The following Fedora 30 Security updates need testing: Age URL 5 https://bodhi.fedoraproject.org/updates/FEDORA-2020-8d3b359179 perl-Mojolicious-8.42-1.fc30 3 https://bodhi.fedoraproject.org/updates/FEDORA-2020-eb7a965fcf abcm2ps-8.14.7-2.fc30 1 https://bodhi.fedoraproject.org/updates/FEDORA-2020-9fa7f4e25c php-7.3.18-1.fc30 0 https://bodhi.fedoraproject.org/updates/FEDORA-2020-d98d2cbae1 clamav-0.102.3-1.fc30 0 https://bodhi.fedoraproject.org/updates/FEDORA-2020-847ad856ab json-c-0.13.1-12.fc30
The following Fedora 30 Critical Path updates have yet to be approved: Age URL 10 https://bodhi.fedoraproject.org/updates/FEDORA-2020-ccdb66af9b hwdata-0.335-1.fc30 10 https://bodhi.fedoraproject.org/updates/FEDORA-2020-e71a1d34cb perl-Encode-3.06-15.fc30 9 https://bodhi.fedoraproject.org/updates/FEDORA-2020-28da9b3f28 elfutils-0.179-2.fc30 5 https://bodhi.fedoraproject.org/updates/FEDORA-2020-51ce773eb5 firefox-76.0.1-1.fc30 3 https://bodhi.fedoraproject.org/updates/FEDORA-2020-eca786a240 ethtool-5.6-1.fc30 3 https://bodhi.fedoraproject.org/updates/FEDORA-2020-f57290bd78 dash-0.5.10.2-4.fc30 1 https://bodhi.fedoraproject.org/updates/FEDORA-2020-ac6f73c6fc pcre2-10.35-1.fc30 1 https://bodhi.fedoraproject.org/updates/FEDORA-2020-7db677a922 selinux-policy-3.14.3-58.fc30 0 https://bodhi.fedoraproject.org/updates/FEDORA-2020-1757bac9a0 abrt-2.14.2-1.fc30 abrt-java-connector-1.1.5-1.fc30 gnome-abrt-1.3.2-1.fc30 libreport-2.13.1-3.fc30 reportd-0.7.4-1.fc30 0 https://bodhi.fedoraproject.org/updates/FEDORA-2020-847ad856ab json-c-0.13.1-12.fc30
The following builds have been pushed to Fedora 30 updates-testing
Cadence-1.0.0-0.11.20200504git5787908.fc30 Carla-2.2-0.1.20200514gitf100892.fc30 ibus-typing-booster-2.8.3-2.fc30 kernel-5.6.13-100.fc30 log4net-2.0.8-10.fc30 netdata-1.22.1-1.fc30 openconnect-8.10-1.fc30 osinfo-db-20200515-1.fc30 python-pikepdf-1.12.0-1.fc30 rubygem-rouge-3.19.0-1.fc30 thunderbird-68.8.0-2.fc30
Details about builds:
================================================================================ Cadence-1.0.0-0.11.20200504git5787908.fc30 (FEDORA-2020-51783fcbfa) A set of tools useful for audio production -------------------------------------------------------------------------------- Update Information:
Update to 1.0.0-0.11.20200504git5787908 -------------------------------------------------------------------------------- ChangeLog:
* Fri May 15 2020 Martin Gansser martinkg@fedoraproject.org - 1.0.0-0.11.20200504git5787908 - Update to 1.0.0-0.11.20200504git5787908 --------------------------------------------------------------------------------
================================================================================ Carla-2.2-0.1.20200514gitf100892.fc30 (FEDORA-2020-f705bff8ac) Audio plugin host -------------------------------------------------------------------------------- Update Information:
- Update to 2.2-0.1.20200514gitf100892 - Add ExcludeArch ppc64le due PowerPC is no longer supported by JUCE -------------------------------------------------------------------------------- ChangeLog:
* Fri May 15 2020 Martin Gansser martinkg@fedoraproject.org - 1:2.2-0.1.20200514gitf100892 - Update to 2.2-0.1.20200514gitf100892 - Add ExcludeArch ppc64le due PowerPC is no longer supported by JUCE * Tue Apr 14 2020 Martin Gansser martinkg@fedoraproject.org - 1:2.1-2 - Add epoch to allow update * Tue Apr 14 2020 Martin Gansser martinkg@fedoraproject.org - 1:2.1-1 - Update to 2.1-1 --------------------------------------------------------------------------------
================================================================================ ibus-typing-booster-2.8.3-2.fc30 (FEDORA-2020-b34550d860) A completion input method -------------------------------------------------------------------------------- Update Information:
Do not run the Gtk GUI test from the spec file. -------------------------------------------------------------------------------- ChangeLog:
* Fri May 15 2020 Mike FABIAN mfabian@redhat.com - 2.8.3-2 - Do not run the Gtk GUI test from the spec file. * Sun May 3 2020 Mike FABIAN mfabian@redhat.com - 2.8.3-1 - Update to 2.8.3 - Save default dictionaries and input methods when making the lists empty in the setup tool - Fix reading ���include��� instructions in Compose files and observe XCOMPOSEFILE (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/93) - Fix right-to-left detection for LC_MESSAGES=C (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/97) - GUI tests added thanks to Takao Fujiwara - Update UnicodeData.txt to Unicode 13.0.0 - Translation updates for it, hu, tr, pt_BR --------------------------------------------------------------------------------
