The following Fedora 29 Security updates need testing:
Age URL
200
https://bodhi.fedoraproject.org/updates/FEDORA-2019-fa5843e0e1
asterisk-16.2.1-1.fc29
186
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c84f291592
WALinuxAgent-2.2.38-1.fc29
181
https://bodhi.fedoraproject.org/updates/FEDORA-2019-7528388823
chicken-5.0.0-2.fc29
140
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9839aded3f
python-gnupg-0.4.4-1.fc29
136
https://bodhi.fedoraproject.org/updates/FEDORA-2019-35cb5a4785
kubernetes-1.13.5-1.fc29
74
https://bodhi.fedoraproject.org/updates/FEDORA-2019-32f7cd9b66
dosbox-0.74.3-2.fc29
18
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e00c65ec6f httpd-2.4.41-1.fc29
mod_md-2.0.8-3.fc29
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-eb1e982800
samba-4.9.13-0.fc29
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8a7dfdf1f3
systemd-239-14.git33ccd62.fc29
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-bd0d5f0ea7
libgcrypt-1.8.5-1.fc29
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ce6c6de3cc
qbittorrent-4.1.7-1.fc29
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-5dc275c9f2
python34-3.4.10-3.fc29
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9a0a7c0986
compat-openssl10-1.0.2o-7.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b629e3b97f bird-1.6.8-1.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4c0d6e1784
openconnect-8.05-1.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-0eb6d51f81
dino-0.0-0.12.20190912.git.a96c801.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ee52ef0cdc
nbdkit-1.12.7-1.fc29
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-32c48d9a5f
thunderbird-68.1.0-1.fc29
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-f2a520135e
curl-7.61.1-12.fc29
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-5bf13218a5
ibus-1.5.19-17.fc29
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-fb23eccc03
jackson-annotations-2.9.9-1.fc29 jackson-bom-2.9.9-1.fc29 jackson-core-2.9.9-1.fc29
jackson-databind-2.9.9.3-1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-672ae0f060 expat-2.2.8-1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d51641f152
openssl-1.1.1d-1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-5c794ec7ba
java-1.8.0-openjdk-aarch32-1.8.0.222.b10-1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-a6bc0fb143
SDL2_image-2.0.5-2.fc29
The following Fedora 29 Critical Path updates have yet to be approved:
Age URL
112
https://bodhi.fedoraproject.org/updates/FEDORA-2019-06a2d1c7fb
anaconda-29.24.7-3.fc29
110
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4cefd3161a
nfs-utils-2.3.3-4.rc2.fc29
83
https://bodhi.fedoraproject.org/updates/FEDORA-2019-583d9d5a56
mutter-3.30.2-3.fc29
69
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6f13c38d0d
python-urllib3-1.24.3-2.fc29
67
https://bodhi.fedoraproject.org/updates/FEDORA-2019-62e681b68b ipset-7.2-1.fc29
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-bd0d5f0ea7
libgcrypt-1.8.5-1.fc29
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-fe96cc593b
python-mako-1.1.0-1.fc29
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-5fe7cfd056
librsvg2-2.44.15-1.fc29
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8a7dfdf1f3
systemd-239-14.git33ccd62.fc29
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-eb1e982800
samba-4.9.13-0.fc29
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b2964d9f81
zlib-1.2.11-17.fc29
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8140eeab71
python-productmd-1.22-1.fc29
11
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b77a07a0f1
fontconfig-2.13.1-9.fc29
11
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8532718f88 glibc-2.28-39.fc29
11
https://bodhi.fedoraproject.org/updates/FEDORA-2019-0755eb7d6d
vim-8.1.1991-2.fc29
11
https://bodhi.fedoraproject.org/updates/FEDORA-2019-a1ca83b86e
osinfo-db-20190905-1.fc29
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b0116bdbb1
epiphany-3.30.5-1.fc29
