The following Fedora 30 Security updates need testing:
Age URL
10
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6dcf885e38
thunderbird-68.2.2-1.fc30
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-656f7ac8ca
hunspell-1.7.0-4.fc30
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-cbb732f760 xen-4.11.2-3.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-160303ebeb
libidn2-2.3.0-1.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-20e9736c97
mingw-libidn2-2.3.0-1.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-76f546b7b8
freeimage-3.18.0-6.fc30 mingw-freeimage-3.18.0-7.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-71b2273a9f
libarchive-3.3.3-7.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-90925dd5aa
imapfilter-2.6.15-1.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e8d74ece30
mod_auth_mellon-0.15.0-1.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b1636e0b70
sqlite-3.26.0-7.fc30
The following Fedora 30 Critical Path updates have yet to be approved:
Age URL
135
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c05e4425d1
dash-0.5.10.2-3.fc30
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-420c65a29c koji-1.19.1-1.fc30
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-cc544c9909
libosinfo-1.4.0-5.fc30
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d209183ead
osinfo-db-20191108-1.fc30
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9de0094801 psmisc-23.2-1.fc30
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ff177015b4
shared-mime-info-1.15-1.fc30
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-1114295d62
vim-8.1.2267-1.fc30
10
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4213c52f7b
evolution-3.32.5-1.fc30 evolution-data-server-3.32.5-1.fc30
10
https://bodhi.fedoraproject.org/updates/FEDORA-2019-2323cb1002
rpcbind-1.2.5-4.rc1.fc30
10
https://bodhi.fedoraproject.org/updates/FEDORA-2019-156c5b9142 sudo-1.8.29-1.fc30
10
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6dcf885e38
thunderbird-68.2.2-1.fc30
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-cbb732f760 xen-4.11.2-3.fc30
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-656f7ac8ca
hunspell-1.7.0-4.fc30
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-81f4b87c18
breeze-icon-theme-5.64.0-1.fc30 extra-cmake-modules-5.64.0-1.fc30 kf5-5.64.0-1.fc30
kf5-attica-5.64.0-1.fc30 kf5-baloo-5.64.0-1.fc30 kf5-bluez-qt-5.64.0-1.fc30
kf5-frameworkintegration-5.64.0-1.fc30 kf5-kactivities-5.64.0-1.fc30
kf5-kactivities-stats-5.64.0-1.fc30 kf5-kapidox-5.64.0-1.fc30 kf5-karchive-5.64.0-1.fc30
kf5-kauth-5.64.0-1.fc30 kf5-kbookmarks-5.64.0-1.fc30 kf5-kcmutils-5.64.0-1.fc30
kf5-kcodecs-5.64.0-1.fc30 kf5-kcompletion-5.64.0-1.fc30 kf5-kconfig-5.64.0-1.fc30
kf5-kconfigwidgets-5.64.0-1.fc30 kf5-kcoreaddons-5.64.0-1.fc30 kf5-kcrash-5.64.0-1.fc30
kf5-kdbusaddons-5.64.0-1.fc30 kf5-kdeclarative-5.64.0-1.fc30 kf5-kded-5.64.0-1.fc30
kf5-kdelibs4support-5.64.0-1.fc30 kf5-kdesignerplugin-5.64.0-1.fc30
kf5-kdesu-5.64.0-1.fc30 kf5-kdewebkit-5.64.0-1.fc30 kf5-kdnssd-5.64.0-1.fc30
kf5-kdoctools-5.64.0-1.fc30 kf5-kemoticons-5.64.0-1.fc30 kf5-kfilemetadata-5.64.0-1.fc30
kf5-kglobalaccel-5.64.0-1.fc30 kf5-kguiad
dons-5.64.0-1.fc30 kf5-kholidays-5.64.0-1.fc30 kf5-khtml-5.64.0-1.fc30
kf5-ki18n-5.64.0-1.fc30 kf5-kiconthemes-5.64.0-1.fc30 kf5-kidletime-5.64.0-1.fc30
kf5-kimageformats-5.64.0-1.fc30 kf5-kinit-5.64.0-1.fc30 kf5-kio-5.64.0-1.fc30
