The following Fedora 29 Security updates need testing:
Age URL
269
https://bodhi.fedoraproject.org/updates/FEDORA-2019-fa5843e0e1
asterisk-16.2.1-1.fc29
255
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c84f291592
WALinuxAgent-2.2.38-1.fc29
250
https://bodhi.fedoraproject.org/updates/FEDORA-2019-7528388823
chicken-5.0.0-2.fc29
210
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9839aded3f
python-gnupg-0.4.4-1.fc29
206
https://bodhi.fedoraproject.org/updates/FEDORA-2019-35cb5a4785
kubernetes-1.13.5-1.fc29
144
https://bodhi.fedoraproject.org/updates/FEDORA-2019-32f7cd9b66
dosbox-0.74.3-2.fc29
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c5628ced32
libidn2-2.3.0-1.fc29
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-fd2a963f4b
libarchive-3.3.3-7.fc29
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4481085b0d
sqlite-3.26.0-5.fc29
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9c636a4a0a
phpMyAdmin-4.9.2-1.fc29
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-dd0e74915a
djvulibre-3.5.27-15.fc29
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-296159c5c9 jhead-3.04-1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ce438e7857
clamav-0.101.5-1.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-0772faf79f
milkytracker-1.02.00-3.fc29
The following Fedora 29 Critical Path updates have yet to be approved:
Age URL
182
https://bodhi.fedoraproject.org/updates/FEDORA-2019-06a2d1c7fb
anaconda-29.24.7-3.fc29
153
https://bodhi.fedoraproject.org/updates/FEDORA-2019-583d9d5a56
mutter-3.30.2-3.fc29
139
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6f13c38d0d
python-urllib3-1.24.3-2.fc29
137
https://bodhi.fedoraproject.org/updates/FEDORA-2019-62e681b68b ipset-7.2-1.fc29
31
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3bdedf56fb sssd-2.2.2-3.fc29
10
https://bodhi.fedoraproject.org/updates/FEDORA-2019-14dc54e0d6
firefox-70.0.1-4.fc29
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c5628ced32
libidn2-2.3.0-1.fc29
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-fd2a963f4b
libarchive-3.3.3-7.fc29
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-f0e074754a
pcre2-10.33-16.fc29
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4481085b0d
sqlite-3.26.0-5.fc29
The following builds have been pushed to Fedora 29 updates-testing
R-future-1.15.1-1.fc29
golang-github-tdewolff-parse-2.3.12-1.fc29
haproxy-1.8.23-1.fc29
ibus-typing-booster-2.7.3-1.fc29
mellowplayer-3.5.6-1.20191124git433f80b.fc29
module-build-service-2.30.4-1.fc29
nss-3.47.1-1.fc29
overpass-fonts-3.0.4-1.fc29
perl-Alien-Base-ModuleBuild-1.07-1.fc29
perl-Archive-Extract-0.82-1.fc29
perl-HTTP-Date-6.05-1.fc29
perl-IO-Socket-SSL-2.066-2.fc29
perl-Storable-3.15-4.fc29
perl-version-0.99.24-6.fc29
python-streamlink-1.3.0-1.fc29
quota-4.04-12.fc29
Details about builds:
================================================================================
R-future-1.15.1-1.fc29 (FEDORA-2019-be66f9258f)
Unified Parallel and Distributed Processing in R for Everyone
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 25 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 1.15.1-1
- Update to latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1776331 - R-future-1.15.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1776331
--------------------------------------------------------------------------------
================================================================================
golang-github-tdewolff-parse-2.3.12-1.fc29 (FEDORA-2019-938f7734d0)
Go parsers for web formats
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 25 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 2.3.12-1
- Update to latest version
* Thu Nov 21 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 2.3.11-1
- Update to latest version
* Thu Nov 21 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 2.3.10-1
- Update to latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1776489 - golang-github-tdewolff-parse-2.3.12 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1776489
--------------------------------------------------------------------------------
================================================================================
haproxy-1.8.23-1.fc29 (FEDORA-2019-4a59c38ff0)
HAProxy reverse proxy for high availability environments
--------------------------------------------------------------------------------
Update Information:
Update to 1.8.23
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 25 2019 Ryan O'Hara <rohara(a)redhat.com> - 1.8.25-1
- Update to 1.8.23
* Wed Nov 6 2019 Ryan O'Hara <rohara(a)redhat.com> - 1.8.22-1
- Update to 1.8.22
--------------------------------------------------------------------------------
================================================================================
ibus-typing-booster-2.7.3-1.fc29 (FEDORA-2019-6398f828eb)
A completion input method
--------------------------------------------------------------------------------
Update Information:
Update to 2.7.3; Fix race condition in itb_util.xdg_save_data_path();
Translation updades
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 25 2019 Mike FABIAN <mfabian(a)redhat.com> - 2.7.3-1
- Update to 2.7.3
- Correct release dates of Unicode 12.0.0 and 12.1.0 in emoji_picker.py
- Add workaround if key codes cannot be found for key values