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-be0914c155
perl-5.28.2-435.fc29
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9a0a7c0986
compat-openssl10-1.0.2o-7.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d4dd43f749 dnf-4.2.5-5.fc29
libdnf-0.31.0-7.fc29
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-5bf13218a5
ibus-1.5.19-17.fc29
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-f2a520135e
curl-7.61.1-12.fc29
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-32c48d9a5f
thunderbird-68.1.0-1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d51641f152
openssl-1.1.1d-1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ec78e35d5f
selinux-policy-3.14.2-65.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-0df9161614
pcre2-10.33-14.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-672ae0f060 expat-2.2.8-1.fc29
The following builds have been pushed to Fedora 29 updates-testing
389-ds-base-1.4.0.28-1.fc29
buildah-1.11.2-2.git0bafbfe.fc29
ephemeral-5.3.0-1.fc29
fastbit-2.0.3-14.fc29
igt-gpu-tools-1.24-2.20190917gitc78b995.fc29
kernel-5.2.15-100.fc29
kernel-headers-5.2.15-100.fc29
libnbd-1.0.2-1.fc29
module-build-service-2.28.0-1.fc29
php-getid3-1.9.18-1.fc29
php-phpseclib-2.0.23-1.fc29
php-phpunit-php-code-coverage7-7.0.8-1.fc29
php-phpunit-php-token-stream3-3.1.1-1.fc29
python-catkin_lint-1.6.1-1.fc29
qownnotes-19.9.12-1.20190912gitc33c89f.fc29
shc-4.0.3-1.fc29
smcalc-1.0.1-2.fc29
sssd-2.2.2-1.fc29
Details about builds:
================================================================================
389-ds-base-1.4.0.28-1.fc29 (FEDORA-2019-23ddca9ca8)
389 Directory Server (base)
--------------------------------------------------------------------------------
Update Information:
Bump version to 1.4.0.28
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 17 2019 Mark Reynolds <mreynolds(a)redhat.com> - 1.4.0.28-1
- Bump version to 1.4.0.28
- Issue 50581 - ns-slapd crashes during ldapi search
- Issue 50499 - Audit fix - Update npm 'eslint-utils' version
- Issue 49624 - modrdn silently fails if DB deadlock occurs
- Issue 50542 - Fix crash in filter tests
- Issue 49232 - Truncate the message when buffer capacity is exceeded
- Issue 50542 - Entry cache contention during base search
- Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
- Issue 50536 - Audit log heading written to log after every update
- Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets
deleted
- Issue 50534 - CLI change schema edit subcommand to replace
- Issue 50534 - backport UI schema editing fix
--------------------------------------------------------------------------------
================================================================================
buildah-1.11.2-2.git0bafbfe.fc29 (FEDORA-2019-2072db2a76)
A command line tool used for creating OCI Images
--------------------------------------------------------------------------------
Update Information:
Autobuilt v1.11.2 ---- Autobuilt v1.11.1 ---- Autobuilt v1.11.0
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 17 2019 Lokesh Mandvekar (Bot) <lsm5+bot(a)fedoraproject.org> -
1.11.2-2.git0bafbfe
- bump to v1.11.2
- autobuilt 0bafbfe
* Thu Sep 12 2019 Lokesh Mandvekar (Bot) <lsm5+bot(a)fedoraproject.org> -
1.11.1-2.git413bd1f
- bump to v1.11.1
- autobuilt 413bd1f
* Thu Sep 5 2019 Lokesh Mandvekar (Bot) <lsm5+bot(a)fedoraproject.org> -
1.11.0-2.git2c5da1b
- bump to v1.11.0
- autobuilt 2c5da1b
--------------------------------------------------------------------------------
================================================================================
ephemeral-5.3.0-1.fc29 (FEDORA-2019-b29227a5ce)
Private-by-default, always-incognito browser
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 17 2019 Artem Polishchuk <ego.cordatus(a)gmail.com> - 5.3.0-1
- Update to 5.3.0
--------------------------------------------------------------------------------
================================================================================
fastbit-2.0.3-14.fc29 (FEDORA-2019-bf43f95f7a)
