The following Fedora 29 Security updates need testing:
Age URL
168
https://bodhi.fedoraproject.org/updates/FEDORA-2019-49f80a78bc
mingw-sqlite-3.26.0.0-1.fc29
149
https://bodhi.fedoraproject.org/updates/FEDORA-2019-fa5843e0e1
asterisk-16.2.1-1.fc29
135
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c84f291592
WALinuxAgent-2.2.38-1.fc29
130
https://bodhi.fedoraproject.org/updates/FEDORA-2019-7528388823
chicken-5.0.0-2.fc29
89
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9839aded3f
python-gnupg-0.4.4-1.fc29
85
https://bodhi.fedoraproject.org/updates/FEDORA-2019-35cb5a4785
kubernetes-1.13.5-1.fc29
79
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9454ce61b2
freeradius-3.0.19-3.fc29
52
https://bodhi.fedoraproject.org/updates/FEDORA-2019-cd8f4b9568
pam-u2f-1.0.8-1.fc29
23
https://bodhi.fedoraproject.org/updates/FEDORA-2019-32f7cd9b66
dosbox-0.74.3-2.fc29
19
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e61a85c2bb
calamares-3.2.11-1.fc29
18
https://bodhi.fedoraproject.org/updates/FEDORA-2019-60a1defcd1
python3-3.7.4-1.fc29 python3-docs-3.7.4-1.fc29
16
https://bodhi.fedoraproject.org/updates/FEDORA-2019-1a87523729
squirrelmail-1.4.23-1.fc29.20190710
15
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3f5c670a8f
thunderbird-60.8.0-1.fc29
14
https://bodhi.fedoraproject.org/updates/FEDORA-2019-5409bb5e68
oniguruma-6.9.1-2.fc29
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-28a3675529
gnupg2-2.2.17-1.fc29
10
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3d204785d5
libreoffice-6.1.6.3-2.fc29
10
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e6b02af8b8 gvfs-1.38.3-1.fc29
10
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b6f0495f51 bind-9.11.8-1.fc29
bind-dyndb-ldap-11.1-17.fc29 dhcp-4.3.6-32.fc29 dnsperf-2.3.0-1.fc29
8
https://bodhi.fedoraproject.org/updates/FEDORA-2019-5885663621
libssh2-1.9.0-1.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-75a6f3b711 squid-4.8-1.fc29
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3377813d18
sqlite-3.26.0-4.fc29
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-82b0f48691
proftpd-1.3.6-21.fc29
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d6bc3771a4 hostapd-2.8-1.fc29
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8729e0edf5
poppler-0.67.0-22.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-56a658c60c
java-11-openjdk-11.0.4.11-0.fc29
The following Fedora 29 Critical Path updates have yet to be approved:
Age URL
94
https://bodhi.fedoraproject.org/updates/FEDORA-2019-201c9dce0a
libXt-1.1.5-11.20190424gitba4ec9376.fc29
89
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d762a7ad70
kexec-tools-2.0.19-1.fc29
88
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e6d2bef148
python2-2.7.16-2.fc29
80
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e513e057d5
python-blivet-3.1.2-5.fc29
79
https://bodhi.fedoraproject.org/updates/FEDORA-2019-719c8264ca lorax-29.29-1.fc29
78
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3b38d20c4a
alsa-lib-1.1.9-1.fc29 alsa-plugins-1.1.9-1.fc29 alsa-utils-1.1.9-1.fc29
61
https://bodhi.fedoraproject.org/updates/FEDORA-2019-06a2d1c7fb
anaconda-29.24.7-3.fc29
59
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4cefd3161a
nfs-utils-2.3.3-4.rc2.fc29
46
https://bodhi.fedoraproject.org/updates/FEDORA-2019-137e67d3b8
python-mako-1.0.12-1.fc29
45
https://bodhi.fedoraproject.org/updates/FEDORA-2019-37faa13746