kf5-kirigami2-5.64.0-1.fc30 kf5-kitemmodels-5.64.0-1.fc30 kf5-kitemviews-5.64.0-1.fc30
kf5-kjobwidgets-5.64.0-1.fc30 kf5-kjs-5.64.0-1.fc30 kf5-kjsembed-5.64.0-1.fc30
kf5-kmediaplayer-5.64.0-1.fc30 kf5-knewstuff-5.64.0-1.fc30
kf5-knotifications-5.64.0-1.fc30 kf5-knotifyconfig-5.64.0-1.fc30
kf5-kpackage-5.64.0-1.fc30 kf5-kparts-5.64.0-1.fc30 kf5-kpeople-5.64.0-1.fc30
kf5-kplotting-5.64.0-1.fc30 kf5-kpty-5.64.0-1.fc30 kf5-kross-5.64.0-1.fc30
kf5-krunner-5.64.0-1.fc30 kf5-kservice-5.64.0-1.fc30 kf5-ktexteditor-5.64.0-1.fc30
kf5-ktextwidgets-5.64.0-1.fc30 kf5-kunitconversion-5.64.0-1.fc30 kf5-kwallet-5.64.0-1.fc30
kf5-kwayland-5.64.0-1.fc30 kf5-kwidgetsaddons-5.64.0-1.fc30
kf5-kwindowsystem-5.64.0-1.fc30 kf5-kxmlgui-5.64.0-1.fc30 kf5-kxmlrpcclient-5.64.0-1.fc30
kf5-modemmanager-qt-5.64.0-1.fc30 kf5-networkmanager-qt-5.64.0-1.fc30
kf5-plasma-5.64.0-1.fc30 kf5-prison-5.64.0-1.fc30 kf5-purpose-5.64.0-1.fc30
kf5-solid-5.64.0-1.fc30 kf5-sonnet-5.64.0-1.fc30 kf5-syndication-5.64.0-1.fc30
kf5-syntax-highlighting-5.64.0-1.fc30 kf5-threadweaver-5.64.0-1.fc30
oxygen-icon-theme-5.64.0-1.fc30 qqc2-desktop-style-5.64.0-1.fc30
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-7cafbe66ba dnf-4.2.15-3.fc30
dnf-plugins-core-4.0.11-1.fc30 dnf-plugins-extras-4.0.8-1.fc30 libdnf-0.37.2-2.fc30
librepo-1.11.0-1.fc30 microdnf-3.0.2-1.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-160303ebeb
libidn2-2.3.0-1.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-71b2273a9f
libarchive-3.3.3-7.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-5559f6780a
pcre2-10.33-16.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-32b5b28d15
libappstream-glib-0.7.16-2.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-36d7ed0380
libgusb-0.3.1-1.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9f1eeafee8 glibc-2.29-26.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b1636e0b70
sqlite-3.26.0-7.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9efa3fc4f8
tigervnc-1.10.0-1.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-388010ce63
alsa-firmware-1.2.1-2.fc30 alsa-lib-1.2.1.1-1.fc30 alsa-plugins-1.2.1-1.fc30
alsa-utils-1.2.1-3.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-2143a7fc75 gdb-8.3-7.fc30
The following builds have been pushed to Fedora 30 updates-testing
beakerlib-libraries-0.5-1.fc30
binutils-2.31.1-36.fc30
build2-0.12.0-1.fc30~bootstrap
djvulibre-3.5.27-16.fc30
elementary-calculator-1.5.3-1.fc30
elementary-capnet-assist-2.2.4-1.fc30
freeradius-3.0.20-1.fc30
gerbera-1.3.5-1.fc30
guayadeque-0.4.7-0.1.20191117git89c6ab2.fc30
httpd-2.4.41-6.1.fc30
jhead-3.04-1.fc30
kernel-5.3.12-200.fc30
oval-graph-0.0.2-1.fc30
phpMyAdmin-4.9.2-1.fc30
pyproject-rpm-macros-0-10.fc30
python-editdistance-0.5.3-1.fc30
python-partd-1.1.0-1.fc30
python-wikitcms-2.5.1-1.fc30
qownnotes-19.11.19-1.20191121git37520b7.fc30
recap-2.1.0-6.fc30
roundcubemail-1.4.1-1.fc30
tig-2.5.0-1.fc30
vgrive-1.4.0-1.fc30
votca-csg-1.5.1-1.fc30
votca-tools-1.5.1-2.fc30
votca-xtp-1.5.1-1.fc30
wp-cli-2.4.0-2.fc30
youtube-dl-2019.11.22-1.fc30
Details about builds:
================================================================================
beakerlib-libraries-0.5-1.fc30 (FEDORA-2019-1a8411458a)
Beakerlib libraries
--------------------------------------------------------------------------------
Update Information:
Update to 0.5
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 22 2019 Andrei Stepanov <astepano(a)redhat.com> - 0.5-1
- Build with the latest merged PRs.
* Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
binutils-2.31.1-36.fc30 (FEDORA-2019-9a102a5fa8)
A GNU collection of binary utilities
--------------------------------------------------------------------------------
Update Information:
A recent bug introduced into the strip program in the binutils package is
breaking the builds of other packages. This update is to propagate the fixed
binutils.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 21 2019 Nick Clifton <nickc(a)redhat.com> - 2.31.1-36
- Fix a buffer overrun in the note merging code. (#1774507)
* Thu Nov 7 2019 Nick Clifton <nickc(a)redhat.com> - 2.31.1-35
- Strip: Do not fill note sections with zero bytes if not merging.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1774507 - strip segfaults on cryptlib
https://bugzilla.redhat.com/show_bug.cgi?id=1774507
[ 2 ] Bug #1767937 - strip:testprog[.gnu.build.attributes]: corrupt GNU build attribute
note: wrong note type: bad value
https://bugzilla.redhat.com/show_bug.cgi?id=1767937
--------------------------------------------------------------------------------
================================================================================
build2-0.12.0-1.fc30~bootstrap (FEDORA-2019-7f89d5db41)
Cross-platform build toolchain for developing and packaging C++ code
--------------------------------------------------------------------------------
Update Information:
Update to v0.12.0 This includes the new `libbuild2` restructuring and support
for dynamic build system modules. See the [release
notes](https://build2.org/release/0.12.0.xhtml) for details.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 22 2019 Matthew Krupcale <mkrupcale(a)matthewkrupcale.com> - 0.12.0-1
- Update to v0.12.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1734991 - build2: FTBFS in Fedora rawhide/f31
https://bugzilla.redhat.com/show_bug.cgi?id=1734991
--------------------------------------------------------------------------------
================================================================================
djvulibre-3.5.27-16.fc30 (FEDORA-2019-7fac263417)
DjVu viewers, encoders, and utilities
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2019-18804.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 22 2019 Marek Kasik <mkasik(a)redhat.com> - 3.5.27-16
- Fix a NULL pointer dereference in DJVU::filter_fv()
- Resolves: #1771267
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1771266 - CVE-2019-18804 djvulibre: null pointer dereference in function
DJVU::filter_fv in IW44EncodeCodec.cpp
https://bugzilla.redhat.com/show_bug.cgi?id=1771266
--------------------------------------------------------------------------------
================================================================================
elementary-calculator-1.5.3-1.fc30 (FEDORA-2019-f46d677d92)
Calculator app designed for elementary
--------------------------------------------------------------------------------
Update Information:
Update to version 1.5.3. Release notes:
https://github.com/elementary/calculator/releases/tag/1.5.3
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 22 2019 Fabio Valentini <decathorpe(a)gmail.com> - 1.5.3-1
- Update to version 1.5.3.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1774159 - elementary-calculator-1.5.3-debian is available
https://bugzilla.redhat.com/show_bug.cgi?id=1774159
--------------------------------------------------------------------------------
================================================================================
elementary-capnet-assist-2.2.4-1.fc30 (FEDORA-2019-6ee710e3de)
Captive Portal Assistant for elementary
--------------------------------------------------------------------------------
Update Information:
Update to version 2.2.4. Release notes:
https://github.com/elementary/capnet-
assist/releases/tag/2.2.4
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 22 2019 Fabio Valentini <decathorpe(a)gmail.com> - 2.2.4-1
- Update to version 2.2.4.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1774717 - elementary-capnet-assist-2.2.4-debian is available
https://bugzilla.redhat.com/show_bug.cgi?id=1774717
