The following Fedora 29 Security updates need testing: Age URL 168 https://bodhi.fedoraproject.org/updates/FEDORA-2019-49f80a78bc mingw-sqlite-3.26.0.0-1.fc29 149 https://bodhi.fedoraproject.org/updates/FEDORA-2019-fa5843e0e1 asterisk-16.2.1-1.fc29 135 https://bodhi.fedoraproject.org/updates/FEDORA-2019-c84f291592 WALinuxAgent-2.2.38-1.fc29 130 https://bodhi.fedoraproject.org/updates/FEDORA-2019-7528388823 chicken-5.0.0-2.fc29 89 https://bodhi.fedoraproject.org/updates/FEDORA-2019-9839aded3f python-gnupg-0.4.4-1.fc29 85 https://bodhi.fedoraproject.org/updates/FEDORA-2019-35cb5a4785 kubernetes-1.13.5-1.fc29 79 https://bodhi.fedoraproject.org/updates/FEDORA-2019-9454ce61b2 freeradius-3.0.19-3.fc29 52 https://bodhi.fedoraproject.org/updates/FEDORA-2019-cd8f4b9568 pam-u2f-1.0.8-1.fc29 23 https://bodhi.fedoraproject.org/updates/FEDORA-2019-32f7cd9b66 dosbox-0.74.3-2.fc29 19 https://bodhi.fedoraproject.org/updates/FEDORA-2019-e61a85c2bb calamares-3.2.11-1.fc29 18 https://bodhi.fedoraproject.org/updates/FEDORA-2019-60a1defcd1 python3-3.7.4-1.fc29 python3-docs-3.7.4-1.fc29 16 https://bodhi.fedoraproject.org/updates/FEDORA-2019-1a87523729 squirrelmail-1.4.23-1.fc29.20190710 15 https://bodhi.fedoraproject.org/updates/FEDORA-2019-3f5c670a8f thunderbird-60.8.0-1.fc29 14 https://bodhi.fedoraproject.org/updates/FEDORA-2019-5409bb5e68 oniguruma-6.9.1-2.fc29 12 https://bodhi.fedoraproject.org/updates/FEDORA-2019-28a3675529 gnupg2-2.2.17-1.fc29 10 https://bodhi.fedoraproject.org/updates/FEDORA-2019-3d204785d5 libreoffice-6.1.6.3-2.fc29 10 https://bodhi.fedoraproject.org/updates/FEDORA-2019-e6b02af8b8 gvfs-1.38.3-1.fc29 10 https://bodhi.fedoraproject.org/updates/FEDORA-2019-b6f0495f51 bind-9.11.8-1.fc29 bind-dyndb-ldap-11.1-17.fc29 dhcp-4.3.6-32.fc29 dnsperf-2.3.0-1.fc29 8 https://bodhi.fedoraproject.org/updates/FEDORA-2019-5885663621 libssh2-1.9.0-1.fc29 5 https://bodhi.fedoraproject.org/updates/FEDORA-2019-75a6f3b711 squid-4.8-1.fc29 4 https://bodhi.fedoraproject.org/updates/FEDORA-2019-3377813d18 sqlite-3.26.0-4.fc29 4 https://bodhi.fedoraproject.org/updates/FEDORA-2019-82b0f48691 proftpd-1.3.6-21.fc29 4 https://bodhi.fedoraproject.org/updates/FEDORA-2019-d6bc3771a4 hostapd-2.8-1.fc29 3 https://bodhi.fedoraproject.org/updates/FEDORA-2019-8729e0edf5 poppler-0.67.0-22.fc29 1 https://bodhi.fedoraproject.org/updates/FEDORA-2019-56a658c60c java-11-openjdk-11.0.4.11-0.fc29 The following Fedora 29 Critical Path updates have yet to be approved: Age URL 94 https://bodhi.fedoraproject.org/updates/FEDORA-2019-201c9dce0a libXt-1.1.5-11.20190424gitba4ec9376.fc29 89 https://bodhi.fedoraproject.org/updates/FEDORA-2019-d762a7ad70 kexec-tools-2.0.19-1.fc29 88 https://bodhi.fedoraproject.org/updates/FEDORA-2019-e6d2bef148 python2-2.7.16-2.fc29 80 https://bodhi.fedoraproject.org/updates/FEDORA-2019-e513e057d5 python-blivet-3.1.2-5.fc29 79 https://bodhi.fedoraproject.org/updates/FEDORA-2019-719c8264ca lorax-29.29-1.fc29 78 https://bodhi.fedoraproject.org/updates/FEDORA-2019-3b38d20c4a alsa-lib-1.1.9-1.fc29 alsa-plugins-1.1.9-1.fc29 alsa-utils-1.1.9-1.fc29 61 https://bodhi.fedoraproject.org/updates/FEDORA-2019-06a2d1c7fb anaconda-29.24.7-3.fc29 59 https://bodhi.fedoraproject.org/updates/FEDORA-2019-4cefd3161a nfs-utils-2.3.3-4.rc2.fc29 46 https://bodhi.fedoraproject.org/updates/FEDORA-2019-137e67d3b8 python-mako-1.0.12-1.fc29 45 https://bodhi.fedoraproject.org/updates/FEDORA-2019-37faa13746 fontconfig-2.13.1-8.fc29 41 https://bodhi.fedoraproject.org/updates/FEDORA-2019-9c557fd104 switcheroo-control-1.3.1-1.fc29 38 https://bodhi.fedoraproject.org/updates/FEDORA-2019-58753df163 kernel-5.1.12-200.fc29 kernel-headers-5.1.12-200.fc29 kernel-tools-5.1.12-200.fc29 32 https://bodhi.fedoraproject.org/updates/FEDORA-2019-583d9d5a56 mutter-3.30.2-3.fc29 