The following Fedora 29 Security updates need testing:
Age URL
268
https://bodhi.fedoraproject.org/updates/FEDORA-2019-fa5843e0e1
asterisk-16.2.1-1.fc29
254
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c84f291592
WALinuxAgent-2.2.38-1.fc29
249
https://bodhi.fedoraproject.org/updates/FEDORA-2019-7528388823
chicken-5.0.0-2.fc29
209
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9839aded3f
python-gnupg-0.4.4-1.fc29
205
https://bodhi.fedoraproject.org/updates/FEDORA-2019-35cb5a4785
kubernetes-1.13.5-1.fc29
143
https://bodhi.fedoraproject.org/updates/FEDORA-2019-32f7cd9b66
dosbox-0.74.3-2.fc29
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-1a16af2158
thunderbird-68.2.2-1.fc29
8
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c5628ced32
libidn2-2.3.0-1.fc29
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-fd2a963f4b
libarchive-3.3.3-7.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4481085b0d
sqlite-3.26.0-5.fc29
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9c636a4a0a
phpMyAdmin-4.9.2-1.fc29
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-dd0e74915a
djvulibre-3.5.27-15.fc29
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-296159c5c9 jhead-3.04-1.fc29
The following Fedora 29 Critical Path updates have yet to be approved:
Age URL
181
https://bodhi.fedoraproject.org/updates/FEDORA-2019-06a2d1c7fb
anaconda-29.24.7-3.fc29
152
https://bodhi.fedoraproject.org/updates/FEDORA-2019-583d9d5a56
mutter-3.30.2-3.fc29
138
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6f13c38d0d
python-urllib3-1.24.3-2.fc29
135
https://bodhi.fedoraproject.org/updates/FEDORA-2019-62e681b68b ipset-7.2-1.fc29
30
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3bdedf56fb sssd-2.2.2-3.fc29
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-1a16af2158
thunderbird-68.2.2-1.fc29
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3c974c4e2a satyr-0.29-2.fc29
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-14dc54e0d6
firefox-70.0.1-4.fc29
8
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c5628ced32
libidn2-2.3.0-1.fc29
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-fd2a963f4b
libarchive-3.3.3-7.fc29
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-f0e074754a
pcre2-10.33-16.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4481085b0d
sqlite-3.26.0-5.fc29
The following builds have been pushed to Fedora 29 updates-testing
R-prettydoc-0.3.1-1.fc29
R-rlang-0.4.2-1.fc29
clamav-0.101.5-1.fc29
golang-github-briandowns-spinner-1.8.0-1.fc29
milkytracker-1.02.00-3.fc29
minder-1.5.1-1.fc29
pspg-2.6.0-1.fc29
Details about builds:
================================================================================
R-prettydoc-0.3.1-1.fc29 (FEDORA-2019-fc7ded8ce3)
Creating Pretty Documents from R Markdown
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 23 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.3.1-1
- Update to latest version
* Sat Aug 17 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.3.0-1
- Update to latest version
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.1-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1775905 - R-prettydoc-0.3.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1775905
--------------------------------------------------------------------------------
================================================================================
R-rlang-0.4.2-1.fc29 (FEDORA-2019-41ad79c018)
Functions for Base Types and Core R and 'Tidyverse' Features
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 23 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.4.2-1
- Update to latest version
* Thu Jun 27 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.4.0-1
- Update to latest version
* Sun Apr 7 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.3.4-1
- Update to latest version
* Mon Apr 1 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.3.3-1
- Update to latest version
* Fri Mar 22 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.3.2-1
- Update to latest version
* Fri Feb 15 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.3.1-1
- Update to latest version
- Enable tests
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1775914 - R-rlang-0.4.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1775914
--------------------------------------------------------------------------------
================================================================================
clamav-0.101.5-1.fc29 (FEDORA-2019-ce438e7857)
End-user tools for the Clam Antivirus scanner
--------------------------------------------------------------------------------
Update Information:
- Drop clamd(a)scan.service file (bz#1725810) ClamAV 0.101.5 is a security patch
release that addresses the following issues. - CVE-2019-15961:
A Denial-of-Service (DoS) vulnerability may occur when scanning a specially
crafted email file as a result of excessively long scan times. The issue is