--------------------------------------------------------------------------------
================================================================================
freeradius-3.0.20-1.fc30 (FEDORA-2019-17ed521527)
High-performance and highly configurable free RADIUS server
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2019-13456
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 15 2019 Alexander Scheel <ascheel(a)redhat.com> - 3.0.20-1
- Rebased to 3.0.20
Resolves: bz#1772710
- Introduced new rlm_python3 module
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.0.19-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Fri May 31 2019 Jitka Plesnikova <jplesnik(a)redhat.com> - 3.0.19-4
- Perl 5.30 rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1737663 - CVE-2019-13456 freeradius: eap-pwd: Information leak due to
aborting when needing more than 10 iterations
https://bugzilla.redhat.com/show_bug.cgi?id=1737663
--------------------------------------------------------------------------------
================================================================================
gerbera-1.3.5-1.fc30 (FEDORA-2019-bb9a80a8c0)
UPnP Media Server
--------------------------------------------------------------------------------
Update Information:
1.3.5 ---- 1.3.4
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 22 2019 Gwyn Ciesla <gwync(a)protonmail.com> - 1.3.5-1
- 1.3.5
* Mon Nov 18 2019 Gwyn Ciesla <gwync(a)protonmail.com> - 1.3.4-1
- 1.3.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1775832 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1775832
[ 2 ] Bug #1773335 - gerbera-1.3.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1773335
--------------------------------------------------------------------------------
================================================================================
guayadeque-0.4.7-0.1.20191117git89c6ab2.fc30 (FEDORA-2019-1f1ab78706)
Music player
--------------------------------------------------------------------------------
Update Information:
- Update to 0.4.7-0.1.20191117git89c6ab2
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 22 2019 Martin Gansser <martinkg(a)fedoraproject.org> -
0.4.7-0.1.20191117git89c6ab2
- Update to 0.4.7-0.1.20191117git89c6ab2
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4.6-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
httpd-2.4.41-6.1.fc30 (FEDORA-2019-d54e892077)
Apache HTTP Server
--------------------------------------------------------------------------------
Update Information:
This update fixes a mod_ssl issue with Post-Handshake Authentication in TLSv1.3.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 21 2019 Joe Orton <jorton(a)redhat.com> - 2.4.41-6.1
- mod_ssl: fix request body buffering w/TLSv1.3 PHA (#1775146)
* Fri Oct 4 2019 Joe Orton <jorton(a)redhat.com> - 2.4.41-6
- mod_cgid/mod_cgi: further upstream consolidation patches
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1775146 - POST request with TLS 1.3 PHA client auth fails: Re-negotiation
handshake failed: Client certificate missing
https://bugzilla.redhat.com/show_bug.cgi?id=1775146
--------------------------------------------------------------------------------
================================================================================
jhead-3.04-1.fc30 (FEDORA-2019-7efb86afdc)
Tool for displaying EXIF data embedded in JPEG images
--------------------------------------------------------------------------------
Update Information:
updated to 3.04 (CVE-2019-19035)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 22 2019 Adrian Reber <adrian(a)lisas.de> - 3.04-1
- updated to 3.04 (CVE-2019-19035)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1775098 - CVE-2019-19035 jhead: heap based over-read in ReadJpegSections and
process_SOFn in jpgfile.c leads to denial of service
https://bugzilla.redhat.com/show_bug.cgi?id=1775098
--------------------------------------------------------------------------------
================================================================================
kernel-5.3.12-200.fc30 (FEDORA-2019-021c968423)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 5.3.12 update contains a number of important fixes across the tree
