The following Fedora 29 Security updates need testing:
Age URL
52
https://bodhi.fedoraproject.org/updates/FEDORA-2018-51ce232320
xerces-c27-2.7.0-28.fc29
25
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4381dd7d0b
drupal8-8.6.2-1.fc29
25
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d3f4eb1f9f
drupal7-7.60-2.fc29
25
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7adf863a47
php-Smarty2-2.6.31-2.fc29
12
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6aada550ca bird-1.6.4-2.fc29
12
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e8ff8b7f8e
rubygem-rack-2.0.4-4.fc29
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9edb27ef05
pdns-recursor-4.1.7-1.fc29
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d5fcbb9ca6
rubygem-loofah-2.2.3-1.fc29
9
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4544e8dbc8
python34-3.4.9-4.fc29
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a2e9bd6eae
php-PHPMailer-5.2.27-1.fc29
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-18f3eff32b
php-phpmailer6-6.0.6-1.fc29
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-87f2ace20d qemu-3.0.0-2.fc29
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a0d02065d0
libdigidocpp-3.13.7-1.fc29 xml-security-c-2.0.2-1.fc29
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-0d2b97271c
mariadb-connector-c-3.0.7-1.fc29
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4003413459
mingw-uriparser-0.9.0-1.fc29
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c5c72a45ea
uriparser-0.9.0-1.fc29
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6a4a3b78fd
moodle-3.5.3-1.fc29
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b792d607fd
python-notebook-5.7.2-1.fc29
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9f375c6c01
dnsdist-1.3.3-1.fc29
The following Fedora 29 Critical Path updates have yet to be approved:
Age URL
16
https://bodhi.fedoraproject.org/updates/FEDORA-2018-053fa23050
shadow-utils-4.6-4.fc29
14
https://bodhi.fedoraproject.org/updates/FEDORA-2018-fff9c76313
xfce-polkit-0.3-1.fc29
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3c0aaeaf9b pam-1.3.1-8.fc29
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-004d2f4e6f
xfconf-4.13.6-2.fc29
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-87f2ace20d qemu-3.0.0-2.fc29
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-17cbc3c616
libdnf-0.22.3-1.fc29 dnf-4.0.9-1.fc29 dnf-plugins-core-4.0.2-1.fc29
dnf-plugins-extras-4.0.0-1.fc29
The following builds have been pushed to Fedora 29 updates-testing
cobbler-2.8.4-2.fc29
cqrlog-2.3.0-3.fc29
eccodes-2.9.2-1.fc29
golang-github-vbatts-tar-split-0.11.1-1.fc29
kernel-4.19.4-300.fc29
libneurosim-0-4.20181124.git0364674.fc29
moin-1.9.10-1.fc29
nest-2.16.0-4.fc29
pcb-rnd-2.1.0-1.fc29
python-toml-0.10.0-1.fc29
qjackctl-0.5.5-2.fc29
qsynth-0.5.3-1.fc29
runc-1.0.0-59.dev.gitccb5efd.fc29
wxMaxima-18.10.2-1.fc29
Details about builds:
================================================================================
cobbler-2.8.4-2.fc29 (FEDORA-2018-accec8551d)
Boot server configurator
--------------------------------------------------------------------------------
Update Information:
- Update to 2.8.4 (Fixes BZ 1613292, 1643860, 1614433, CVE-2018-1000226,
CVE-2018-10931) - Make koan require python2-ethtool (BZ 1638933)
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 25 2018 Orion Poplawski <orion(a)nwra.com> - 2.8.4-2
- Make koan require python2-ethtool (BZ 1638933)
* Sat Nov 24 2018 Orion Poplawski <orion(a)nwra.com> - 2.8.4-1
- Update to 2.8.4 (Fixes BZ 1613292, 1643860, 1614433, CVE-2018-1000226, CVE-2018-10931)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1643860 - Kickstart generation is broken
https://bugzilla.redhat.com/show_bug.cgi?id=1643860
[ 2 ] Bug #1614433 - CVE-2018-10931 cobbler: CobblerXMLRPCInterface exports all its
methods over XMLRPC [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1614433
[ 3 ] Bug #1613292 - cobbler: XMLRPC API endpoints are not correctly validating security
tokens [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1613292
[ 4 ] Bug #1638933 - koan RPM should require python-ethtool
https://bugzilla.redhat.com/show_bug.cgi?id=1638933
--------------------------------------------------------------------------------
================================================================================
cqrlog-2.3.0-3.fc29 (FEDORA-2018-aa1d2801fc)
An amateur radio contact logging program
--------------------------------------------------------------------------------
Update Information:
Patch to use libmariadb instead of libmysqldclient.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 9 2018 Richard Shaw <hobbes1069(a)gmail.com> - 2.3.0-3
- Clean up scripts that are no longer required by the packaging guidelines.
