The following Fedora 30 Security updates need testing: Age URL 91 https://bodhi.fedoraproject.org/updates/FEDORA-2019-71b2273a9f libarchive-3.3.3-7.fc30 24 https://bodhi.fedoraproject.org/updates/FEDORA-2020-cc26574961 chromium-79.0.3945.130-1.fc30 13 https://bodhi.fedoraproject.org/updates/FEDORA-2020-b8b7a4a0e5 poppler-0.73.0-16.fc30 11 https://bodhi.fedoraproject.org/updates/FEDORA-2020-f8e267d6d0 systemd-241-14.git18dd3fb.fc30 10 https://bodhi.fedoraproject.org/updates/FEDORA-2020-47efc31973 libuv-1.34.2-1.fc30 nghttp2-1.40.0-1.fc30 10 https://bodhi.fedoraproject.org/updates/FEDORA-2020-830d8a1a92 http-parser-2.9.3-1.fc30 nodejs-10.19.0-1.fc30 10 https://bodhi.fedoraproject.org/updates/FEDORA-2020-092ef6572a glib2-2.60.7-3.fc30 5 https://bodhi.fedoraproject.org/updates/FEDORA-2020-0e6a67af5a dovecot-2.3.9.3-1.fc30 4 https://bodhi.fedoraproject.org/updates/FEDORA-2020-5cdbb19cca python-pillow-5.4.1-4.fc30 4 https://bodhi.fedoraproject.org/updates/FEDORA-2020-8193c0aa68 mingw-openjpeg2-2.3.1-7.fc30 openjpeg2-2.3.1-6.fc30 3 https://bodhi.fedoraproject.org/updates/FEDORA-2020-c68458c879 podman-1.8.0-2.fc30 3 https://bodhi.fedoraproject.org/updates/FEDORA-2020-4d11d35a1f webkit2gtk3-2.26.4-1.fc30 2 https://bodhi.fedoraproject.org/updates/FEDORA-2020-2a0aac3502 skopeo-0.1.41-1.fc30 2 https://bodhi.fedoraproject.org/updates/FEDORA-2020-f6cc7883b8 hiredis-0.13.3-13.fc30 1 https://bodhi.fedoraproject.org/updates/FEDORA-2020-76d608179d NetworkManager-ssh-1.2.11-1.fc30 1 https://bodhi.fedoraproject.org/updates/FEDORA-2020-bdcc8ffc24 python-waitress-1.4.3-1.fc30 1 https://bodhi.fedoraproject.org/updates/FEDORA-2020-a06ebafad8 python-psutil-5.6.7-1.fc30
The following Fedora 30 Critical Path updates have yet to be approved: Age URL 222 https://bodhi.fedoraproject.org/updates/FEDORA-2019-c05e4425d1 dash-0.5.10.2-3.fc30 91 https://bodhi.fedoraproject.org/updates/FEDORA-2019-71b2273a9f libarchive-3.3.3-7.fc30 28 https://bodhi.fedoraproject.org/updates/FEDORA-2020-aa758fe515 koji-1.20.0-1.fc30 13 https://bodhi.fedoraproject.org/updates/FEDORA-2020-b8b7a4a0e5 poppler-0.73.0-16.fc30 13 https://bodhi.fedoraproject.org/updates/FEDORA-2020-5739bd54c3 llvm-8.0.0-7.fc30 rust-1.41.0-1.fc30 rust-packaging-10-2.fc30 11 https://bodhi.fedoraproject.org/updates/FEDORA-2020-5dcfa13703 ceph-14.2.7-2.fc30 11 https://bodhi.fedoraproject.org/updates/FEDORA-2020-f8e267d6d0 systemd-241-14.git18dd3fb.fc30 11 https://bodhi.fedoraproject.org/updates/FEDORA-2020-c4d27dea0b selinux-policy-3.14.3-56.fc30 11 https://bodhi.fedoraproject.org/updates/FEDORA-2020-66c974fdb6 dnf-4.2.18-1.fc30 dnf-plugins-core-4.0.13-1.fc30 libdnf-0.43.1-2.fc30 microdnf-3.4.0-1.fc30 10 https://bodhi.fedoraproject.org/updates/FEDORA-2020-092ef6572a glib2-2.60.7-3.fc30 10 https://bodhi.fedoraproject.org/updates/FEDORA-2020-830d8a1a92 http-parser-2.9.3-1.fc30 nodejs-10.19.0-1.fc30 10 https://bodhi.fedoraproject.org/updates/FEDORA-2020-47efc31973 libuv-1.34.2-1.fc30 nghttp2-1.40.0-1.fc30 10 https://bodhi.fedoraproject.org/updates/FEDORA-2020-886fc2deb7 python-productmd-1.24-1.fc30 10 https://bodhi.fedoraproject.org/updates/FEDORA-2020-5e06ad5ec5 cryptsetup-2.3.0-1.fc30 8 https://bodhi.fedoraproject.org/updates/FEDORA-2020-b7b2270753 mdadm-4.1-1.fc30 7 https://bodhi.fedoraproject.org/updates/FEDORA-2020-02278780cf nfs-utils-2.4.3-0.fc30 6 https://bodhi.fedoraproject.org/updates/FEDORA-2020-e94bce43a0 abrt-2.14.0-1.fc30 abrt-java-connector-1.1.4-1.fc30 libreport-2.12.0-1.fc30 satyr-0.30-2.fc30 6 https://bodhi.fedoraproject.org/updates/FEDORA-2020-970a0aa60e python-rpm-macros-3-46.fc30 5 https://bodhi.fedoraproject.org/updates/FEDORA-2020-299acf832a pcre-8.43-3.fc30 5 https://bodhi.fedoraproject.org/updates/FEDORA-2020-71be871020 libdnf-0.43.1-3.fc30 4 https://bodhi.fedoraproject.org/updates/FEDORA-2020-8193c0aa68 mingw-openjpeg2-2.3.1-7.fc30 openjpeg2-2.3.1-6.fc30 4 https://bodhi.fedoraproject.org/updates/FEDORA-2020-17af221dbb nss-pem-1.0.6-1.fc30 4 https://bodhi.fedoraproject.org/updates/FEDORA-2020-293bf84963 vim-8.2.236-1.fc30 2 https://bodhi.fedoraproject.org/updates/FEDORA-2020-6dfb032e43 flatpak-1.4.4-2.fc30