(workaround for big endian platforms)
- Fix race condition in itb_util.xdg_save_data_path()
Resolves: rhbz#1770072
Resolves: rhbz#1713963
Resolves: rhbz#1764520
Resolves: rhbz#1768016
- Another fix for right-to-left languages: fix wrong order of globe emoji
- Small fix in parsing emoji-test.txt which slightly changes the emoji sorting order
- Adapt parsing of the emoji data files to the changes in Unicode 13.0
- Fix emoji test cases for new emoji data files for Unicode 13.0
- Update emoji data to current Unicode 13.0 draft
- Add fa, it, tr to LINGUAS
- Updated Odia translations from Weblate (53.4% translated)
- Updated Czech translations from Weblate (100.0% translated)
- Updated Catalan translations from Weblate (17.1% translated)
- Added Turkish translations from Weblate (100.0% translated)
- Added Italian translations from Weblate (5.2% translated)
- Portuguese (Portugal) translations moved from pt_PT to pt (23.8% translated)
- Update French translations from Weblate (100.0% translated)
- Added Persian translations from Weblate (0% translated)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1770072 - [abrt] ibus-typing-booster: makedirs():
os.py:221:makedirs:FileExistsError: [Errno 17] File exists:
'/home/glassy/.local/share/ibus-typing-booster/data'
https://bugzilla.redhat.com/show_bug.cgi?id=1770072
[ 2 ] Bug #1713963 - [abrt] ibus-typing-booster: makedirs():
os.py:221:makedirs:FileExistsError: [Errno 17] File exists:
'/home/uncle/.local/share/ibus-typing-booster/data'
https://bugzilla.redhat.com/show_bug.cgi?id=1713963
[ 3 ] Bug #1764520 - [abrt] ibus-typing-booster: makedirs():
os.py:221:makedirs:FileExistsError: [Errno 17] File exists:
'/home/liting/.local/share/ibus-typing-booster/data'
https://bugzilla.redhat.com/show_bug.cgi?id=1764520
[ 4 ] Bug #1768016 - [abrt] ibus-typing-booster: makedirs():
os.py:221:makedirs:FileExistsError: [Errno 17] �������� ��������������������:
'/var/lib/gdm/.local/share/ibus-typing-booster/data'
https://bugzilla.redhat.com/show_bug.cgi?id=1768016
--------------------------------------------------------------------------------
================================================================================
mellowplayer-3.5.6-1.20191124git433f80b.fc29 (FEDORA-2019-fefbdb80bf)
Cloud music integration for your desktop
--------------------------------------------------------------------------------
Update Information:
Update to 3.5.6-1.20191124git433f80b
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 25 2019 Martin Gansser <martinkg(a)fedoraproject.org> -
3.5.6-1.20191124git433f80b
- Update to 3.5.6-1.20191124git433f80b
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> -
3.5.5-2.20190713git0154d81
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
module-build-service-2.30.4-1.fc29 (FEDORA-2019-0585f3f58a)
The Module Build Service for Modularity
--------------------------------------------------------------------------------
Update Information:
##Changes * allow reuse of added components in some cases
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 25 2019 Mike McLean <mikem(a)redhat.com> - 2.30.4-1
- new version
--------------------------------------------------------------------------------
================================================================================
nss-3.47.1-1.fc29 (FEDORA-2019-ea4392cb3e)
Network Security Services
--------------------------------------------------------------------------------
Update Information:
Updates the nss package to upstream NSS 3.47.1. For details about new
functionality and a list of bugs fixed in this release please see the upstream
release notes -
https://developer.mozilla.org/en-
US/docs/Mozilla/Projects/NSS/NSS_3.47.1_release_notes
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 22 2019 Daiki Ueno <dueno(a)redhat.com> - 3.47.1-1
- Update to NSS 3.47.1
--------------------------------------------------------------------------------
================================================================================
overpass-fonts-3.0.4-1.fc29 (FEDORA-2019-7eff8fdcb5)
Typeface based on the U.S. interstate highway road signage type system
--------------------------------------------------------------------------------
Update Information:
Update overpass fonts to 3.0.4. Minor release that fixes line height issues in
Firefox.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 26 2019 Tom Callaway <spot(a)fedoraproject.org> - 3.0.4-1
- update to 3.0.4
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.0.3-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.0.3-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
perl-Alien-Base-ModuleBuild-1.07-1.fc29 (FEDORA-2019-7171563ff2)
Perl framework for building Alien:: modules and their libraries
--------------------------------------------------------------------------------
Update Information:
This release fixes detection on a binary installation path.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 25 2019 Petr Pisar <ppisar(a)redhat.com> - 1.07-1
- 1.07 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1776103 - Upgrade perl-Alien-Base-ModuleBuild to 1.07
https://bugzilla.redhat.com/show_bug.cgi?id=1776103
--------------------------------------------------------------------------------
================================================================================
