The following Fedora 30 Security updates need testing:
Age URL
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-460ad648e7
samba-4.10.10-0.fc30
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ec04c34768
libssh2-1.9.0-3.fc30
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-2bdcccee3c
wpa_supplicant-2.8-3.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-2fa7552273
chromium-78.0.3904.87-1.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ec8719a21c
php-robrichards-xmlseclibs3-3.0.4-1.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-dc90bf093b
php-robrichards-xmlseclibs-2.1.1-1.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-db2d7b1c80
freetds-1.1.20-1.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-1030f4816a
libmp4v2-2.1.0-0.19.trunkREV507.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b217f90c2a
djvulibre-3.5.27-15.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4213e37211
webkit2gtk3-2.26.2-1.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e8695f5e6c
java-1.8.0-openjdk-aarch32-1.8.0.232.b09-1.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-789f4e5494
limnoria-20191109-2.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6dcf885e38
thunderbird-68.2.2-1.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-45a744b873
thunderbird-enigmail-2.1.3-4.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e4819c6510
oniguruma-6.9.2-3.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-656f7ac8ca
hunspell-1.7.0-4.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-cbb732f760 xen-4.11.2-3.fc30
The following Fedora 30 Critical Path updates have yet to be approved:
Age URL
126
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c05e4425d1
dash-0.5.10.2-3.fc30
19
https://bodhi.fedoraproject.org/updates/FEDORA-2019-40dba3d36e
plymouth-0.9.4-11.20191022git32c097c.fc30
17
https://bodhi.fedoraproject.org/updates/FEDORA-2019-af5e9f72a8
libedit-3.1-29.20191025cvs.fc30
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-2bdcccee3c
wpa_supplicant-2.8-3.fc30
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ec04c34768
libssh2-1.9.0-3.fc30
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-460ad648e7
samba-4.10.10-0.fc30
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-bd6f08f65c
gnutls-3.6.10-1.fc30
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-79048fc832
pcre2-10.33-15.fc30
11
https://bodhi.fedoraproject.org/updates/FEDORA-2019-84830f1224
cryptsetup-2.2.2-1.fc30
11
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b1fbd50304
redhat-rpm-config-132-1.fc30
11
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d3a867a569
binutils-2.31.1-34.fc30
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-43be205355
audit-3.0-0.15.20191104git1c2f876.fc30
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-5a9ffa42d3
hwdata-0.329-1.fc30
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-f7760ecfd9
python-productmd-1.23-1.fc30
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-a24b9d6ffb bluez-5.52-1.fc30
libell-0.26-1.fc30
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-70d80ad4bc
selinux-policy-3.14.3-52.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4af57ce3ee nss-3.47.0-3.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c0c171997e
upower-0.99.11-2.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-420c65a29c koji-1.19.1-1.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-cc544c9909
libosinfo-1.4.0-5.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d209183ead
osinfo-db-20191108-1.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9de0094801 psmisc-23.2-1.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6a7e713f65
fwupd-1.2.11-3.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4014bb1ce6
libssh-0.9.2-1.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ff177015b4
shared-mime-info-1.15-1.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e54f6fdd70
gtk2-2.24.32-6.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-1114295d62
vim-8.1.2267-1.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-f806bc58e5
json-c-0.13.1-7.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4213c52f7b
evolution-3.32.5-1.fc30 evolution-data-server-3.32.5-1.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-2323cb1002
rpcbind-1.2.5-4.rc1.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-156c5b9142 sudo-1.8.29-1.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-36fc6e0ae9
libreport-2.11.2-2.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6dcf885e38
thunderbird-68.2.2-1.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-a8985e878d satyr-0.29-2.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-36d9909aac
libdrm-2.4.100-1.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-cbb732f760 xen-4.11.2-3.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-656f7ac8ca
hunspell-1.7.0-4.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-1d18566497
python-pip-19.0.3-4.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b9a002c8c9
libsolv-0.7.8-1.fc30
The following builds have been pushed to Fedora 30 updates-testing
R-xfun-0.11-1.fc30
alsa-firmware-1.2.1-2.fc30
alsa-lib-1.2.1-1.fc30
alsa-plugins-1.2.1-1.fc30
alsa-utils-1.2.1-1.fc30
borgmatic-1.4.10-1.fc30
cascadia-code-fonts-1910.04-1.fc30
ccls-0.20190823.5-1.fc30
cockpit-207-1.fc30
fmit-1.2.13-1.fc30
freeipa-4.8.2-1.fc30
fsarchiver-0.8.5-6.fc30
i3-4.17.1-1.fc30
librs232-1.0.3-9.20190917git1c29a27.fc30
libzypp-17.16.0-1.fc30
lua-mosquitto-0.3-1.fc30
mingw-OpenEXR-2.2.1-5.fc30
mingw-djvulibre-3.5.27-7.fc30
mingw-hunspell-1.7.0-6.fc30
nss_wrapper-1.1.7-1.fc30
php-doctrine-collections-1.6.4-1.fc30
php-doctrine-inflector-1.3.1-1.fc30
php-doctrine-instantiator-1.3.0-1.fc30
php-symfony-2.8.52-1.fc30
python-pyaes-1.6.1-1.fc30
python-urllib3-1.25.7-1.fc30
rdopkg-1.1.1-1.fc30
rubygem-rubyzip-1.1.7-10.fc30
thinkfan-1.0.2-4.fc30
zchunk-1.1.4-1.fc30
zypper-1.14.32-1.fc30
Details about builds:
================================================================================
R-xfun-0.11-1.fc30 (FEDORA-2019-35006df45d)
Miscellaneous Functions by 'Yihui Xie'
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 13 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.11-1
- Update to latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1771926 - R-xfun-0.11 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1771926
--------------------------------------------------------------------------------
