
- use single unlink_umount_tree() for both direct and indirect mounts.
- move unlink_mount_tree() to lib/mounts.c
- use local_getmntent_r() for unlink_mount_tree().
- use local getmntent_r() in get_mnt_list().
- use local getmntent_r() in tree_make_mnt_list().
- fix missing initialization of autofs_point flags.
* Mon Oct 7 2019 Ian Kent <ikent(a)redhat.com> - 1:5.1.4-30
- mark removed cache entry negative.
- set bind mount as propagation slave.
- add master map pseudo options for mount propagation.
- fix incorrect locking in sss lookup.
- fix amd parser opts option handling.
- fix possible NULL pointer dereference in get_defaults_entry().
- fix indent in automount(8) man page.
- remove autofs4 module load code.
- add NULL check in prepare_attempt_prefix().
- update build info with systemd.
- use flags for startup boolean options.
- move close stdio descriptors to become_daemon().
- add systemd service command line option.
- refactor negative map entry check.
- remove unused function dump_master().
- remove unused function dump_state_queue().
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1758943 - Update autofs to upstream 5.1.6 release
https://bugzilla.redhat.com/show_bug.cgi?id=1758943
--------------------------------------------------------------------------------
================================================================================
colobot-0.1.12-3.fc29 (FEDORA-2019-225cae6b8c)
A video game that teaches programming in a fun way
--------------------------------------------------------------------------------
Update Information:
Fix the game crashing during player name selection for some locales
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 7 2019 Artur Iwicki <fedora(a)svgames.pl> - 0.1.12-3
- Make the game always use "Player" as the default player name
(fixes the game crashing under certain system locale settings)
- Rename the .desktop file to match the .appdata.xml file name
--------------------------------------------------------------------------------
================================================================================
knot-resolver-4.2.2-1.fc29 (FEDORA-2019-01de5e9ab3)
Caching full DNS Resolver
--------------------------------------------------------------------------------
Update Information:
- update to upstream version 4.2.2
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 7 2019 Tomas Krizek <tomas.krizek(a)nic.cz> - 4.2.2-1
- update to new upstream version 4.2.2
* Thu Sep 26 2019 Tomas Krizek <tomas.krizek(a)nic.cz> - 4.2.1-1
- update to new upstream version 4.2.1
--------------------------------------------------------------------------------
================================================================================
linuxconsoletools-1.7.0-1.fc29 (FEDORA-2019-c4725fd59f)
Tools for connecting joysticks & legacy devices to the kernel's input subsystem
--------------------------------------------------------------------------------
Update Information:
Update to 1.7.0.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 7 2019 Vasiliy N. Glazov <vascom2(a)gmail.com> - 1.7.0-1
- Update to 1.7.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1758896 - linuxconsoletools-1.7.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1758896
--------------------------------------------------------------------------------
================================================================================
nnn-2.7-1.fc29 (FEDORA-2019-fb52708e5c)
The missing terminal file browser for X
--------------------------------------------------------------------------------
Update Information:
Release 2.7
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 7 2019 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 2.7-1
- Release 2.7
--------------------------------------------------------------------------------
================================================================================
octave-mcxlab-0.9.5-1.fc29 (FEDORA-2019-0d03b32c8d)
MCXLAB - A GPU Monte Carlo 3-D photon transport simulator for MATLAB/Octave
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1758622 - Review Request: octave-mcxlab - A GPU Monte Carlo 3-D photon
transport simulator for MATLAB/Octave
https://bugzilla.redhat.com/show_bug.cgi?id=1758622
--------------------------------------------------------------------------------
================================================================================