fontconfig-2.13.1-8.fc29
41
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9c557fd104
switcheroo-control-1.3.1-1.fc29
38
https://bodhi.fedoraproject.org/updates/FEDORA-2019-58753df163
kernel-5.1.12-200.fc29 kernel-headers-5.1.12-200.fc29 kernel-tools-5.1.12-200.fc29
32
https://bodhi.fedoraproject.org/updates/FEDORA-2019-583d9d5a56
mutter-3.30.2-3.fc29
25
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6579cf8565
net-snmp-5.8-10.fc29
18
https://bodhi.fedoraproject.org/updates/FEDORA-2019-60a1defcd1
python3-3.7.4-1.fc29 python3-docs-3.7.4-1.fc29
18
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6f13c38d0d
python-urllib3-1.24.3-2.fc29
16
https://bodhi.fedoraproject.org/updates/FEDORA-2019-62e681b68b ipset-7.2-1.fc29
15
https://bodhi.fedoraproject.org/updates/FEDORA-2019-0b00516723
perl-threads-shared-1.59-2.fc29
15
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3f5c670a8f
thunderbird-60.8.0-1.fc29
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-28a3675529
gnupg2-2.2.17-1.fc29
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-775e6ef8de
libwebp-1.0.3-1.fc29 mingw-libwebp-1.0.3-1.fc29
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-35f47106d2
appstream-data-29-14.fc29
10
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b6f0495f51 bind-9.11.8-1.fc29
bind-dyndb-ldap-11.1-17.fc29 dhcp-4.3.6-32.fc29 dnsperf-2.3.0-1.fc29
10
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e6b02af8b8 gvfs-1.38.3-1.fc29
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-697821c525
glusterfs-5.8-1.fc29
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6d17b00236
linux-firmware-20190717-99.fc29
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-902bfc21b9
vim-8.1.1713-1.fc29
8
https://bodhi.fedoraproject.org/updates/FEDORA-2019-5885663621
libssh2-1.9.0-1.fc29
8
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8071724c9b
selinux-policy-3.14.2-63.fc29
8
https://bodhi.fedoraproject.org/updates/FEDORA-2019-221bb9e793
perl-5.28.2-433.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8016b5dca7
systemd-239-13.gitf4afb95.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d4419f5f1f pcre2-10.33-9.fc29
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ae2aef8fb8
udisks2-2.8.4-1.fc29
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3377813d18
sqlite-3.26.0-4.fc29
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8729e0edf5
poppler-0.67.0-22.fc29
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-42e4659507 dnf-4.2.5-3.fc29
libdnf-0.31.0-4.fc29
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-488e0ffbd8
osinfo-db-20190726-1.fc29
The following builds have been pushed to Fedora 29 updates-testing
cppcheck-1.88-3.fc29
drawing-0.4.1-1.fc29
homebank-5.2.7-1.fc29
iftop-1.0-0.21.pre4.fc29
imaptest-20190614-1.fc29
kernel-5.1.20-200.fc29
kernel-headers-5.1.20-200.fc29
lua-expat-1.3.0-16.fc29
lua-sec-0.8-1.fc29
mate-control-center-1.22.1-3.fc29
mate-user-admin-1.4.2-1.fc29
sirikali-1.3.8-1.fc29
Details about builds:
================================================================================
cppcheck-1.88-3.fc29 (FEDORA-2019-f9f7e46824)
Tool for static C/C++ code analysis
--------------------------------------------------------------------------------
Update Information:
Address crash reported in bugzilla.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 27 2019 Susi Lehtola <jussilehtola(a)redhat.com> - 1.89-3
- Fix BZ #1733663.
* Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.88-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1733663 - cppcheck killed after memory usage explodes
https://bugzilla.redhat.com/show_bug.cgi?id=1733663
--------------------------------------------------------------------------------
================================================================================
drawing-0.4.1-1.fc29 (FEDORA-2019-a699841b47)
Drawing application for the GNOME desktop
--------------------------------------------------------------------------------
Update Information:
Update to 0.4.1
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 28 2019 Artem Polishchuk <ego.cordatus(a)gmail.com> - 0.4.1-1
- Update to 0.4.1
* Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
homebank-5.2.7-1.fc29 (FEDORA-2019-43fc15e71b)
Free easy personal accounting for all
--------------------------------------------------------------------------------
Update Information:
- Update to 5.2.7
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 28 2019 Filipe Rosset <rosset.filipe(a)gmail.com> - 5.2.7-1
- Update to 5.2.7
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.2.6-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
iftop-1.0-0.21.pre4.fc29 (FEDORA-2019-6702eaef09)
Command line tool that displays bandwidth usage on an interface
--------------------------------------------------------------------------------
Update Information:
- Added patch from upstream to choose first "running" interface, rather than
first "up" interface (#1403025) - Added patch from upstream to support scales
beyond 1 Gbps
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 27 2019 Robert Scheck <robert(a)fedoraproject.org> 1.0-0.21.pre4
- Added patch from upstream to choose first "running" interface,
rather than first "up" interface (#1403025)
- Added patch from upstream to support scales beyond 1 Gbps
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> -
1.0-0.20.pre4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> -
1.0-0.19.pre4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1403025 - iftop often picks the wrong interface on NetworkManager managed
machines
https://bugzilla.redhat.com/show_bug.cgi?id=1403025
--------------------------------------------------------------------------------
================================================================================
imaptest-20190614-1.fc29 (FEDORA-2019-f16c5f2c9f)
A generic IMAP server compliancy tester
--------------------------------------------------------------------------------
Update Information:
ImapTest 20190614 ================= * Don't FETCH Delivered-To header
This isn't a field that clients commonly fetch, so it just confuses testing when
the field isn't already cached. ImapTest 20190504 ================= *
profile: Add support for user { userfile=path } Each line in the file
contains either username or username:password. When password isn't specified,
the default global password is used. * profile.conf: Add comments ImapTest
20181206 ================= * Use hardening flags * configure: Stop using
DOVECOT_CFLAGS * m4: Update dovecot.m4 from upstream ImapTest 20181030
================= * imaptest-lmtp: Adjust to change in Dovecot SMTP client
transaction API.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 28 2019 Robert Scheck <robert(a)fedoraproject.org> 20190614-1
- Upgrade to 20190614
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> -
20180824-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> -
20180824-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
kernel-5.1.20-200.fc29 (FEDORA-2019-3dbfaeac73)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
Update to v5.1.20 ---- Update to v5.1.19
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 26 2019 Jeremy Cline <jcline(a)redhat.com> - 5.1.20-200
- Linux v5.1.20
* Mon Jul 22 2019 Laura Abbott <labbott(a)redhat.com>
- Bring in DMA fix (rhbz 1732045)
* Mon Jul 22 2019 Jeremy Cline <jcline(a)redhat.com> - 5.1.19-200
- Linux v5.1.19
- Fix Xen Security Advisory 300 (rhbz 1731862 1731864)
- Fix a null pointer dereference in the 8250_lpss serial driver (rhbz 1731784)
* Thu Jul 18 2019 Jeremy Cline <jcline(a)redhat.com>
- Fix CVE-2019-13631 (rhbz 1731000 1731001)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1731862 - xen: no grant table and foreign mapping limits leading to crash and
DoS
https://bugzilla.redhat.com/show_bug.cgi?id=1731862
[ 2 ] Bug #1731784 - kernel: check null return when calling pci_ioremap_bar
https://bugzilla.redhat.com/show_bug.cgi?id=1731784
[ 3 ] Bug #1731000 - CVE-2019-13631 kernel: OOB writes in parse_hid_report_descriptor in
drivers/input/tablet/gtco.c
https://bugzilla.redhat.com/show_bug.cgi?id=1731000
--------------------------------------------------------------------------------
================================================================================
kernel-headers-5.1.20-200.fc29 (FEDORA-2019-3dbfaeac73)
Header files for the Linux kernel for use by glibc
--------------------------------------------------------------------------------
Update Information:
Update to v5.1.20 ---- Update to v5.1.19
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 26 2019 Jeremy Cline <jcline(a)redhat.com> - 5.1.20-200
- Linux v5.1.20