* Sat Oct 27 2018 Jim Lieb <lieb(a)sea-troll.net.> - 2.3.0-3
- Fix mysql/mariadb client lib search path
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1592176 - dependency not listed (cqrlog requires mariadb-connector-c-devel)
https://bugzilla.redhat.com/show_bug.cgi?id=1592176
--------------------------------------------------------------------------------
================================================================================
eccodes-2.9.2-1.fc29 (FEDORA-2018-36d8d68213)
WMO data format decoding and encoding
--------------------------------------------------------------------------------
Update Information:
Upgrade to upstream version 2.9.2
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 24 2018 Jos de Kloe <josdekloe(a)gmail.com> - 2.9.2-1
- Upgrade to upstream version 2.9.2
* Sun Oct 7 2018 Jos de Kloe <josdekloe(a)gmail.com> - 2.9.0-1
- Upgrade to upstream version 2.9.0
* Sat Sep 15 2018 Jos de Kloe <josdekloe(a)gmail.com> - 2.8.2-4
- add Excludearch for aarch64 on epel7
* Sat Sep 15 2018 Jos de Kloe <josdekloe(a)gmail.com> - 2.8.2-3
- Explicitely disable python in cmake call and use ctest3 rather than ctest
to ensure the build runs on EPEL-7 as well
* Thu Sep 13 2018 Jos de Kloe <josdekloe(a)gmail.com> - 2.8.2-2
- Remove python2 sub-package as per Mass Python 2 Package Removal for f30
* Sun Sep 9 2018 Jos de Kloe <josdekloe(a)gmail.com> - 2.8.2-1
- Upgrade to version 2.8.2
--------------------------------------------------------------------------------
================================================================================
golang-github-vbatts-tar-split-0.11.1-1.fc29 (FEDORA-2018-43d9b197dd)
Tar archive assembly/dis-assembly
--------------------------------------------------------------------------------
Update Information:
rebuilt for upstream 0.11.1 ---- rebuilt for upstream 0.11.0
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 23 2018 Steve Baker <sbaker(a)redhat.com> - 0.11.1-1
- rebuilt for upstream 0.11.1
* Fri Nov 23 2018 Steve Baker <sbaker(a)redhat.com> - 0.11.0-1
- rebuilt for upstream 0.11.0
- update to new Go packaging
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.13-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.13-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Wed Aug 2 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.13-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.13-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Fri Feb 10 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.13-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
kernel-4.19.4-300.fc29 (FEDORA-2018-4b63b55cb4)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
Stable kernel 4.19.4
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 23 2018 Peter Robinson <pbrobinson(a)fedoraproject.org> 4.19.4-300
- Linux v4.19.4
* Thu Nov 22 2018 Peter Robinson <pbrobinson(a)fedoraproject.org>
- Fixes for Rockchips 3399 devices
--------------------------------------------------------------------------------
================================================================================
libneurosim-0-4.20181124.git0364674.fc29 (FEDORA-2018-08eaf0b897)
Common interfaces for neuronal simulators
--------------------------------------------------------------------------------
Update Information:
* Update to latest snapshot: puts required libraries in the right place. * NEST
built with libneurosim support
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 24 2018 Ankur Sinha <ankursinha AT fedoraproject DOT org> -
0-4.20181124.git0364674
- Use bcond conditionals
* Sat Nov 24 2018 Ankur Sinha <ankursinha AT fedoraproject DOT org> -
0-3.20181124.git0364674
- Update to latest upstream commit
- Put libraries in correct locations. libpyneurosim is NOT a python extension module
- Remove python sub packages: other software must link against both libneurosim and
libpyneurosim
- All explained in:
https://github.com/INCF/libneurosim/issues/12
--------------------------------------------------------------------------------
================================================================================
moin-1.9.10-1.fc29 (FEDORA-2018-46596e10bb)
MoinMoin is a WikiEngine to collaborate on easily editable web pages
--------------------------------------------------------------------------------
Update Information:
Update to 1.9.10 (rhbz #1641242)
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 25 2018 Athmane Madjoudj <athmane(a)fedoraproject.org> - 1.9.10-1
- Update to 1.9.10 (rhbz #1641242)
- Remove the backported patch
- Minor spec fix: README path and py2/env shebang
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1641242 - moin-1.9.10 is available, contains security fixes
https://bugzilla.redhat.com/show_bug.cgi?id=1641242
--------------------------------------------------------------------------------
================================================================================
nest-2.16.0-4.fc29 (FEDORA-2018-08eaf0b897)
The neural simulation tool
--------------------------------------------------------------------------------
Update Information:
* Update to latest snapshot: puts required libraries in the right place. * NEST
built with libneurosim support
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 24 2018 Ankur Sinha <ankursinha AT fedoraproject DOT org> - 2.16.0-4
- Use bcond
- Enable libneurosim support