An Efficient Compressed Bitmap Index Technology
--------------------------------------------------------------------------------
Update Information:
Rebuild for dependency changes and license revision
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 11 2019 Philip Kovacs <pkdevel(a)yahoo.com> - 2.0.3-14
- Rebuild for unretire
- License is BSD only
* Fri Sep 6 2019 Philip Kovacs <pkdevel(a)yahoo.com> - 2.0.3-13
- Remove unnecessary build dependencies
- Improve packaging conformance
--------------------------------------------------------------------------------
================================================================================
igt-gpu-tools-1.24-2.20190917gitc78b995.fc29 (FEDORA-2019-b64856fdd9)
Test suite and tools for DRM drivers
--------------------------------------------------------------------------------
Update Information:
New git snapshot
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 17 2019 Lyude Paul <lyude(a)redhat.com> - 1.24-2.20190917gitc78b995
- Increase meson_test timeout, again, so that tests don't time out on s390x
* Tue Sep 17 2019 Lyude Paul <lyude(a)redhat.com> - 1.24-1.20190917gitc78b995
- Add new liboping dependency
- New git snapshot
--------------------------------------------------------------------------------
================================================================================
kernel-5.2.15-100.fc29 (FEDORA-2019-38d2e07507)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 5.2.15 stable kernel update contains a number of important fixes across the
tree.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 16 2019 Justin M. Forbes <jforbes(a)fedoraproject.org> - 5.2.15-100
- Linux v5.2.15
- Fixes rhbz 1751901
* Tue Sep 10 2019 Justin M. Forbes <jforbes(a)redhat.com> - 5.2.14-100
- Linux v5.2.14
* Fri Sep 6 2019 Justin M. Forbes <jforbes(a)fedoraproject.org> - 5.2.13-100
- Linux v5.2.13
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1750727 - CVE-2019-14835 kernel: vhost-net: guest to host kernel escape
during migration
https://bugzilla.redhat.com/show_bug.cgi?id=1750727
--------------------------------------------------------------------------------
================================================================================
kernel-headers-5.2.15-100.fc29 (FEDORA-2019-38d2e07507)
Header files for the Linux kernel for use by glibc
--------------------------------------------------------------------------------
Update Information:
The 5.2.15 stable kernel update contains a number of important fixes across the
tree.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 16 2019 Justin M. Forbes <jforbes(a)fedoraproject.org> - 5.2.15-100
- Linux v5.2.15
* Tue Sep 10 2019 Justin M. Forbes <jforbes(a)redhat.com> - 5.2.14-100
- Linux v5.2.14
* Fri Sep 6 2019 Justin M. Forbes <jforbes(a)fedoraproject.org> - 5.2.13-100
- Linux v5.2.13
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1750727 - CVE-2019-14835 kernel: vhost-net: guest to host kernel escape
during migration
https://bugzilla.redhat.com/show_bug.cgi?id=1750727
--------------------------------------------------------------------------------
================================================================================
libnbd-1.0.2-1.fc29 (FEDORA-2019-8107ac4399)
NBD client library in userspace
--------------------------------------------------------------------------------
Update Information:
New upstream version 1.0.2. Contains fix for NBD Protocol Downgrade Attack
(CVE-2019-14842). ---- Add upstream patch to fix nbdsh (for nbdkit tests).
---- New stable version 1.0.1.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 17 2019 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.2-1
- New upstream version 1.0.2.
- Remove patches which are upstream.
- Contains fix for NBD Protocol Downgrade Attack (CVE-2019-14842).
- Fix previous commit message.
* Thu Sep 12 2019 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.1-2
- Add upstream patch to fix nbdsh (for nbdkit tests).
- Fix interop tests on slow machines.