openhantek-2.15-1.fc29 (FEDORA-2019-afc404ac17)
Hantek and compatible USB digital signal oscilloscope
--------------------------------------------------------------------------------
Update Information:
Update to 2.15.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 7 2019 Vasiliy N. Glazov <vascom2(a)gmail.com> - 2.15-1
- Update to 2.15
--------------------------------------------------------------------------------
================================================================================
php-pecl-memcached-3.1.4-1.fc29 (FEDORA-2019-e9bfe1145c)
Extension to work with the Memcached caching daemon
--------------------------------------------------------------------------------
Update Information:
**Version 3.1.4** Fixes: * Test on PHP 7.4 as well as 8.0 (#440) * Fix
segfault for unknown memcached flags (#431) * Update documented defaults for
sess_lock_retries (#432) * Remove stray instances of the TSRMLS_CC macro for
PHP 8 compatibility (#444)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 7 2019 Remi Collet <remi(a)remirepo.net> - 3.1.4-1
- Update to 3.1.4
--------------------------------------------------------------------------------
================================================================================
proxysql-1.3.7-12.fc29 (FEDORA-2019-9915f10552)
A high-performance MySQL proxy
--------------------------------------------------------------------------------
Update Information:
fix man page path
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 7 2019 Filip Janus <fjanus(a)redhat.com> - 1.3.7-12
- Fix man page path (bug #1722350)
* Thu Sep 12 2019 Petr Pisar <ppisar(a)redhat.com> - 1.3.7-11
- Build-require zlib-devel (bug #1727136)
* Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.7-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Sat Feb 2 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.7-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1722350 - proxysql installs man page in a bogus sub-directory hierarchy
https://bugzilla.redhat.com/show_bug.cgi?id=1722350
--------------------------------------------------------------------------------
================================================================================
reportd-0.7.1-1.fc29 (FEDORA-2019-cfe9967100)
Service reporting org.freedesktop.Problems2 entries
--------------------------------------------------------------------------------
Update Information:
* Fix critical warning at the end of reporting * Fix completed state
propagation
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 7 2019 Ernestas Kulik <ekulik(a)redhat.com> - 0.7.1-1
- new upstream release: 0.7.1
--------------------------------------------------------------------------------
================================================================================
rubygem-rouge-3.11.1-1.fc29 (FEDORA-2019-f451ae8644)
Pure-ruby colorizer based on pygments
--------------------------------------------------------------------------------
Update Information:
Update to version 3.11.1. Release notes:
https://github.com/rouge-
ruby/rouge/blob/v3.11.1/CHANGELOG.md
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 7 2019 Fabio Valentini <decathorpe(a)gmail.com> - 3.11.1-1
- Update to version 3.11.1.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1757514 - rubygem-rouge-3.11.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1757514
--------------------------------------------------------------------------------
================================================================================
runc-1.0.0-95.rc9.gitc1485a1.fc29 (FEDORA-2019-3fc86a518b)
CLI for running Open Containers
--------------------------------------------------------------------------------
Update Information:
Resolves: #1757214, #1757290 - CVE-2019-16884 ---- add patch for cgroupsv2
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 7 2019 Lokesh Mandvekar <lsm5(a)fedoraproject.org> -
2:1.0.0-95.rc9.gitc1485a1
- Resolves: #1757214, #1757290 - CVE-2019-16884
- bump to v1.0.0-rc9
* Thu Oct 3 2019 Lokesh Mandvekar <lsm5(a)fedoraproject.org> -
2:1.0.0-94.dev.gitb9b6cc6
- add patch for cgroupsv2
- From: Giuseppe Scrivano <gscrivan(a)redhat.com>
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1757214 - CVE-2019-16884 runc: AppArmor can be bypassed by a malicious image
that specifies a volume at /proc
https://bugzilla.redhat.com/show_bug.cgi?id=1757214
--------------------------------------------------------------------------------