================================================================================ kernel-5.6.13-100.fc30 (FEDORA-2020-5a69decc0c) The Linux kernel -------------------------------------------------------------------------------- Update Information:
The 5.6.13 stable kernel update contains a number of important fixes across the tree ---- The 5.6.12 stable update contains a number of important fixes across the tree. -------------------------------------------------------------------------------- ChangeLog:
* Thu May 14 2020 Justin M. Forbes jforbes@fedoraproject.org - 5.6.13-100 - Linux v5.6.13 - Fix boot hang caused by buggy TPM support (rhbz 1779611) - Fix CVE-2020-12655 (rhbz 1832543 1832545) * Tue May 12 2020 Justin M. Forbes jforbes@fedoraproject.org - Fix CVE-2020-10711 (rhbz 1825116 1834778) * Mon May 11 2020 Justin M. Forbes jforbes@fedoraproject.org - 5.6.12-100 - Linux v5.6.12 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1825116 - CVE-2020-10711 Kernel: NetLabel: null pointer dereference while receiving CIPSO packet with null category may cause kernel panic https://bugzilla.redhat.com/show_bug.cgi?id=1825116 [ 2 ] Bug #1832543 - CVE-2020-12655 kernel: sync of excessive duration via an XFS v5 image with crafted metadata https://bugzilla.redhat.com/show_bug.cgi?id=1832543 [ 3 ] Bug #1834845 - CVE-2020-12770 kernel: sg_write function lacks an sg_remove_request call in a certain failure case https://bugzilla.redhat.com/show_bug.cgi?id=1834845 --------------------------------------------------------------------------------
================================================================================ log4net-2.0.8-10.fc30 (FEDORA-2020-cfc319e067) A .NET framework for logging -------------------------------------------------------------------------------- Update Information:
Security fix for CVE-2018-1285 -------------------------------------------------------------------------------- ChangeLog:
* Fri May 15 2020 Timotheus Pokorra timotheus.pokorra@solidcharity.com - 2.0.8-10 - apply security fix for xml configurator: [CVE-2018-1285] XXE vulnerability in Apache log4net * Wed Jan 29 2020 Fedora Release Engineering releng@fedoraproject.org - 2.0.8-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Wed Aug 21 2019 Timotheus Pokorra timotheus.pokorra@solidcharity.com - 2.0.8-8 - Rebuilt with new mono package so that the Provides is fixed again - don't require nant for building * Thu Jul 25 2019 Fedora Release Engineering releng@fedoraproject.org - 2.0.8-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1835982 - CVE-2018-1285 log4net: XXE in applications that accept arbitrary configuration files from users https://bugzilla.redhat.com/show_bug.cgi?id=1835982 --------------------------------------------------------------------------------
================================================================================ netdata-1.22.1-1.fc30 (FEDORA-2020-e3eae31728) Real-time performance monitoring -------------------------------------------------------------------------------- Update Information:
Update from upstream -------------------------------------------------------------------------------- ChangeLog:
* Wed May 13 2020 Didier Fabert didier.fabert@gmail.com 1.22.1-1 - Update from upstream * Sat Apr 18 2020 Juan Orti Alcaine jortialc@redhat.com 1.21.1-2 - Sync /usr/libexec/netdata/plugins.d/ binaries permissions with upstream -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1834571 - netdata-1.22.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1834571 --------------------------------------------------------------------------------
================================================================================ openconnect-8.10-1.fc30 (FEDORA-2020-bc22f06aa3) Open client for Cisco AnyConnect VPN, Juniper Network Connect/Pulse, PAN GlobalProtect -------------------------------------------------------------------------------- Update Information:
Update to 8.10 release (CVE-2020-12823) -------------------------------------------------------------------------------- ChangeLog:
* Thu May 14 2020 David Woodhouse dwmw2@infradead.orG - 8.10-1 - Update to 8.10 release (CVE-2020-12823) * Sat May 2 2020 David Woodhouse dwmw2@infradead.org - 8.09-2 - Fix path to openconnect in bash completion script * Wed Apr 29 2020 David Woodhouse dwmw2@infradead.org - 8.09-1 - Update to 8.09 release * Mon Apr 6 2020 David Woodhouse dwmw2@infradead.org - 8.08-1 - Update to 8.08 release (CSD stderr handling, cert checking) * Sat Apr 4 2020 David Woodhouse dwmw2@infradead.org - 8.07-1 - Update to 8.07 release (runtime check for GnuTLS) * Tue Mar 31 2020 David Woodhouse dwmw2@infradead.org - 8.06-1 - Update to 8.06 release (Blacklist bad GnuTLS versions for insecure DTLS) * Wed Jan 29 2020 Fedora Release Engineering releng@fedoraproject.org - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ osinfo-db-20200515-1.fc30 (FEDORA-2020-2320e85ab1) osinfo database files -------------------------------------------------------------------------------- Update Information:
Update to new release (v20200515) -------------------------------------------------------------------------------- ChangeLog:
* Fri May 15 2020 Fabiano Fid��ncio fidencio@redhat.com - 20200515-1 - Update to new release (v20200515) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1836014 - fedora 32 images missing from libosinfo database https://bugzilla.redhat.com/show_bug.cgi?id=1836014 --------------------------------------------------------------------------------
================================================================================ python-pikepdf-1.12.0-1.fc30 (FEDORA-2020-8c98d6f27d) Read and write PDFs with Python, powered by qpdf -------------------------------------------------------------------------------- Update Information:
Update to latest version -------------------------------------------------------------------------------- ChangeLog:
* Fri May 15 2020 Elliott Sales de Andrade quantum.analyst@gmail.com - 1.12.0-1 - Update to latest version * Mon May 4 2020 Elliott Sales de Andrade quantum.analyst@gmail.com - 1.11.2-1 - Update to latest version * Fri Apr 17 2020 Elliott Sales de Andrade quantum.analyst@gmail.com - 1.11.1-1 - Update to latest version * Tue Apr 14 2020 Zdenek Dohnal zdohnal@redhat.com - 1.11.0-2 - rebuilt for qpdf-10.0.1 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1835684 - python-pikepdf-1.12.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1835684 --------------------------------------------------------------------------------
================================================================================ rubygem-rouge-3.19.0-1.fc30 (FEDORA-2020-6b78c022b9) Pure-ruby colorizer based on pygments -------------------------------------------------------------------------------- Update Information:
Update to version 3.19.0. Release notes: https://github.com/rouge- ruby/rouge/releases/tag/v3.19.0 -------------------------------------------------------------------------------- ChangeLog:
* Fri May 15 2020 Fabio Valentini decathorpe@gmail.com - 3.19.0-1 - Update to version 3.19.0. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1834954 - rubygem-rouge-3.19.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1834954 --------------------------------------------------------------------------------
================================================================================ thunderbird-68.8.0-2.fc30 (FEDORA-2020-7fd99ffae0) Mozilla Thunderbird mail/newsgroup client -------------------------------------------------------------------------------- Update Information:
- Fixed opening mailto: link from Firefox (rhbz#1817330) ---- Update to latest upstream version -------------------------------------------------------------------------------- ChangeLog:
* Fri May 15 2020 Martin Stransky stransky@redhat.com - 68.8.0-2 - Use D-Bus remote on Wayland (rhbz#1817330). * Thu May 14 2020 Jan Horak jhorak@redhat.com - 68.8.0-1 - Update to 68.8.0 build2 * Wed Apr 15 2020 Jan Horak jhorak@redhat.com - 68.7.0-2 - Removed gconf-2.0 build requirement, added perl-interpreter instead to fulfill perl dependency * Thu Apr 9 2020 Jan Horak jhorak@redhat.com - 68.7.0-1 - Update to 68.7.0 build1 * Fri Mar 13 2020 Jan Horak jhorak@redhat.com - 68.6.0-1 - Update to 68.6.0 build2 * Tue Mar 3 2020 David Auer dreua@posteo.de - 68.5.0-2 - Fix spellcheck (rhbz#1753011) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1817330 - Firefox cannot open mailto links https://bugzilla.redhat.com/show_bug.cgi?id=1817330 [ 2 ] Bug #1822184 - thunderbird-68.7.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1822184 --------------------------------------------------------------------------------