25 https://bodhi.fedoraproject.org/updates/FEDORA-2019-6579cf8565 net-snmp-5.8-10.fc29 18 https://bodhi.fedoraproject.org/updates/FEDORA-2019-60a1defcd1 python3-3.7.4-1.fc29 python3-docs-3.7.4-1.fc29 18 https://bodhi.fedoraproject.org/updates/FEDORA-2019-6f13c38d0d python-urllib3-1.24.3-2.fc29 16 https://bodhi.fedoraproject.org/updates/FEDORA-2019-62e681b68b ipset-7.2-1.fc29 15 https://bodhi.fedoraproject.org/updates/FEDORA-2019-0b00516723 perl-threads-shared-1.59-2.fc29 15 https://bodhi.fedoraproject.org/updates/FEDORA-2019-3f5c670a8f thunderbird-60.8.0-1.fc29 12 https://bodhi.fedoraproject.org/updates/FEDORA-2019-28a3675529 gnupg2-2.2.17-1.fc29 12 https://bodhi.fedoraproject.org/updates/FEDORA-2019-775e6ef8de libwebp-1.0.3-1.fc29 mingw-libwebp-1.0.3-1.fc29 12 https://bodhi.fedoraproject.org/updates/FEDORA-2019-35f47106d2 appstream-data-29-14.fc29 10 https://bodhi.fedoraproject.org/updates/FEDORA-2019-b6f0495f51 bind-9.11.8-1.fc29 bind-dyndb-ldap-11.1-17.fc29 dhcp-4.3.6-32.fc29 dnsperf-2.3.0-1.fc29 10 https://bodhi.fedoraproject.org/updates/FEDORA-2019-e6b02af8b8 gvfs-1.38.3-1.fc29 9 https://bodhi.fedoraproject.org/updates/FEDORA-2019-697821c525 glusterfs-5.8-1.fc29 9 https://bodhi.fedoraproject.org/updates/FEDORA-2019-6d17b00236 linux-firmware-20190717-99.fc29 9 https://bodhi.fedoraproject.org/updates/FEDORA-2019-902bfc21b9 vim-8.1.1713-1.fc29 8 https://bodhi.fedoraproject.org/updates/FEDORA-2019-5885663621 libssh2-1.9.0-1.fc29 8 https://bodhi.fedoraproject.org/updates/FEDORA-2019-8071724c9b selinux-policy-3.14.2-63.fc29 8 https://bodhi.fedoraproject.org/updates/FEDORA-2019-221bb9e793 perl-5.28.2-433.fc29 5 https://bodhi.fedoraproject.org/updates/FEDORA-2019-8016b5dca7 systemd-239-13.gitf4afb95.fc29 5 https://bodhi.fedoraproject.org/updates/FEDORA-2019-d4419f5f1f pcre2-10.33-9.fc29 4 https://bodhi.fedoraproject.org/updates/FEDORA-2019-ae2aef8fb8 udisks2-2.8.4-1.fc29 4 https://bodhi.fedoraproject.org/updates/FEDORA-2019-3377813d18 sqlite-3.26.0-4.fc29 3 https://bodhi.fedoraproject.org/updates/FEDORA-2019-8729e0edf5 poppler-0.67.0-22.fc29 3 https://bodhi.fedoraproject.org/updates/FEDORA-2019-42e4659507 dnf-4.2.5-3.fc29 libdnf-0.31.0-4.fc29 1 https://bodhi.fedoraproject.org/updates/FEDORA-2019-488e0ffbd8 osinfo-db-20190726-1.fc29 The following builds have been pushed to Fedora 29 updates-testing cppcheck-1.88-3.fc29 drawing-0.4.1-1.fc29 homebank-5.2.7-1.fc29 iftop-1.0-0.21.pre4.fc29 imaptest-20190614-1.fc29 kernel-5.1.20-200.fc29 kernel-headers-5.1.20-200.fc29 lua-expat-1.3.0-16.fc29 lua-sec-0.8-1.fc29 mate-control-center-1.22.1-3.fc29 mate-user-admin-1.4.2-1.fc29 sirikali-1.3.8-1.fc29 Details about builds: ================================================================================ cppcheck-1.88-3.fc29 (FEDORA-2019-f9f7e46824) Tool for static C/C++ code analysis -------------------------------------------------------------------------------- Update Information: Address crash reported in bugzilla. -------------------------------------------------------------------------------- ChangeLog: * Sat Jul 27 2019 Susi Lehtola <jussilehtola@xxxxxxxxxx> - 1.89-3 - Fix BZ #1733663. * Wed Jul 24 2019 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1.88-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1733663 - cppcheck killed after memory usage explodes https://bugzilla.redhat.com/show_bug.cgi?id=1733663 -------------------------------------------------------------------------------- ================================================================================ drawing-0.4.1-1.fc29 (FEDORA-2019-a699841b47) Drawing application for the GNOME desktop -------------------------------------------------------------------------------- Update Information: Update to 0.4.1 -------------------------------------------------------------------------------- ChangeLog: * Sun Jul 28 2019 Artem Polishchuk <ego.cordatus@xxxxxxxxx> - 0.4.1-1 - Update to 0.4.1 * Wed Jul 24 2019 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 0.