* Sun Sep 8 2019 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.1-1
- New stable version 1.0.1.
--------------------------------------------------------------------------------
================================================================================
module-build-service-2.28.0-1.fc29 (FEDORA-2019-6a3bd79eca)
The Module Build Service for Modularity
--------------------------------------------------------------------------------
Update Information:
##Changes: * Do not ignore building components to reset state when submit an
existing module build * Handle the conflicts between base module modular Koji
tags everytime * Fix DetachedInstanceError on local builds * Fix an issue where
components were reused from a module built with an incompatible platform * Add
"scratch_build_only_branches" configuration options to define the branches
from which only scratch builds can be submitted. * Do not check Greenwave gating
status for scratch builds. * Fix invalid date in module-build-macros when
building modules locally when non-US locale is used. * Fix --add-local-build
with MBS Resolver. * Fail the module build in case it buildrequires module build
which does not have all the MSE builds in failed or ready state. * Fix the
issue in component reuse code when it could reuse components from module build
built against older version of base module. * Allow the poller to clean up
module builds without arches. * Prevent overlapping RPMs from buildrequired base
modules from being available when using default modules. * Add an REST
endpoint to display log messages. * Allow reusing components from builds built
against compatible base module streams. * Serialize component build state trace
correctly if state is unset. * Return empty result if short=true is specified on
empty list of builds.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 17 2019 mprahl <mprahl(a)redhat.com> - 2.28.0-1
- new version
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 2.26.0-2
- Rebuilt for Python 3.8
* Tue Aug 13 2019 Jan Kaluza <jkaluza(a)redhat.com> - 2.26.0-1
- new version
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.25.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1752075 - Cannot build local module
https://bugzilla.redhat.com/show_bug.cgi?id=1752075
[ 2 ] Bug #1747332 - module-build-service-2.27.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747332
--------------------------------------------------------------------------------
================================================================================
php-getid3-1.9.18-1.fc29 (FEDORA-2019-b733381378)
The PHP media file parser
--------------------------------------------------------------------------------
Update Information:
**Version 1.9.18** - 2019-07-24 * bugfix (G:198) use native hash functions
instead of obsolete external binaries * bugfix (G:194) PHP 7.4 compatibility:
fix deprecated curly brace array access * bugfix (G:191) unsupported operand
types module.audio.ac3.php:763 * bugfix (G:189) false UTF-16 <BOM> and no
termination strings * bugfix (G:188) add support for DS2 v8 * bugfix (G:187)
RIFF.WAVE.scot parsing * bugfix (G:184) invalid regex pattern (ID3v1) * bugfix
(G:183) reduced information for GIF files with $option_extra_info=false * bugfix
(G:175) mp4 max buffer size * bugfix (G:174) TIFF parsing improvements * bugfix
(G:121) trailing nulls in ID3v2 strings * standardize "track" ->
"track_number"
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 17 2019 Remi Collet <remi(a)remirepo.net> - 1.9.18-1
- update to 1.9.18
- use git snapshot for sources
--------------------------------------------------------------------------------
================================================================================
php-phpseclib-2.0.23-1.fc29 (FEDORA-2019-b47fc76200)
PHP Secure Communications Library
--------------------------------------------------------------------------------
Update Information:
**Version 2.0.23** - 2019-09-16 - SSH2: fix regression for connecting to
servers with bad hostnames (#1405) ---- **Version 2.0.22** - 2019-09-15 -
SSH2: backport setPreferredAlgorithms() / getAlgorithmsNegotiated (#1156) - SSH2
/ SFTP: fix issues with ping() (#1402) - X509: IPs in nameconstraints extension
include netmask (#1387) - X509: fix issue with explicit time tags whose maps
expect implicit (#1388) - BigInteger: fix bug with toBytes() with fixed
precision negative numbers - fix PHP 7.4 deprecations
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 17 2019 Remi Collet <remi(a)remirepo.net> - 2.0.23-1
- update to 2.0.23
* Mon Sep 16 2019 Remi Collet <remi(a)remirepo.net> - 2.0.22-1