The following builds have been pushed to Fedora 30 updates-testing
accounts-qml-module-0.7-1.fc30 authselect-1.1-3.fc30 caddy-1.0.3-2.fc30 cinnamon-4.4.8-3.fc30 crun-0.12.2.1-1.fc30 etcd-3.3.12-5.20190413gitf29b1ad.fc30 firejail-0.9.62-1.fc30 golang-github-gorilla-websocket-1.4.1-1.fc30 hugo-0.55.6-2.fc30 libpq-12.2-1.fc30 libxcrypt-4.4.14-1.fc30 net-snmp-5.8-16.fc30 pcre2-10.34-6.fc30 perl-BSSolv-0.17-1.fc30 php-seld-phar-utils-1.1.0-1.fc30 postgresql-11.7-2.fc30 python-pycryptodomex-3.9.6-2.fc30 thunderbird-68.5.0-1.fc30 whois-5.5.6-1.fc30
Details about builds:
================================================================================ accounts-qml-module-0.7-1.fc30 (FEDORA-2020-2bcd5ee423) QML bindings for libaccounts-qt + libsignon-qt -------------------------------------------------------------------------------- Update Information:
QML bindings for libaccounts-qt + libsignon-qt -------------------------------------------------------------------------------- ChangeLog:
* Tue Feb 11 2020 Rex Dieter rdieter@fedoraproject.org - 0.7-1 - first try, inspiration from opensuse packaging -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1801765 - Review Request: accounts-qml-module - QML bindings for libaccounts-qt + libsignon-qt https://bugzilla.redhat.com/show_bug.cgi?id=1801765 --------------------------------------------------------------------------------
================================================================================ authselect-1.1-3.fc30 (FEDORA-2020-262cfead59) Configures authentication and identity sources from supported profiles -------------------------------------------------------------------------------- Update Information:
Fix https://github.com/pbrezina/authselect/issues/197 - authselect was unable to restore default non-authselect configuration. -------------------------------------------------------------------------------- ChangeLog:
* Mon Feb 17 2020 Pavel B��ezina pbrezina@redhat.com - 1.1-4 - fix restoring non-authselect configuration from backup --------------------------------------------------------------------------------
================================================================================ caddy-1.0.3-2.fc30 (FEDORA-2020-279c61dd70) Web server with automatic HTTPS -------------------------------------------------------------------------------- Update Information:
Rebuilt to fix [GHSA- jf24-p9p9-4rjh](https://github.com/gorilla/websocket/security/advisories/GHSA- jf24-p9p9-4rjh); Potential DoS Vector in gorilla/websocket <= v1.4.0. -------------------------------------------------------------------------------- ChangeLog:
* Mon Feb 17 2020 Elliott Sales de Andrade quantum.analyst@gmail.com - 1.0.3-2 - Rebuilt for GHSA-jf24-p9p9-4rjh --------------------------------------------------------------------------------
================================================================================ cinnamon-4.4.8-3.fc30 (FEDORA-2020-6e757cddf1) Window management and application launching for GNOME -------------------------------------------------------------------------------- Update Information:
- Enable notification sound - Patch cinnamon-setting info for python-3.8 -------------------------------------------------------------------------------- ChangeLog:
* Mon Feb 17 2020 Leigh Scott leigh123linux@googlemail.com - 4.4.8-3 - Enable notification sound - Patch cinnamon-setting info for python-3.8 * Tue Jan 28 2020 Fedora Release Engineering releng@fedoraproject.org - 4.4.8-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ crun-0.12.2.1-1.fc30 (FEDORA-2020-3f045b3cf3) OCI runtime written in C -------------------------------------------------------------------------------- Update Information:
built version 0.12.2.1 ---- built version 0.12.1 -------------------------------------------------------------------------------- ChangeLog:
* Mon Feb 17 2020 Giuseppe Scrivano gscrivan@redhat.com - 0.12.2.1-1 - built version 0.12.2.1 * Mon Feb 17 2020 Giuseppe Scrivano gscrivan@redhat.com - 0.12.2-1 - built version 0.12.2 * Thu Feb 6 2020 Giuseppe Scrivano gscrivan@redhat.com - 0.12.1-1 - built version 0.12.1 * Mon Feb 3 2020 Giuseppe Scrivano gscrivan@redhat.com - 0.12-1 - built version 0.12 * Tue Jan 28 2020 Fedora Release Engineering releng@fedoraproject.org - 0.11-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Mon Dec 23 2019 Giuseppe Scrivano gscrivan@redhat.com - 0.11-1 - built version 0.11 --------------------------------------------------------------------------------
================================================================================ etcd-3.3.12-5.20190413gitf29b1ad.fc30 (FEDORA-2020-279c61dd70) A highly-available key value store for shared configuration -------------------------------------------------------------------------------- Update Information:
Rebuilt to fix [GHSA- jf24-p9p9-4rjh](https://github.com/gorilla/websocket/security/advisories/GHSA- jf24-p9p9-4rjh); Potential DoS Vector in gorilla/websocket <= v1.4.0. -------------------------------------------------------------------------------- ChangeLog:
* Mon Feb 17 2020 Elliott Sales de Andrade quantum.analyst@gmail.com - 3.3.12-5 - Rebuilt for GHSA-jf24-p9p9-4rjh --------------------------------------------------------------------------------
================================================================================ firejail-0.9.62-1.fc30 (FEDORA-2020-0fb484d7f7) Linux namespaces sandbox program -------------------------------------------------------------------------------- Update Information:
Rebase to version 0.9.62 -------------------------------------------------------------------------------- ChangeLog:
* Mon Feb 17 2020 Ondrej Dubaj odubaj@redhat.com - 0.9.62-1 - Rebase to version 0.9.62 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1725965 - firejail-0.9.62 is available https://bugzilla.redhat.com/show_bug.cgi?id=1725965 [ 2 ] Bug #1716681 - CVE-2019-12589 firejail: improper seccomp restrictions due to filters being writable inside the jail [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1716681 [ 3 ] Bug #1803907 - Error mounting appimage: appimage.c:119 appimage_set: Invalid argument https://bugzilla.redhat.com/show_bug.cgi?id=1803907 [ 4 ] Bug #1787915 - [abrt] firejail: ioperm(): faudit killed by SIGSYS https://bugzilla.redhat.com/show_bug.cgi?id=1787915 [ 5 ] Bug #1716910 - CVE-2019-12499 firejail: file descriptors command execution [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1716910 --------------------------------------------------------------------------------
================================================================================ golang-github-gorilla-websocket-1.4.1-1.fc30 (FEDORA-2020-8f18c45545) A WebSocket implementation for Go -------------------------------------------------------------------------------- Update Information:
Update to latest version. Fix GHSA-jf24-p9p9-4rjh. -------------------------------------------------------------------------------- ChangeLog:
* Mon Feb 17 2020 Elliott Sales de Andrade quantum.analyst@gmail.com - 1.4.1-1 - Update to latest version - Fix GHSA-jf24-p9p9-4rjh -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1747010 - golang-github-gorilla-websocket-1.4.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1747010 --------------------------------------------------------------------------------
================================================================================ hugo-0.55.6-2.fc30 (FEDORA-2020-279c61dd70) A Fast and Flexible Static Site Generator built with love in GoLang -------------------------------------------------------------------------------- Update Information:
Rebuilt to fix [GHSA- jf24-p9p9-4rjh](https://github.com/gorilla/websocket/security/advisories/GHSA- jf24-p9p9-4rjh); Potential DoS Vector in gorilla/websocket <= v1.4.0. -------------------------------------------------------------------------------- ChangeLog:
* Mon Feb 17 2020 Elliott Sales de Andrade quantum.analyst@gmail.com - 0.55.6-2 - Rebuilt for GHSA-jf24-p9p9-4rjh --------------------------------------------------------------------------------
================================================================================ libpq-12.2-1.fc30 (FEDORA-2020-0697263271) PostgreSQL client library -------------------------------------------------------------------------------- Update Information:
Rebase to upstream release 12.2 -------------------------------------------------------------------------------- ChangeLog:
* Mon Feb 17 2020 Patrik Novotn�� panovotn@redhat.com - 12.2-1 - Rebase to upstream release 12.2 * Tue Feb 4 2020 Patrik Novotn�� panovotn@redhat.com - 12.1-1 - Rebase to upstream release 12.1 * Wed Jan 29 2020 Fedora Release Engineering releng@fedoraproject.org - 11.6-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Mon Nov 25 2019 Patrik Novotn�� panovotn@redhat.com - 11.6-1 - Rebase to upstream version 11.6 --------------------------------------------------------------------------------
================================================================================ libxcrypt-4.4.14-1.fc30 (FEDORA-2020-60ca02e4fe) Extended crypt library for descrypt, md5crypt, bcrypt, and others -------------------------------------------------------------------------------- Update Information:
- New upstream release. - Modernize spec file. - Use macro for conflicting man- pages package. -------------------------------------------------------------------------------- ChangeLog:
* Mon Feb 17 2020 Bj��rn Esser besser82@fedoraproject.org - 4.4.14-1 - New upstream release * Sun Feb 16 2020 Bj��rn Esser besser82@fedoraproject.org - 4.4.13-1 - New upstream release * Tue Feb 11 2020 Bj��rn Esser besser82@fedoraproject.org - 4.4.12-3 - Add an upstream patch to fix a typo in the documentation * Wed Feb 5 2020 Bj��rn Esser besser82@fedoraproject.org - 4.4.12-2 - Add two upstream patches to resolve minor bugs --------------------------------------------------------------------------------
================================================================================ net-snmp-5.8-16.fc30 (FEDORA-2020-d588eaa6e2) A collection of SNMP protocol tools and libraries -------------------------------------------------------------------------------- Update Information:
Set net-snmp-devel as requirement for net-snmp-perl. -------------------------------------------------------------------------------- ChangeLog:
* Mon Feb 17 2020 Josef Ridky jridky@redhat.com - 1:5.8-16 - set net-snmp-devel as requirement for net-snmp-perl * Wed Jan 29 2020 Fedora Release Engineering releng@fedoraproject.org - 1:5.8-15 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Thu Oct 3 2019 Miro Hron��ok mhroncok@redhat.com - 1:5.8-14 - Rebuilt for Python 3.8.0rc1 (#1748018) * Thu Sep 19 2019 Josef Ridky jridky@redhat.com - 1:5.8-13 - Fix snmpv3 trap forwarding (#1753506) * Mon Aug 19 2019 Miro Hron��ok mhroncok@redhat.com - 1:5.8-12 - Rebuilt for Python 3.8 * Thu Jul 25 2019 Fedora Release Engineering releng@fedoraproject.org - 1:5.8-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ pcre2-10.34-6.fc30 (FEDORA-2020-02babc0ff5) Perl-compatible regular expression library -------------------------------------------------------------------------------- Update Information:
This release fixes a JIT miscompilation of the chained verbs that can lead to a crash of the process. -------------------------------------------------------------------------------- ChangeLog:
* Mon Feb 17 2020 Petr Pisar ppisar@redhat.com - 10.34-6 - Fix restoring a verb chaing list when exiting a JIT-compiled recursive function --------------------------------------------------------------------------------
================================================================================ perl-BSSolv-0.17-1.fc30 (FEDORA-2020-3a2529809c) OBS solver and repository management using libsolv -------------------------------------------------------------------------------- Update Information:
Update to final release of perl-BSSolv with Fedora modularity support -------------------------------------------------------------------------------- ChangeLog:
* Mon Feb 17 2020 Neal Gompa ngompa13@gmail.com - 0.17-1 - Update to 0.17 * Wed Jan 29 2020 Fedora Release Engineering releng@fedoraproject.org - 0.15-3.git20191121.1955d7f - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ php-seld-phar-utils-1.1.0-1.fc30 (FEDORA-2020-fa8aef488f) PHAR file format utilities -------------------------------------------------------------------------------- Update Information:
**Version 1.1.0** *Added Linter class with a lint function to lint all PHP files inside a Phar file. -------------------------------------------------------------------------------- ChangeLog:
* Mon Feb 17 2020 Remi Collet remi@remirepo.net - 1.1.0-1 - update to 1.1.0 --------------------------------------------------------------------------------
================================================================================ postgresql-11.7-2.fc30 (FEDORA-2020-434a30f703) PostgreSQL client programs -------------------------------------------------------------------------------- Update Information:
Rebase to upstream release 11.7 -------------------------------------------------------------------------------- ChangeLog:
* Mon Feb 17 2020 Patrik Novotn�� panovotn@redhat.com - 11.7-2 - Release bump after changelog fix * Mon Feb 17 2020 Patrik Novotn�� panovotn@redhat.com - 11.7-1 - Rebase to upstream release 11.7 * Wed Nov 27 2019 Patrik Novotn�� panovotn@redhat.com - 11.6-1 - New upstream version 11.6 --------------------------------------------------------------------------------
================================================================================ python-pycryptodomex-3.9.6-2.fc30 (FEDORA-2020-7204f05856) A self-contained cryptographic library for Python -------------------------------------------------------------------------------- Update Information:
Move test suite module to a separate package ([RHBZ #1802989](https://bugzilla.redhat.com/show_bug.cgi?id=1802989)) -------------------------------------------------------------------------------- ChangeLog:
* Mon Feb 17 2020 Mohamed El Morabity melmorabity@fedoraproject.org - 3.9.6-2 - Move test suite module to a separate package (RHBZ #1802989) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1802989 - None https://bugzilla.redhat.com/show_bug.cgi?id=1802989 --------------------------------------------------------------------------------
================================================================================ thunderbird-68.5.0-1.fc30 (FEDORA-2020-2211f3adde) Mozilla Thunderbird mail/newsgroup client -------------------------------------------------------------------------------- Update Information:
Update to latest upstream version -------------------------------------------------------------------------------- ChangeLog:
* Thu Feb 13 2020 Jan Horak jhorak@redhat.com - 68.5.0-1 - Update to 68.5.0 build1 * Fri Jan 31 2020 Fedora Release Engineering releng@fedoraproject.org - 68.4.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1779264 - thunderbird-68.5.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1779264 --------------------------------------------------------------------------------
================================================================================ whois-5.5.6-1.fc30 (FEDORA-2020-881594a179) Improved WHOIS client -------------------------------------------------------------------------------- Update Information:
This release updates a record for th. domain. It also adds records for ��������������. and ���������. domains. -------------------------------------------------------------------------------- ChangeLog:
* Mon Feb 17 2020 Petr Pisar ppisar@redhat.com - 5.5.6-1 - 5.5.6 bump -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1803516 - whois-5.5.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1803516 --------------------------------------------------------------------------------