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ homebank-5.2.7-1.fc29 (FEDORA-2019-43fc15e71b) Free easy personal accounting for all -------------------------------------------------------------------------------- Update Information: - Update to 5.2.7 -------------------------------------------------------------------------------- ChangeLog: * Sun Jul 28 2019 Filipe Rosset <rosset.filipe@xxxxxxxxx> - 5.2.7-1 - Update to 5.2.7 * Thu Jul 25 2019 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 5.2.6-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ iftop-1.0-0.21.pre4.fc29 (FEDORA-2019-6702eaef09) Command line tool that displays bandwidth usage on an interface -------------------------------------------------------------------------------- Update Information: - Added patch from upstream to choose first "running" interface, rather than first "up" interface (#1403025) - Added patch from upstream to support scales beyond 1 Gbps -------------------------------------------------------------------------------- ChangeLog: * Sat Jul 27 2019 Robert Scheck <robert@xxxxxxxxxxxxxxxxx> 1.0-0.21.pre4 - Added patch from upstream to choose first "running" interface, rather than first "up" interface (#1403025) - Added patch from upstream to support scales beyond 1 Gbps * Thu Jul 25 2019 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1.0-0.20.pre4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Fri Feb 1 2019 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1.0-0.19.pre4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1403025 - iftop often picks the wrong interface on NetworkManager managed machines https://bugzilla.redhat.com/show_bug.cgi?id=1403025 -------------------------------------------------------------------------------- ================================================================================ imaptest-20190614-1.fc29 (FEDORA-2019-f16c5f2c9f) A generic IMAP server compliancy tester -------------------------------------------------------------------------------- Update Information: ImapTest 20190614 ================= * Don't FETCH Delivered-To header This isn't a field that clients commonly fetch, so it just confuses testing when the field isn't already cached. ImapTest 20190504 ================= * profile: Add support for user { userfile=path } Each line in the file contains either username or username:password. When password isn't specified, the default global password is used. * profile.conf: Add comments ImapTest 20181206 ================= * Use hardening flags * configure: Stop using DOVECOT_CFLAGS * m4: Update dovecot.m4 from upstream ImapTest 20181030 ================= * imaptest-lmtp: Adjust to change in Dovecot SMTP client transaction API. -------------------------------------------------------------------------------- ChangeLog: * Sun Jul 28 2019 Robert Scheck <robert@xxxxxxxxxxxxxxxxx> 20190614-1 - Upgrade to 20190614 * Thu Jul 25 2019 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 20180824-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Fri Feb 1 2019 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 20180824-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ kernel-5.1.20-200.fc29 (FEDORA-2019-3dbfaeac73) The Linux kernel -------------------------------------------------------------------------------- Update Information: Update to v5.1.20 ---- Update to v5.1.19 -------------------------------------------------------------------------------- ChangeLog: * Fri Jul 26 2019 Jeremy Cline <jcline@xxxxxxxxxx> - 5.1.20-200 - Linux v5.1.20 * Mon Jul 