The following Fedora 29 Security updates need testing:
Age URL
130
https://bodhi.fedoraproject.org/updates/FEDORA-2018-51ce232320
xerces-c27-2.7.0-28.fc29
58
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b89746cb9b
tomcat-9.0.13-1.fc29
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ac70292cfc
rdesktop-1.8.4-2.fc29
11
https://bodhi.fedoraproject.org/updates/FEDORA-2019-614f1cd5a8
community-mysql-8.0.14-1.fc29
11
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b0bd3c604a
mingw-poppler-0.67.0-3.fc29
10
https://bodhi.fedoraproject.org/updates/FEDORA-2019-f44f095639
pdns-recursor-4.1.9-1.fc29
10
https://bodhi.fedoraproject.org/updates/FEDORA-2019-73cbc02e14
perl-Email-Address-List-0.06-1.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6cc827b7a1 podofo-0.9.6-5.fc29
mingw-podofo-0.9.6-7.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-df57551f6d
bouncycastle-1.61-1.fc29 eclipse-jgit-5.2.0-4.fc29 eclipse-linuxtools-7.1.0-3.fc29
jackson-annotations-2.9.8-1.fc29 jackson-bom-2.9.8-1.fc29 jackson-core-2.9.8-1.fc29
jackson-databind-2.9.8-1.fc29 jackson-dataformat-xml-2.9.8-1.fc29
jackson-dataformats-binary-2.9.8-1.fc29 jackson-dataformats-text-2.9.8-1.fc29
jackson-datatype-jdk8-2.9.8-1.fc29 jackson-datatype-joda-2.9.8-1.fc29
jackson-datatypes-collections-2.9.8-1.fc29 jackson-jaxrs-providers-2.9.8-1.fc29
jackson-module-jsonSchema-2.9.8-1.fc29 jackson-modules-base-2.9.8-1.fc29
jackson-parent-2.9.1.2-1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-af3d726d38
gsi-openssh-7.9p1-5.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-49f80a78bc
mingw-sqlite-3.26.0.0-1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-095c760511
python-markdown2-2.3.7-1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-0723b8f333
netmask-2.4.4-1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-032b36306f
mosquitto-1.5.6-1.fc29
The following Fedora 29 Critical Path updates have yet to be approved:
Age URL
60
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3d43e7dd21
SLOF-0.1.git20180702-2.fc29
11
https://bodhi.fedoraproject.org/updates/FEDORA-2019-08018846dd lorax-29.26-1.fc29
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-0d0dab0484
iproute-4.20.0-1.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3aa0fbffb4
ibus-1.5.19-16.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-89033102c0
libidn2-2.1.1a-1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-7285a847c4
libproxy-0.4.15-10.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-93144c6642
kernel-headers-4.20.7-200.fc29 kernel-4.20.7-200.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-770bc0bbfc
nss-pem-1.0.5-1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-0576ad8060
openssh-7.9p1-4.fc29
The following builds have been pushed to Fedora 29 updates-testing
R-Rmpfr-0.7.2-1.fc29
babl-0.1.62-1.fc29
botan2-2.9.0-1.fc29
feedreader-2.8.1-1.fc29
golang-github-burntsushi-locker-0-0.1.20190210gita6e239e.fc29
golang-github-mitchellh-hashstructure-1.0.0-1.fc29
golang-github-spf13-viper-1.3.1-2.fc29
jglobus-2.1.0-13.fc29
kf5-kauth-5.54.0-2.fc29
libaec-1.0.3-3.fc29
mellowplayer-3.5.2-1.20190210git54a1714.fc29
nheko-0.6.3-1.fc29
pysnmp-4.4.9-1.fc29
safekeep-1.4.5-1.fc29
wpewebkit-2.22.4-1.fc29
Details about builds:
================================================================================
R-Rmpfr-0.7.2-1.fc29 (FEDORA-2019-ebe53c51cc)
R MPFR - Multiple Precision Floating-Point Reliable
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sat Feb 9 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.7.2-1
- Update to latest version
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.7.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1668517 - R-Rmpfr-0.7-2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1668517
--------------------------------------------------------------------------------
================================================================================
babl-0.1.62-1.fc29 (FEDORA-2019-318c40d295)
A dynamic, any to any, pixel format conversion library
--------------------------------------------------------------------------------
Update Information:
Update to 0.1.62
--------------------------------------------------------------------------------
ChangeLog:
* Sat Feb 9 2019 Debarshi Ray <rishi(a)fedoraproject.org> - 0.1.62-1
- version 0.1.62
--------------------------------------------------------------------------------
================================================================================
botan2-2.9.0-1.fc29 (FEDORA-2019-e0f5a82082)
Crypto and TLS for C++11
--------------------------------------------------------------------------------
Update Information:
Update to 2.9.0 including security fix for CVE-2018-20187
--------------------------------------------------------------------------------