--------------------------------------------------------------------------------
================================================================================
pcb-rnd-2.1.0-1.fc29 (FEDORA-2018-ced18f9d21)
Modular Printed Circuit Board layout tool
--------------------------------------------------------------------------------
Update Information:
New 2.1.0 upstream
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 25 2018 Alain Vigne <alain vigne 14 gmail com> 2.1.0-1
- New 2.1.0 upstream
- Plugins: Add: asm, ar_cpcb, import_ttf, io_dsn
--------------------------------------------------------------------------------
================================================================================
python-toml-0.10.0-1.fc29 (FEDORA-2018-1e6748cd4d)
Python Library for Tom's Obvious, Minimal Language
--------------------------------------------------------------------------------
Update Information:
Update to 0.10.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 25 2018 Julien Enselme <jujens(a)jujens.eu> - 0.10.0-1
- Update to 0.10.0 (#1652946)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1652946 - python-toml: Please update to 0.10.0
https://bugzilla.redhat.com/show_bug.cgi?id=1652946
--------------------------------------------------------------------------------
================================================================================
qjackctl-0.5.5-2.fc29 (FEDORA-2018-48863367aa)
Qt based JACK control application
--------------------------------------------------------------------------------
Update Information:
- Old deprecated Qt4 build support is no more. - Graph port sort options
added as View / Sort menu. - System tray options now subject to current
desktop environment availability. - Also disable Setup / Misc / Other / Save
JACK server configuration to (.jackdrc) when JACK D-Bus interface is enabled. -
Whether to use server synchronous mode option added to Setup / Settings /
Parameters (only applied when JACK D-BUS interface is enabled). - Disable
some Setup / Settings / Advanced parameters when JACK D-Bus interface is enabled
and vice-versa. - Attempt to power-cycle JACK D-Bus service on demand; -
Marked as probably useless anyway, old "H/W Monitor" option (-H) is now being
ditched from Setup / Settings / Advanced tab.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 25 2018 Orcan Ogetbil <oget [DOT] fedora [AT] gmail [DOT] com> - 0.5.5-2
- Appdata fix
* Sun Nov 25 2018 Orcan Ogetbil <oget [DOT] fedora [AT] gmail [DOT] com> - 0.5.5-1
- New version
--------------------------------------------------------------------------------
================================================================================
qsynth-0.5.3-1.fc29 (FEDORA-2018-f25e280b07)
Qt based Fluidsynth GUI front end
--------------------------------------------------------------------------------
Update Information:
qsynth-0.5.3 ------------------ - Current FluidSynth version information
added to command line output (-V, --version). - Overhaul adaptations to the
FluidSynth API V2 (>= 2.0.0). - AppStream metadata updated to be the most
compliant with latest
freedesktop.org specification and recommendation.
qsynth-0.5.2 ------------------ - AppData/AppStream metadata is now settled
under an all permisssive license (FSFAP). qsynth-0.5.1 ------------------ -
Disable singleton/unique application instance setup logic when the display
server platform is not X11. - Fixed deprecated calls to
fluid_synth_get_channel_info(), fluid_synth_set_midi_router() and
fluid_settings_getstr() (as signaled on libfluidsynth >= 1.1.9). - A little
hardening on the configure (autoconf) macro side.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 25 2018 Orcan Ogetbil <oget[DOT]fedora[AT]gmail[DOT]com> 0.5.3-1
- Update to 0.5.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1446604 - qsynth-0.5.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1446604
--------------------------------------------------------------------------------
================================================================================
runc-1.0.0-59.dev.gitccb5efd.fc29 (FEDORA-2018-a6ae708d15)
CLI for running Open Containers
--------------------------------------------------------------------------------
Update Information:
RC6 for runc
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 24 2018 Dan Walsh <dwalsh(a)redhat.name> - 2:1.0.0-59.dev.gitccb5efd3
- rc6 build
* Wed Nov 7 2018 Lokesh Mandvekar (Bot) <lsm5+bot(a)fedoraproject.org> -
2:1.0.0-58.dev.git079817c
- autobuilt 079817c
--------------------------------------------------------------------------------
================================================================================
wxMaxima-18.10.2-1.fc29 (FEDORA-2018-a19c1577f1)
Graphical user interface for Maxima
--------------------------------------------------------------------------------
Update Information:
Latest stable upstream release.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 9 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 18.10.2-1
- 18.10.2
* Fri Nov 9 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 18.10.1-1
- 18.10.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1643722 - wxmaxima (18.02.10) does not properly render text after scrooling
the page
https://bugzilla.redhat.com/show_bug.cgi?id=1643722
--------------------------------------------------------------------------------