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 21 2019 Justin M. Forbes <jforbes(a)fedoraproject.org> - 5.3.12-200
- Fix CVE-2019-19074 (rhbz 1774933 1774934)
- Fix CVE-2019-19073 (rhbz 1774937 1774939)
- Fix CVE-2019-19072 (rhbz 1774946 1774947)
- Fix CVE-2019-19071 (rhbz 1774949 1774950)
- Fix CVE-2019-19070 (rhbz 1774957 1774958)
- Fix CVE-2019-19068 (rhbz 1774963 1774965)
- Fix CVE-2019-19043 (rhbz 1774972 1774973)
- Fix CVE-2019-19066 (rhbz 1774976 1774978)
- Fix CVE-2019-19046 (rhbz 1774988 1774989)
- Fix CVE-2019-19050 (rhbz 1774998 1775002)
- Fix CVE-2019-19062 (rhbz 1775021 1775023)
- Fix CVE-2019-19064 (rhbz 1775010 1775011)
- Fix CVE-2019-19063 (rhbz 1775015 1775016)
- Fix CVE-2019-19059 (rhbz 1775042 1775043)
- Fix CVE-2019-19058 (rhbz 1775047 1775048)
- Fix CVE-2019-19057 (rhbz 1775050 1775051)
- Fix CVE-2019-19053 (rhbz 1775956 1775110)
- Fix CVE-2019-19056 (rhbz 1775097 1775115)
- Fix CVE-2019-19055 (rhbz 1775074 1775116)
- Fix CVE-2019-19054 (rhbz 1775063 1775117)
* Thu Nov 21 2019 Laura Abbott <labbott(a)redhat.com>
- Linux v5.3.12
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1774933 - CVE-2019-19074 kernel: a memory leak in the ath9k_wmi_cmd()
function in drivers/net/wireless/ath/ath9k/wmi.c allows DoS
https://bugzilla.redhat.com/show_bug.cgi?id=1774933
[ 2 ] Bug #1774937 - CVE-2019-19073 kernel: Memory leaks in
drivers/net/wireless/ath/ath9k/htc_hst.c in the Linux kernel through 5.3.11 allow
attackers to cause a DoS
https://bugzilla.redhat.com/show_bug.cgi?id=1774937
[ 3 ] Bug #1774946 - CVE-2019-19072 kernel: A memory leak in the predicate_parse()
function in kernel/trace/trace_events_filter.c allows for a DoS
https://bugzilla.redhat.com/show_bug.cgi?id=1774946
[ 4 ] Bug #1774949 - CVE-2019-19071 kernel: A memory leak in the rsi_send_beacon()
function in drivers/net/wireless/rsi/rsi_91x_mgmt.c allows for a DoS
https://bugzilla.redhat.com/show_bug.cgi?id=1774949
[ 5 ] Bug #1774957 - CVE-2019-19070 kernel: A memory leak in the spi_gpio_probe()
function in drivers/spi/spi-gpio.c allows for a DoS
https://bugzilla.redhat.com/show_bug.cgi?id=1774957
[ 6 ] Bug #1774963 - CVE-2019-19068 kernel: A memory leak in the
rtl8xxxu_submit_int_urb() function in
drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c allows for a DoS
https://bugzilla.redhat.com/show_bug.cgi?id=1774963
[ 7 ] Bug #1774972 - CVE-2019-19043 kernel: dos in i40e_setup_macvlans() function in
drivers/net/ethernet/intel/i40e/i40e_main.c
https://bugzilla.redhat.com/show_bug.cgi?id=1774972
[ 8 ] Bug #1774976 - CVE-2019-19066 kernel: A memory leak in the bfad_im_get_stats()
function in drivers/scsi/bfa/bfad_attr.c allows for a DoS
https://bugzilla.redhat.com/show_bug.cgi?id=1774976
[ 9 ] Bug #1774988 - CVE-2019-19046 kernel: dos in in the __ipmi_bmc_register() function
in drivers/char/ipmi/ipmi_msghandler.c
https://bugzilla.redhat.com/show_bug.cgi?id=1774988
[ 10 ] Bug #1774998 - CVE-2019-19050 kernel: dos in crypto_reportstat() function in
crypto/crypto_user_stat.c
https://bugzilla.redhat.com/show_bug.cgi?id=1774998
[ 11 ] Bug #1775021 - CVE-2019-19062 kernel: A memory leak in the crypto_report()
function in crypto/crypto_user_base.c allows for a DoS
https://bugzilla.redhat.com/show_bug.cgi?id=1775021
[ 12 ] Bug #1775010 - CVE-2019-19064 kernel: A memory leak in the fsl_lpspi_probe()
function in drivers/spi/spi-fsl-lpspi.c allows for a DoS
https://bugzilla.redhat.com/show_bug.cgi?id=1775010
[ 13 ] Bug #1775015 - CVE-2019-19063 kernel: Two memory leaks in the rtl_usb_probe()
function in drivers/net/wireless/realtek/rtlwifi/usb.c allow for a DoS
https://bugzilla.redhat.com/show_bug.cgi?id=1775015
[ 14 ] Bug #1775042 - CVE-2019-19059 kernel: Multiple memory leaks in the
iwl_pcie_ctxt_info_gen3_init() function in
drivers/net/wireless/intel/iwlwifi/pcie/ctxt-info-gen3.c allows for a DoS
https://bugzilla.redhat.com/show_bug.cgi?id=1775042
[ 15 ] Bug #1775047 - CVE-2019-19058 kernel: A memory leak in the alloc_sgtable()
function in drivers/net/wireless/intel/iwlwifi/fw/dbg.c allows for a DoS
https://bugzilla.redhat.com/show_bug.cgi?id=1775047