- update to 2.0.22
--------------------------------------------------------------------------------
================================================================================
php-phpunit-php-code-coverage7-7.0.8-1.fc29 (FEDORA-2019-32544133d2)
PHP code coverage information
--------------------------------------------------------------------------------
Update Information:
**phpunit/php-token-stream version 3.1.1** - 2019-09-17 **Fixed** * Fixed
[#84](https://github.com/sebastianbergmann/php-token-stream/issues/84): Methods
named `class` are not handled correctly ---- **phpunit/php-code-coverage
version 7.0.8** - 2019-09-17 **Changed** * Update HTML report Bootstrap 4.3.1,
jQuery 3.4.1, and popper.js 1.15.0
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 17 2019 Remi Collet <remi(a)remirepo.net> - 7.0.8-1
- update to 7.0.8
- raise dependency on phpunit/php-token-stream 3.1.1
--------------------------------------------------------------------------------
================================================================================
php-phpunit-php-token-stream3-3.1.1-1.fc29 (FEDORA-2019-32544133d2)
Wrapper around PHP tokenizer extension
--------------------------------------------------------------------------------
Update Information:
**phpunit/php-token-stream version 3.1.1** - 2019-09-17 **Fixed** * Fixed
[#84](https://github.com/sebastianbergmann/php-token-stream/issues/84): Methods
named `class` are not handled correctly ---- **phpunit/php-code-coverage
version 7.0.8** - 2019-09-17 **Changed** * Update HTML report Bootstrap 4.3.1,
jQuery 3.4.1, and popper.js 1.15.0
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 17 2019 Remi Collet <remi(a)remirepo.net> - 3.1.1-1
- update to 3.1.1
--------------------------------------------------------------------------------
================================================================================
python-catkin_lint-1.6.1-1.fc29 (FEDORA-2019-7db739d56a)
Check catkin packages for common errors
--------------------------------------------------------------------------------
Update Information:
Update to latest 'catkin_lint' release
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 16 2019 Scott K Logan <logans(a)cottsay.net> - 1.6.1-1
- Update to 1.6.1 (rhbz#1748135)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1748135 - python-catkin_lint-1.6.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1748135
--------------------------------------------------------------------------------
================================================================================
qownnotes-19.9.12-1.20190912gitc33c89f.fc29 (FEDORA-2019-be01774fd7)
Plain-text file markdown note taking with Nextcloud integration
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 17 2019 Artem Polishchuk <ego.cordatus(a)gmail.com> -
19.9.12-1.20190912gitc33c89f
- Update to 19.9.12
--------------------------------------------------------------------------------
================================================================================
shc-4.0.3-1.fc29 (FEDORA-2019-516a85f60b)
Shell script compiler
--------------------------------------------------------------------------------
Update Information:
Initial
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1440687 - Review Request: shc - Shell script compiler
https://bugzilla.redhat.com/show_bug.cgi?id=1440687
--------------------------------------------------------------------------------
================================================================================
smcalc-1.0.1-2.fc29 (FEDORA-2019-a8b8916907)
Matrix Calculator
--------------------------------------------------------------------------------
Update Information:
Initial
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1441427 - Review Request: smcalc - Matrix Calculator
https://bugzilla.redhat.com/show_bug.cgi?id=1441427
--------------------------------------------------------------------------------
================================================================================
sssd-2.2.2-1.fc29 (FEDORA-2019-3bdedf56fb)
System Security Services Daemon
--------------------------------------------------------------------------------
Update Information:
Update to latest released upstream version
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 11 2019 Michal ��idek <mzidek(a)redhat.com> - 2.2.2-1
- Update to latest released upstream version
-
https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_2_2_2.html
-
https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_2_2_1.html
--------------------------------------------------------------------------------