resolved by implementing several maximums in parsing MIME messages and by
optimizing use of memory allocation. - Added the zip scanning improvements
found in v0.102.0 where it scans files using zip records from a sorted catalogue
which provides deduplication of file records resulting in faster extraction and
scan time and reducing the likelihood of alerting on non-malicious duplicate
file entries as overlapping files. - Signature load time is significantly
reduced by changing to a more efficient algorithm for loading signature patterns
and allocating the AC trie. Patch courtesy of Alberto Wu. - Introduced a new
configure option to statically link libjson-c with libclamav. Static linking
with libjson is highly recommended to prevent crashes in applications that use
libclamav alongside another JSON parsing library. - Null-dereference fix in
email parser when using the --gen-json metadata option. ---- Add
TimeoutStartSec=420 to clamd@.service to match upstream
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 23 2019 Orion Poplawski <orion(a)nwra.com> - 0.101.5-1
- Update to 0.101.5 (CVE-2019-15961) (bz#1775550)
* Mon Nov 18 2019 Orion Poplawski <orion(a)nwra.com> - 0.101.4-3
- Drop clamd(a)scan.service file (bz#1725810)
- Change /var/run to /run
* Mon Nov 18 2019 Orion Poplawski <orion(a)nwra.com> - 0.101.4-2
- Add TimeoutStartSec=420 to clamd@.service to match upstream (bz#1764835)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1631525 - clamav: clamscan --get-json does not output JSON
https://bugzilla.redhat.com/show_bug.cgi?id=1631525
[ 2 ] Bug #1775550 - Request to build clamav 0.101.5 for EPEL 7
https://bugzilla.redhat.com/show_bug.cgi?id=1775550
[ 3 ] Bug #1725810 - /usr/lib/systemd/system/clamd@scan.service:1: .include directives
are deprecated
https://bugzilla.redhat.com/show_bug.cgi?id=1725810
[ 4 ] Bug #1764835 - clamd at 100% CPU and SystemD keeps restarting clamd
https://bugzilla.redhat.com/show_bug.cgi?id=1764835
--------------------------------------------------------------------------------
================================================================================
golang-github-briandowns-spinner-1.8.0-1.fc29 (FEDORA-2019-3da1c13ca4)
Go package providing a terminal spinner/progress indicator
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 24 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 1.8.0-1
- Update to latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1775324 - golang-github-briandowns-spinner-1.8.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1775324
--------------------------------------------------------------------------------
================================================================================
milkytracker-1.02.00-3.fc29 (FEDORA-2019-0772faf79f)
Module tracker software for creating music
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2019-14464
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 24 2019 Joonas Saraj��rvi <muep(a)iki.fi> - 1.02.00-3
- Add security fix for CVE-2019-14464 (rhbz 1771387 1771388)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1771387 - CVE-2019-14464 milkytracker: heap-based buffer overflow in
XMFile::read in XMFile.cpp
https://bugzilla.redhat.com/show_bug.cgi?id=1771387
--------------------------------------------------------------------------------
================================================================================
minder-1.5.1-1.fc29 (FEDORA-2019-8305186d0c)
Mind-mapping application
--------------------------------------------------------------------------------
Update Information:
Bugfix
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 24 2019 Artem Polishchuk <ego.cordatus(a)gmail.com> - 1.5.1-1
- Update to 1.5.1
--------------------------------------------------------------------------------
================================================================================
pspg-2.6.0-1.fc29 (FEDORA-2019-75ffd3b162)
A unix pager optimized for psql
--------------------------------------------------------------------------------
Update Information:
new upstream release, per release notes:
https://github.com/okbob/pspg/releases/tag/2.6.0 ---- new upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 24 2019 Pavel Raiskup <praiskup(a)redhat.com> - 2.6.0-1
- new upstream release, per release notes:
https://github.com/okbob/pspg/releases/tag/2.6.0
* Tue Nov 19 2019 Pavel Raiskup <praiskup(a)redhat.com> - 2.5.5-1
- new upstream release, per release notes:
https://github.com/okbob/pspg/releases/tag/2.5.3
https://github.com/okbob/pspg/releases/tag/2.5.4
https://github.com/okbob/pspg/releases/tag/2.5.5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1775977 - pspg-2.6.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1775977
[ 2 ] Bug #1768349 - pspg-2.5.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1768349
--------------------------------------------------------------------------------