22 2019 Laura Abbott <labbott@xxxxxxxxxx> - Bring in DMA fix (rhbz 1732045) * Mon Jul 22 2019 Jeremy Cline <jcline@xxxxxxxxxx> - 5.1.19-200 - Linux v5.1.19 - Fix Xen Security Advisory 300 (rhbz 1731862 1731864) - Fix a null pointer dereference in the 8250_lpss serial driver (rhbz 1731784) * Thu Jul 18 2019 Jeremy Cline <jcline@xxxxxxxxxx> - Fix CVE-2019-13631 (rhbz 1731000 1731001) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1731862 - xen: no grant table and foreign mapping limits leading to crash and DoS https://bugzilla.redhat.com/show_bug.cgi?id=1731862 [ 2 ] Bug #1731784 - kernel: check null return when calling pci_ioremap_bar https://bugzilla.redhat.com/show_bug.cgi?id=1731784 [ 3 ] Bug #1731000 - CVE-2019-13631 kernel: OOB writes in parse_hid_report_descriptor in drivers/input/tablet/gtco.c https://bugzilla.redhat.com/show_bug.cgi?id=1731000 -------------------------------------------------------------------------------- ================================================================================ kernel-headers-5.1.20-200.fc29 (FEDORA-2019-3dbfaeac73) Header files for the Linux kernel for use by glibc -------------------------------------------------------------------------------- Update Information: Update to v5.1.20 ---- Update to v5.1.19 -------------------------------------------------------------------------------- ChangeLog: * Fri Jul 26 2019 Jeremy Cline <jcline@xxxxxxxxxx> - 5.1.20-200 - Linux v5.1.20 * Mon Jul 22 2019 Jeremy Cline <jcline@xxxxxxxxxx> - 5.1.19-200 - Linux v5.1.19 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1731862 - xen: no grant table and foreign mapping limits leading to crash and DoS https://bugzilla.redhat.com/show_bug.cgi?id=1731862 [ 2 ] Bug #1731784 - kernel: check null return when calling pci_ioremap_bar https://bugzilla.redhat.com/show_bug.cgi?id=1731784 [ 3 ] Bug #1731000 - CVE-2019-13631 kernel: OOB writes in parse_hid_report_descriptor in drivers/input/tablet/gtco.c https://bugzilla.redhat.com/show_bug.cgi?id=1731000 -------------------------------------------------------------------------------- ================================================================================ lua-expat-1.3.0-16.fc29 (FEDORA-2019-5b21c537d4) SAX XML parser based on the Expat library -------------------------------------------------------------------------------- Update Information: Provide lua5.1-expat for https://pagure.io/packaging-committee/issue/878 -------------------------------------------------------------------------------- ChangeLog: * Sat Jul 27 2019 Robert Scheck <robert@xxxxxxxxxxxxxxxxx> - 1.3.0-16 - Spec file cleanups * Thu Jul 25 2019 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1.3.0-15 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Fri Feb 1 2019 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1.3.0-14 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ lua-sec-0.8-1.fc29 (FEDORA-2019-745f6853b9) Lua binding for OpenSSL library -------------------------------------------------------------------------------- Update Information: LuaSec 0.8 ========== * Add support to ALPN * Add support to TLS 1.3 * Add support to multiple certificates * Add timeout to https module (https.TIMEOUT) * Drop support to SSL 3.0 * Drop support to TLS 1.0 from https module * Fix invalid reference to Lua state * Fix memory leak when get certficate extensions LuaSec 0.7 ========== * Add support to OpenSSL 1.1.0 * Add support to elliptic curves list * Add ssl.config that exports some OpenSSL information * Add integration with luaossl -------------------------------------------------------------------------------- ChangeLog: * Sat Jul 27 2019 Robert Scheck <robert@xxxxxxxxxxxxxxxxx> 0.8-1 - Upgrade to 0.8 * Fri Jul 26 2019 Robert Scheck <robert@xxxxxxxxxxxxxxxxx> 