[ 16 ] Bug #1775050 - CVE-2019-19057 kernel: Two memory leaks in the
mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell/mwifiex/pcie.c
allows for a DoS
https://bugzilla.redhat.com/show_bug.cgi?id=1775050
[ 17 ] Bug #1775097 - CVE-2019-19056 kernel: A memory leak in the
mwifiex_pcie_alloc_cmdrsp_buf() function in drivers/net/wireless/marvell/mwifiex/pcie.c
allows to cause DoS
https://bugzilla.redhat.com/show_bug.cgi?id=1775097
[ 18 ] Bug #1775074 - CVE-2019-19055 kernel: A memory leak in the
nl80211_get_ftm_responder_stats() function innet/wireless/nl80211.c allows DoS
https://bugzilla.redhat.com/show_bug.cgi?id=1775074
[ 19 ] Bug #1775063 - CVE-2019-19054 kernel: A memory leak in the cx23888_ir_probe()
function in drivers/media/pci/cx23885/cx23888-ir.c allows attackers to cause a DoS
https://bugzilla.redhat.com/show_bug.cgi?id=1775063
--------------------------------------------------------------------------------
================================================================================
oval-graph-0.0.2-1.fc30 (FEDORA-2019-771a309757)
Tool for visualization of SCAP rule evaluation results
--------------------------------------------------------------------------------
Update Information:
Changed CR+LF to LF line endings.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 13 2019 Jan Rodak <jrodak(a)redhat.com> - 0.0.2-1
- Changed CR+LF to LF line endings.
* Wed Oct 23 2019 Jan Rodak <jrodak(a)redhat.com> - 0.0.1-1
- Initial version of the package.
--------------------------------------------------------------------------------
================================================================================
phpMyAdmin-4.9.2-1.fc30 (FEDORA-2019-8f55b515f1)
Handle the administration of MySQL over the World Wide Web
--------------------------------------------------------------------------------
Update Information:
Upstream announcement: **phpMyAdmin 4.9.2 is released** 2019-11-22 Welcome to
phpMyAdmin 4.9.2, a bugfix release that also contains a security fix. This
security fix is part of an ongoing effort to improve the security of the
Designer feature and is designated **PMASA-2019-5**. There is also an
improvement for how we sanitize Git version information shown on the home page,
thanks to Ali Hubail. This release includes fixes for many bugs, including: *
Fixes for the "Failed to set session cookie" error which relates to the cookie
name. In some cases, data stored in the cookie (such as the previously-used user
account) may not be loaded from a previous phpMyAdmin cookie the first time you
run version 4.9.2 * Fix for Advisor with MySQL 8.0.3 and newer * Fix PHP
deprecation errors * Fix a situation where exporting users after a delete
query could remove users * Fix incorrect "You do not have privileges to
manipulate with the users!" warning * Fix copying a database's privileges and
several other problems moving columns with MariaDB * Fix for phpMyAdmin not
selecting all the values when using shift-click to select during Export There
are many, many more bug fixes thanks to the efforts of our developers and other
contributors. The phpMyAdmin team
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 22 2019 Remi Collet <remi(a)remirepo.net> - 4.9.2-1
- update to 4.9.2 (2019-11-22, bugfix and security release)
--------------------------------------------------------------------------------
================================================================================
pyproject-rpm-macros-0-10.fc30 (FEDORA-2019-a4b0b914ea)
RPM macros for PEP 517 Python packages
--------------------------------------------------------------------------------
Update Information:
- When `tox` fails, print `tox` output before failing - Remove stray
`__pycache__` directory from `/usr/bin` when running `%pyproject_install` -
Build wheel into `$PWD/pyproject-macros-wheeldir` and install it from there, not
to accidentally install all wheels from `$PWD`
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 15 2019 Patrik Kopkan <pkopkan(a)redhat.com> - 0-10
- Install wheel in '$PWD/pyproject-macros-wheeldir' to have more explicit path
from which we install.