================================================================================
vit-2.0.0-3.fc29 (FEDORA-2019-001ac0b486)
Visual Interactive Taskwarrior full-screen terminal interface
--------------------------------------------------------------------------------
Update Information:
v2.0.0 released ---------------------- Complete ground up rewrite in Python,
feature-complete with VIT 1.x. The files mentioned in the changes below are
included in the Fedora package in `/usr/share/doc/vit/` New features:
=============== - Advanced tab completion - Per-column colorization with
markers (see COLOR.md) - Intelligent sub-project indenting -
Multiple/customizable themes (see CUSTOMIZE.md) - Override/customize column
formatters (see CUSTOMIZE.md) - Fully-customizable key bindings (see
CUSTOMIZE.md) - Table-row striping - Show version/context/report execution time
in status area - Customizable config dir (see CUSTOMIZE.md) - Comand line bash
completion wrapper (see INSTALL.md) - Context support - This release also
changes the software license from GPL to MIT. Breaking changes:
================== - Configuration has been moved from ${HOME}/.vitrc to
${HOME}/.vit/config.ini -- the location of the config directory can be
customized, see CUSTOMIZE.md for details. - The format of the configuration file
has changed, customizations in the legacy .vitrc file will need to be manually
ported to the new format. The config.sample.ini file is heavily commented, and
should contain reference to everything you need to migrate the legacy
configuration. If no config.ini exists in the VIT configuration directory, VIT
will offer the option to install the sample config upon startup -- this is the
easiest way to get started with porting and customization. - The method of
denotating tasks has changed. It is now mapped to the ACTION_TASK_DENOTATE core
action, which in the default keybindings is triggered by <Shift>e when the task
is highlighted. - VIT 1.3 supports Taskd sync via the s keybinding, which was
undocumented. VIT 2.x properly documents this functionality, and moves it to the
keybinding <Shift>s by default. - The burndown configuration option and display
has been removed -- it may be added again in a future release or via plugin
functionality. ---- New version, now in Python! Testing
requested/appreciated/required. If you find bugs, please report them upstream
at:
https://github.com/scottkosty/vit/issues Visual Interactive Taskwarrior
full-screen terminal interface. VIT 2.x is currently in beta release, and is
looking for testers/contributors. The featureset of VIT 1.x has been fully
implemented, and the author is already using it for everyday interface with
Taskwarrior. Note: This update will not be pushed automatically to stable, to
ensure it gets enough testing.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 7 2019 Ankur Sinha <ankursinha AT fedoraproject DOT org> - 2.0.0-3
- Include upgrade from github repo---not included in pypi tarball
* Mon Oct 7 2019 Ankur Sinha <ankursinha AT fedoraproject DOT org> - 2.0.0-2
- Update license
- Add UPGRADE.md
* Mon Oct 7 2019 Ankur Sinha <ankursinha AT fedoraproject DOT org> - 2.0.0-1
- Update to 2.0.0
* Thu Oct 3 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 2.0-0.8.0b2
- Rebuilt for Python 3.8.0rc1 (#1748018)
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 2.0-0.7.0b2
- Rebuilt for Python 3.8
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 2.0-0.6.0b2
- Rebuilt for Python 3.8
* Mon Aug 19 2019 Ankur Sinha <ankursinha AT fedoraproject DOT org> - 2.0-0.5.0b2
- Update to beta 2
- Drop patch, merged upstream
- Remove requirements file, now included in pypi tar
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 2.0-0.4.0b1
- Rebuilt for Python 3.8
* Sun Aug 4 2019 Ankur Sinha <ankursinha AT fedoraproject DOT org> - 2.0-0.3.0b1
- Fix bash completion
* Sun Aug 4 2019 Ankur Sinha <ankursinha AT fedoraproject DOT org> - 2.0-0.2.0b1
- Add patch to fix import bug
- Correct tests
* Sun Aug 4 2019 Ankur Sinha <ankursinha AT fedoraproject DOT org> - 2.0-0.1.0b1
- Update to new version
- Moved to Python
* Sat Jul 27 2019 Fedora Release Engineering <releng(a)fedoraproject.org> -
1.3-0.3.beta1
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Sun Feb 3 2019 Fedora Release Engineering <releng(a)fedoraproject.org> -
1.3-0.2.beta1
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------