* Mon Jul 22 2019 Jeremy Cline <jcline(a)redhat.com> - 5.1.19-200
- Linux v5.1.19
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1731862 - xen: no grant table and foreign mapping limits leading to crash and
DoS
https://bugzilla.redhat.com/show_bug.cgi?id=1731862
[ 2 ] Bug #1731784 - kernel: check null return when calling pci_ioremap_bar
https://bugzilla.redhat.com/show_bug.cgi?id=1731784
[ 3 ] Bug #1731000 - CVE-2019-13631 kernel: OOB writes in parse_hid_report_descriptor in
drivers/input/tablet/gtco.c
https://bugzilla.redhat.com/show_bug.cgi?id=1731000
--------------------------------------------------------------------------------
================================================================================
lua-expat-1.3.0-16.fc29 (FEDORA-2019-5b21c537d4)
SAX XML parser based on the Expat library
--------------------------------------------------------------------------------
Update Information:
Provide lua5.1-expat for
https://pagure.io/packaging-committee/issue/878
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 27 2019 Robert Scheck <robert(a)fedoraproject.org> - 1.3.0-16
- Spec file cleanups
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.0-15
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.0-14
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
lua-sec-0.8-1.fc29 (FEDORA-2019-745f6853b9)
Lua binding for OpenSSL library
--------------------------------------------------------------------------------
Update Information:
LuaSec 0.8 ========== * Add support to ALPN * Add support to TLS 1.3 *
Add support to multiple certificates * Add timeout to https module
(https.TIMEOUT) * Drop support to SSL 3.0 * Drop support to TLS 1.0 from
https module * Fix invalid reference to Lua state * Fix memory leak when get
certficate extensions LuaSec 0.7 ========== * Add support to OpenSSL 1.1.0
* Add support to elliptic curves list * Add ssl.config that exports some
OpenSSL information * Add integration with luaossl
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 27 2019 Robert Scheck <robert(a)fedoraproject.org> 0.8-1
- Upgrade to 0.8
* Fri Jul 26 2019 Robert Scheck <robert(a)fedoraproject.org> 0.7-1
- Upgrade to 0.7
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
mate-control-center-1.22.1-3.fc29 (FEDORA-2019-a6e4821038)
MATE Desktop control-center
--------------------------------------------------------------------------------
Update Information:
- drop dependency to libXxf86misc - add some upstream patches
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 28 2019 Wolfgang Ulbrich <fedora(a)raveit.de> - 1.22.1-3
- drop dependency to libXxf86misc
- add some upstream patches
--------------------------------------------------------------------------------
================================================================================
mate-user-admin-1.4.2-1.fc29 (FEDORA-2019-a72937ac34)
User management tool
--------------------------------------------------------------------------------
Update Information:
- update to 1.14.2 - add LXFCE and XFCE to desktop file
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 28 2019 Wolfgang Ulbrich <fedora(a)raveit.de> - 1.4.2-1
- update to 1.14.2
- add LXFCE and XFCE to desktop file
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1732687 - Make mate-user-admin also show up in the menu for XFCE and LXDE.
https://bugzilla.redhat.com/show_bug.cgi?id=1732687
--------------------------------------------------------------------------------
================================================================================
sirikali-1.3.8-1.fc29 (FEDORA-2019-ae7d0ff134)
GUI front end to encfs,cryfs,gocryptfs and securefs
--------------------------------------------------------------------------------
Update Information:
version 1.3.7(February 9th,2019) -- Add support for gocryptfs "idle" option.
--
Add ability to set a favorite volume that does not need a password. Useful when
connecting to ssh server with a private key that does not need a password or
when getting credentials from external tools like keepass. -- Add a config
option to auto unmount volumes on logout(specifically, when SiriKali receive
sighup or sigterm). -- Add Russian translations. -- Fix a bug that prevented
mounting gocryptfs volumes on MACOS. -- Translations now works on MACOS. -- Add
support for Cryfs backend on windows. -- Add support for using a mount folder on
windows(sshfs, encfs and cryfs supports both mount folders and drive letters)
version 1.3.8(unreleased) -- Remove backend timeout of 20 seconds because cryfs
= 0.10.0 may take a very long time to finish. -- Show a warning that
says
working with cryfs >= 0.10.0 may take a very long time when
creating/unlocking
cryfs volumes. -- Improves a window that manages favorites.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 27 2019 Raphael Groner <projects.rg(a)smart.ms> - 1.3.8-1
- new version
* Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.6-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Sat Feb 2 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.6-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1674206 - sirikali-1.3.8 as pre-release
https://bugzilla.redhat.com/show_bug.cgi?id=1674206
--------------------------------------------------------------------------------