- The path can be changed by redefining %_pyproject_wheeldir.
* Wed Nov 13 2019 Anna Khaitovich <akhaitov(a)redhat.com> - 0-9
- Remove stray __pycache__ directory from /usr/bin when running %pyproject_install
* Fri Oct 25 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 0-8
- When tox fails, print tox output before failing
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1739848 - Byte-compiled files in /usr/bin
https://bugzilla.redhat.com/show_bug.cgi?id=1739848
--------------------------------------------------------------------------------
================================================================================
python-editdistance-0.5.3-1.fc30 (FEDORA-2019-6f8dee4c59)
Fast implementation of the Levenshtein distance
--------------------------------------------------------------------------------
Update Information:
Initial build for python-editdistance
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 8 2019 Aniket Pradhan <major AT fedoraproject DOT org> - 0.5.3-1
- Initial build
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1769297 - Review Request: python-editdistance - Provides a fast
implementation of the Levenshtein distance in Python
https://bugzilla.redhat.com/show_bug.cgi?id=1769297
--------------------------------------------------------------------------------
================================================================================
python-partd-1.1.0-1.fc30 (FEDORA-2019-192cfee616)
Appendable key-value storage
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 22 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 1.1.0-1
- Update to latest version
* Thu Oct 3 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 1.0.0-4
- Rebuilt for Python 3.8.0rc1 (#1748018)
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 1.0.0-3
- Rebuilt for Python 3.8
* Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1775806 - python-partd-1.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1775806
--------------------------------------------------------------------------------
================================================================================
python-wikitcms-2.5.1-1.fc30 (FEDORA-2019-3b10ce0abb)
Fedora QA wiki test management Python library
--------------------------------------------------------------------------------
Update Information:
This update provides the latest release of python-wikitcms, with support for AMI
table generation.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 13 2019 Adam Williamson <awilliam(a)redhat.com> - 2.5.1-1
- New release 2.5.1: fix couple of bugs from 2.5.0
* Wed Nov 13 2019 Adam Williamson <awilliam(a)redhat.com> - 2.5.0-1
- New release 2.5.0: AMI info page generation
--------------------------------------------------------------------------------
================================================================================
qownnotes-19.11.19-1.20191121git37520b7.fc30 (FEDORA-2019-1582bf5b81)
Plain-text file markdown note taking with Nextcloud integration
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
recap-2.1.0-6.fc30 (FEDORA-2019-1d7729d1eb)
Generates reports of various system information
--------------------------------------------------------------------------------
Update Information:
Remove dependency (`elinks`), instead use `Recommends` where supported.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 20 2019 Tony Garcia <tony.garcia(a)rackspace.com> - 2.1.0-6
- Use Recommends only in RPM supported versions (4.12.0)
* Tue Nov 19 2019 Tony Garcia <tony.garcia(a)rackspace.com> - 2.1.0-5
- Update dependencies, set elinks to recommends
--------------------------------------------------------------------------------
================================================================================
roundcubemail-1.4.1-1.fc30 (FEDORA-2019-62ee76574a)
Round Cube Webmail is a browser-based multilingual IMAP client
--------------------------------------------------------------------------------
Update Information:
**Version 1.4.1** * Elastic: Change HTML editor widget to improve form flow
(#6992) * Elastic: Fix position of mobile floating action button (#7038) *
Managesieve: Fix locked UI after opening filter frame (#7007) * Fix PHP
warning: "array_merge(): Expected parameter 2 to be an array, null given in
sendmail.inc (#7003) * Fix bug where cache keys could exceed length limit
specified in db schema (#7004) * Fix invalid Signature button state after
escaping Mailvelope mode (#7015) * Fix so 401 error is returned only on
failed logon requests (#7010) * Fix db_prefix handling in queries with
TRUNCATE TABLE <name> and UNIQUE <name> (#7013) * Fix so update.sh script
warns about changed defaults (#7011) * Fix tables listing routine when DSN
contained a database with unsupported suffix (#7034) * Fix so Elastic is also
a default in jqueryui plugin (#7039) * Fix bug where the Installer would not
warn about required schema upgrade (#7042)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 22 2019 Remi Collet <remi(a)remirepo.net> - 1.4.1-1
- update to 1.4.1
--------------------------------------------------------------------------------
================================================================================
tig-2.5.0-1.fc30 (FEDORA-2019-6df566d54f)
Text-mode interface for the git revision control system
--------------------------------------------------------------------------------
Update Information:
Update to version 2.5.0 of tig, which brings various fixes and improvements.
https://github.com/jonas/tig/releases/tag/tig-2.5.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 20 2019 Jason L Tibbitts III <tibbs(a)math.uh.edu> - 2.5.0-1
- Update to 2.5.0.