perl-Archive-Extract-0.82-1.fc29 (FEDORA-2019-c79b8e9fd1)
Generic archive extracting mechanism
--------------------------------------------------------------------------------
Update Information:
This release fixes a version checking for Archive::Tar.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 25 2019 Petr Pisar <ppisar(a)redhat.com> - 1:0.82-1
- 0.82 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1775830 - perl-Archive-Extract-0.82 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1775830
--------------------------------------------------------------------------------
================================================================================
perl-HTTP-Date-6.05-1.fc29 (FEDORA-2019-1f8a7d1313)
Date conversion routines
--------------------------------------------------------------------------------
Update Information:
This release fixes a minimal version of a required Time::Local module.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 19 2019 Petr Pisar <ppisar(a)redhat.com> - 6.05-1
- 6.05 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1773844 - perl-HTTP-Date-6.05 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1773844
--------------------------------------------------------------------------------
================================================================================
perl-IO-Socket-SSL-2.066-2.fc29 (FEDORA-2019-f3ca7cc66d)
Perl library for transparent SSL
--------------------------------------------------------------------------------
Update Information:
This release fixes defaulting to a system-wide cryptopolicy.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 25 2019 Petr Pisar <ppisar(a)redhat.com> - 2.066-2
- Default to PROFILE=SYSTEM cipher list (bug #1775167)
--------------------------------------------------------------------------------
================================================================================
perl-Storable-3.15-4.fc29 (FEDORA-2019-163ab05d2c)
Persistence for Perl data structures
--------------------------------------------------------------------------------
Update Information:
This release fixes a buffer overflow and deserializing vstring longer than
2^31-1 bytes.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 25 2019 Petr Pisar <ppisar(a)redhat.com> - 1:3.15-4
- Fix a buffer overflow when processing a vstring longer than 2^31-1
(Perl GH#17306)
--------------------------------------------------------------------------------
================================================================================
perl-version-0.99.24-6.fc29 (FEDORA-2019-d8412da082)
Perl extension for Version Objects
--------------------------------------------------------------------------------
Update Information:
This release fixes a memory corruption when setting a locale.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 25 2019 Petr Pisar <ppisar(a)redhat.com> - 7:0.99.24-6
- Do not clobber memory when switching a locale (Perl GH#17054)
--------------------------------------------------------------------------------
================================================================================
python-streamlink-1.3.0-1.fc29 (FEDORA-2019-64b07a5523)
Python library for extracting streams from various websites
--------------------------------------------------------------------------------
Update Information:
A new release with plugin updates and fixes, including Twitch.tv (see
[#2680](https://github.com/streamlink/streamlink/issues/2680)), which had to be
delayed due to back and forth API changes. The Twitch.tv workarounds mentioned
in [#2680](https://github.com/streamlink/streamlink/issues/2680) don't have to
be applied anymore, but authenticating via `--twitch-oauth-token` has been
disabled, regardless of the origin of the OAuth token (via `--twitch-oauth-
authenticate` or the Twitch website). In order to not introduce breaking
changes, both parameters have been kept in this release and the user name will
still be logged when using an OAuth token, but receiving item drops or accessing
restricted streams is not possible anymore. Plugins for the following sites
have also been added: * albavision *
news.now.com * twitcasting.tv *
viu.tv * vlive.tv * willax.tv
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 26 2019 Mohamed El Morabity <melmorabity(a)fedoraproject.org> - 1.3.0-1
- Update to 1.3.0
--------------------------------------------------------------------------------
================================================================================
quota-4.04-12.fc29 (FEDORA-2019-54eab6dd9a)
System administration tools for monitoring users' disk usage
--------------------------------------------------------------------------------
Update Information:
This release fixes warnquota --help output, checking for the LDAP failures in
the warnquota tool, and parsing conifiguration in warnquota. It also reports
detailed LDAP failures.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 5 2019 Petr Pisar <ppisar(a)redhat.com> - 1:4.04-12
- Fix warnquota --help output
- Fix checking for the LDAP failures in the warnquota tool
- Report detailed LDAP failures
- Document CC_TO in warquota.conf is looked up with LDAP
- Initialize all members of a configparams structure in warnquota
--------------------------------------------------------------------------------