0.7-1 - Upgrade to 0.7 * Thu Jul 25 2019 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 0.6-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Fri Feb 1 2019 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 0.6-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ mate-control-center-1.22.1-3.fc29 (FEDORA-2019-a6e4821038) MATE Desktop control-center -------------------------------------------------------------------------------- Update Information: - drop dependency to libXxf86misc - add some upstream patches -------------------------------------------------------------------------------- ChangeLog: * Sun Jul 28 2019 Wolfgang Ulbrich <fedora@xxxxxxxxx> - 1.22.1-3 - drop dependency to libXxf86misc - add some upstream patches -------------------------------------------------------------------------------- ================================================================================ mate-user-admin-1.4.2-1.fc29 (FEDORA-2019-a72937ac34) User management tool -------------------------------------------------------------------------------- Update Information: - update to 1.14.2 - add LXFCE and XFCE to desktop file -------------------------------------------------------------------------------- ChangeLog: * Sun Jul 28 2019 Wolfgang Ulbrich <fedora@xxxxxxxxx> - 1.4.2-1 - update to 1.14.2 - add LXFCE and XFCE to desktop file -------------------------------------------------------------------------------- References: [ 1 ] Bug #1732687 - Make mate-user-admin also show up in the menu for XFCE and LXDE. https://bugzilla.redhat.com/show_bug.cgi?id=1732687 -------------------------------------------------------------------------------- ================================================================================ sirikali-1.3.8-1.fc29 (FEDORA-2019-ae7d0ff134) GUI front end to encfs,cryfs,gocryptfs and securefs -------------------------------------------------------------------------------- Update Information: version 1.3.7(February 9th,2019) -- Add support for gocryptfs "idle" option. -- Add ability to set a favorite volume that does not need a password. Useful when connecting to ssh server with a private key that does not need a password or when getting credentials from external tools like keepass. -- Add a config option to auto unmount volumes on logout(specifically, when SiriKali receive sighup or sigterm). -- Add Russian translations. -- Fix a bug that prevented mounting gocryptfs volumes on MACOS. -- Translations now works on MACOS. -- Add support for Cryfs backend on windows. -- Add support for using a mount folder on windows(sshfs, encfs and cryfs supports both mount folders and drive letters) version 1.3.8(unreleased) -- Remove backend timeout of 20 seconds because cryfs >= 0.10.0 may take a very long time to finish. -- Show a warning that says working with cryfs >= 0.10.0 may take a very long time when creating/unlocking cryfs volumes. -- Improves a window that manages favorites. -------------------------------------------------------------------------------- ChangeLog: * Sat Jul 27 2019 Raphael Groner <projects.rg@xxxxxxxx> - 1.3.8-1 - new version * Fri Jul 26 2019 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1.3.6-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Sat Feb 2 2019 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1.3.6-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1674206 - sirikali-1.3.8 as pre-release https://bugzilla.redhat.com/show_bug.cgi?id=1674206 -------------------------------------------------------------------------------- _______________________________________________ test mailing list -- test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to test-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/test@xxxxxxxxxxxxxxxxxxxxxxx