* Sat Jul 27 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.4.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
vgrive-1.4.0-1.fc30 (FEDORA-2019-e7297498e0)
Google Drive client for Linux
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 22 2019 Artem Polishchuk <ego.cordatus(a)gmail.com> - 1.4.0-1
- Update to 1.4.0
--------------------------------------------------------------------------------
================================================================================
votca-csg-1.5.1-1.fc30 (FEDORA-2019-8ade79de93)
VOTCA coarse-graining engine
--------------------------------------------------------------------------------
Update Information:
Bump votca packages to v1.5.1
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 22 2019 Christoph Junghans <junghans(a)votca.org> - 1.5.1-1
- Version bump to 1.5.1 (bug #1774830)
* Sat Jul 27 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5-3.2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Sat Mar 16 2019 Orion Poplawski <orion(a)nwra.com> - 1.5-3.1
- Rebuild for hdf5 1.10.5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1774849 - votca-tools-1.5.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1774849
[ 2 ] Bug #1774830 - votca-csg-1.5.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1774830
[ 3 ] Bug #1774855 - votca-xtp-1.5.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1774855
--------------------------------------------------------------------------------
================================================================================
votca-tools-1.5.1-2.fc30 (FEDORA-2019-8ade79de93)
VOTCA tools library
--------------------------------------------------------------------------------
Update Information:
Bump votca packages to v1.5.1
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 22 2019 Christoph Junghans <junghans(a)votca.org> - 1.5.1-2
- Fix python3 shebang
* Thu Nov 21 2019 Christoph Junghans <junghans(a)votca.org> - 1.5.1-1
- Version bump to 1.5.1 (bug #1774849)
* Sat Jul 27 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5-1.1
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1774849 - votca-tools-1.5.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1774849
[ 2 ] Bug #1774830 - votca-csg-1.5.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1774830
[ 3 ] Bug #1774855 - votca-xtp-1.5.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1774855
--------------------------------------------------------------------------------
================================================================================
votca-xtp-1.5.1-1.fc30 (FEDORA-2019-8ade79de93)
VOTCA excitation and charge properties module
--------------------------------------------------------------------------------
Update Information:
Bump votca packages to v1.5.1
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 22 2019 Christoph Junghans <junghans(a)votca.org> - 1.5.1-1
- Version bump to 1.5.1 (bug #1774855)
* Sat Jul 27 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5-1.3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Tue Mar 12 2019 Orion Poplawski <orion(a)nwra.com> - 1.5-1.2
- Rebuild for hdf5 1.10.5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1774849 - votca-tools-1.5.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1774849
[ 2 ] Bug #1774830 - votca-csg-1.5.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1774830
[ 3 ] Bug #1774855 - votca-xtp-1.5.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1774855
--------------------------------------------------------------------------------
================================================================================
wp-cli-2.4.0-2.fc30 (FEDORA-2019-27c2f56a42)
The command line interface for WordPress
--------------------------------------------------------------------------------
Update Information:
update upstream version to 2.4.0
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 22 2019 Luis M. Segundo <blackfile(a)fedoraproject.org> - 2.4.0-2
- update release.
* Fri Nov 22 2019 Luis M. Segundo <blackfile(a)fedoraproject.org> - 2.4.0-1
- update to 2.4.0.
--------------------------------------------------------------------------------
================================================================================
youtube-dl-2019.11.22-1.fc30 (FEDORA-2019-e5be78c547)
A small command-line program to download online videos
--------------------------------------------------------------------------------
Update Information:
Update to 2019.11.22
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 23 2019 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 2019.11.22-1
- Update to 2019.11.22
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1762020 - youtube-dl-2019.11.22 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1762020
--------------------------------------------------------------------------------