ChangeLog:
* Sat Feb 9 2019 Benjamin Kircher <benjamin.kircher(a)gmail.com> - 2.9.0-1
- Update to 2.9.0
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.8.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1664598 - CVE-2018-20187 botan: Side channel possible during ECC generation
https://bugzilla.redhat.com/show_bug.cgi?id=1664598
--------------------------------------------------------------------------------
================================================================================
feedreader-2.8.1-1.fc29 (FEDORA-2019-639c9ecfa3)
RSS desktop client
--------------------------------------------------------------------------------
Update Information:
Update to 2.8.1
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 10 2019 Pete Walter <pwalter(a)fedoraproject.org> - 2.8.1-1
- Update to 2.8.1
--------------------------------------------------------------------------------
================================================================================
golang-github-burntsushi-locker-0-0.1.20190210gita6e239e.fc29 (FEDORA-2019-1f9a9c2b5f)
Simple package for conveniently using named read/write locks
--------------------------------------------------------------------------------
Update Information:
Initial package of
github.com/burntsushi/locker for Go
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1666221 - Review Request: golang-github-burntsushi-locker - Simple package
for conveniently using named read/write locks
https://bugzilla.redhat.com/show_bug.cgi?id=1666221
--------------------------------------------------------------------------------
================================================================================
golang-github-mitchellh-hashstructure-1.0.0-1.fc29 (FEDORA-2019-d36f1807a8)
Get hash values for arbitrary values in Go
--------------------------------------------------------------------------------
Update Information:
Initial package of
github.com/mitchellh/hashstructure for Go
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1666285 - Review Request: golang-github-mitchellh-hashstructure - Get hash
values for arbitrary values in Go
https://bugzilla.redhat.com/show_bug.cgi?id=1666285
--------------------------------------------------------------------------------
================================================================================
golang-github-spf13-viper-1.3.1-2.fc29 (FEDORA-2019-0d94d7e2d9)
Go configuration with fangs
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Fri Jan 18 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 1.3.1-1
- Update to latest version
* Tue Oct 23 2018 Nicolas Mailhot <nim(a)fedoraproject.org>
- 1.0.0-4
- redhat-rpm-config-123 triggers bugs in gosetup, remove it from Go spec files as it���s
just an alias
-
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.o...
--------------------------------------------------------------------------------
================================================================================
jglobus-2.1.0-13.fc29 (FEDORA-2019-22a9a32dd8)
Globus Java client libraries
--------------------------------------------------------------------------------
Update Information:
Disallow TLS 1.1.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 10 2019 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 2.1.0-13
- Only allow TLSv1 and TLSv1.2 (not TLSv1.1)
- Remove unused FORCE_SSLV3_AND_CONSTRAIN_CIPHERSUITES_FOR_GRAM
- Adapt to changes in bouncycastle 1.61
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.1.0-12
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
kf5-kauth-5.54.0-2.fc29 (FEDORA-2019-19b1d53695)
KDE Frameworks 5 Tier 2 integration module to perform actions as privileged user
--------------------------------------------------------------------------------
Update Information:
Backport security fix for CVE-2019-7443
--------------------------------------------------------------------------------
ChangeLog:
* Sat Feb 9 2019 Rex Dieter <rdieter(a)fedoraproject.org> - 5.54.0-2
- (branch) Remove support for passing gui QVariants to KAuth helpers
--------------------------------------------------------------------------------
================================================================================
libaec-1.0.3-3.fc29 (FEDORA-2019-27d58df9d9)
Adaptive Entropy Coding library
--------------------------------------------------------------------------------
Update Information:
Version bump to 1.0.3
--------------------------------------------------------------------------------
ChangeLog:
* Sat Feb 9 2019 Christoph Junghans <junghans(a)votca.org> - 1.0.3-3
- Include missing header
* Tue Feb 5 2019 Christoph Junghans <junghans(a)votca.org> - 1.0.3-2
- Enable all tests
* Mon Feb 4 2019 Christoph Junghans <junghans(a)votca.org> - 1.0.3-1
- Version bump to 1.0.3 (bug #1672326)
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.2-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1672326 - libaec-1.0.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1672326
--------------------------------------------------------------------------------
================================================================================
mellowplayer-3.5.2-1.20190210git54a1714.fc29 (FEDORA-2019-bce126b398)
Cloud music integration for your desktop
--------------------------------------------------------------------------------
Update Information:
Update to mellowplayer-3.5.2-1.20190210git54a1714 ---- - Update to
3.5.1-1.20190206git402e336 - Add patch for F30 %%{name}-suppress-compiler-
warnings.patch
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 10 2019 Martin Gansser <martinkg(a)fedoraproject.org> -
3.5.2-1.20190206git54a1714
- Update to 3.5.2-1.20190206git54a1714
* Thu Feb 7 2019 Martin Gansser <martinkg(a)fedoraproject.org> -
3.5.1-1.20190206git402e336
- Update to 3.5.1-1.20190206git402e336
- Add patch for F30 %{name}-suppress-compiler-warnings.patch
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> -
3.5.0-2.20181227git40ef9dd
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
nheko-0.6.3-1.fc29 (FEDORA-2019-48dd45ea6f)
Desktop client for the Matrix protocol
--------------------------------------------------------------------------------
Update Information:
Features ======================= * Room notifications now distinguish between
general and user mentions by using different colors * User names are now
colored based on both the theme and a hash from their user id. * Add font
selection preference * Restore emoji picker without forcing font. Improvements
========================== * Fix room joining issue by escaping (thanks
rnhmjoj) * Mild tweaks to the dark and light themes * Add paragraph tags back
to markdown, fixing #2 / mujx#438 * Tweak author text to help differentiate it
from the message text * Some Russian translations have been added/fixed (thanks
tim77) * Partially address some build issues (related to #10)
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 10 2019 Vitaly Zaitsev <vitaly(a)easycoding.org> - 0.6.3-1
- Switched upstream to a new maintained fork.
- Updated to version 0.6.3.
* Thu Jan 31 2019 Kalev Lember <klember(a)redhat.com> - 0.6.2-4
- Rebuilt for Boost 1.69
* Sat Jan 5 2019 Vitaly Zaitsev <vitaly(a)easycoding.org> - 0.6.2-3
- Rebuilt due to libolm update.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1634779 - [abrt] nheko: QListData::shared_null(): nheko killed by SIGILL
https://bugzilla.redhat.com/show_bug.cgi?id=1634779
[ 2 ] Bug #1674237 - nheko-0.6.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1674237
--------------------------------------------------------------------------------
================================================================================
pysnmp-4.4.9-1.fc29 (FEDORA-2019-689f18525d)
An SNMP engine written in Python
--------------------------------------------------------------------------------
Update Information:
Updated to new upstream version 4.4.9
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 10 2019 Fabian Affolter <mail(a)fabian-affolter.ch> - 4.4.9-1
- Updated to new upstream version 4.4.9
* Sat Feb 2 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.4.8-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Mon Jan 7 2019 Fabian Affolter <mail(a)fabian-affolter.ch> - 4.4.8-1
- Updated to new upstream version 4.4.8
--------------------------------------------------------------------------------
================================================================================
safekeep-1.4.5-1.fc29 (FEDORA-2019-187508fff6)
The SafeKeep backup system
--------------------------------------------------------------------------------
Update Information:
Latest upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 10 2019 Frank Crawford <frank(a)crawford.emu.id.au> 1.4.5-1
- Latest upstream release
* Fri Feb 8 2019 Frank Crawford <frank(a)crawford.emu.id.au> - 1.4.4-8
- Correct FTBS error due to default in F30 as python3, replace with python2
* Sat Feb 2 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.4-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
wpewebkit-2.22.4-1.fc29 (FEDORA-2019-da5af25ac3)
A WebKit port optimized for low-end devices
--------------------------------------------------------------------------------
Update Information:
Adding another patch so the package properly installs
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1674069 - wpewebkit-2.22.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1674069
--------------------------------------------------------------------------------