================================================================================
alsa-firmware-1.2.1-2.fc30 (FEDORA-2019-388010ce63)
Firmware for several ALSA-supported sound cards
--------------------------------------------------------------------------------
Update Information:
The most enhancements are in the alsa library. There is the support for the new
extended Use Case Manager configuration syntax which should help with the
Intel's SOF DSP driver. All hardware which uses UCM should be retested. The
alsa-firmware contains new firmware files for Creative CA0132 HD-Audio Codec and
Intel's SOF DSP driver. The pulse plugin in the alsa-plugins package can specify
the specific pulse device.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 13 2019 Jaroslav Kysela <perex(a)perex.cz> - 1.2.1-2
- Updated to 1.2.1
- Added Intel SOF firmware files
--------------------------------------------------------------------------------
================================================================================
alsa-lib-1.2.1-1.fc30 (FEDORA-2019-388010ce63)
The Advanced Linux Sound Architecture (ALSA) library
--------------------------------------------------------------------------------
Update Information:
The most enhancements are in the alsa library. There is the support for the new
extended Use Case Manager configuration syntax which should help with the
Intel's SOF DSP driver. All hardware which uses UCM should be retested. The
alsa-firmware contains new firmware files for Creative CA0132 HD-Audio Codec and
Intel's SOF DSP driver. The pulse plugin in the alsa-plugins package can specify
the specific pulse device.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 13 2019 Jaroslav Kysela <perex(a)perex.cz> - 1.2.1-1
- Updated to 1.2.1
--------------------------------------------------------------------------------
================================================================================
alsa-plugins-1.2.1-1.fc30 (FEDORA-2019-388010ce63)
The Advanced Linux Sound Architecture (ALSA) Plugins
--------------------------------------------------------------------------------
Update Information:
The most enhancements are in the alsa library. There is the support for the new
extended Use Case Manager configuration syntax which should help with the
Intel's SOF DSP driver. All hardware which uses UCM should be retested. The
alsa-firmware contains new firmware files for Creative CA0132 HD-Audio Codec and
Intel's SOF DSP driver. The pulse plugin in the alsa-plugins package can specify
the specific pulse device.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 13 2019 Jaroslav Kysela <perex(a)perex.cz> - 1.2.1-1
- Updated to 1.2.1
--------------------------------------------------------------------------------
================================================================================
alsa-utils-1.2.1-1.fc30 (FEDORA-2019-388010ce63)
Advanced Linux Sound Architecture (ALSA) utilities
--------------------------------------------------------------------------------
Update Information:
The most enhancements are in the alsa library. There is the support for the new
extended Use Case Manager configuration syntax which should help with the
Intel's SOF DSP driver. All hardware which uses UCM should be retested. The
alsa-firmware contains new firmware files for Creative CA0132 HD-Audio Codec and
Intel's SOF DSP driver. The pulse plugin in the alsa-plugins package can specify
the specific pulse device.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 13 2019 Jaroslav Kysela <perex(a)perex.cz> - 1.2.1-1
- Updated to 1.2.1
--------------------------------------------------------------------------------
================================================================================
borgmatic-1.4.10-1.fc30 (FEDORA-2019-64e44b68f4)
Simple Python wrapper script for borgbackup
--------------------------------------------------------------------------------
Update Information:
Update to 1.4.10. Fixes a bug in restoring backups
(
https://projects.torsion.org/witten/borgmatic/issues/246)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 13 2019 Felix Kaechele <heffer(a)fedoraproject.org> - 1.4.10-1
- update to 1.4.10
* Tue Nov 12 2019 Felix Kaechele <heffer(a)fedoraproject.org> - 1.4.9-1
- update to 1.4.9
* Tue Nov 12 2019 Felix Kaechele <heffer(a)fedoraproject.org> - 1.4.8-1
- update to 1.4.8
--------------------------------------------------------------------------------
================================================================================
cascadia-code-fonts-1910.04-1.fc30 (FEDORA-2019-5ef1c218af)
A monospaced font designed for programming and terminal emulation
--------------------------------------------------------------------------------
Update Information:
Update to 1910.04. This release contains the addition of the Latin-1 character
set and box drawing glyphs.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 13 2019 Tom Callaway <spot(a)fedoraproject.org> - 1910.04-1
- update to 1910.04
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1772122 - Cascadia Code 1910.04 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1772122
--------------------------------------------------------------------------------
================================================================================
ccls-0.20190823.5-1.fc30 (FEDORA-2019-9a7e9fed2a)
C/C++/ObjC language server
--------------------------------------------------------------------------------
Update Information:
New upstream release 20190823.5
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 12 2019 Dan ��erm��k <dan.cermak(a)cgc-instruments.com> - 0.20190823.5-1
- New upstream release 20190823.5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1771160 - ccls-0.20190823.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1771160
--------------------------------------------------------------------------------
================================================================================
cockpit-207-1.fc30 (FEDORA-2019-2a9d6c73dc)
Web Console for Linux servers
--------------------------------------------------------------------------------
Update Information:
- Web server: Accept EC certificates - Storage: List all software devices in a
single panel - Redesigned notifications
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 13 2019 Katerina Koukiou <kkoukiou(a)redhat.com> - 207-1
- Web server: Accept EC certificates
- Storage: List all software devices in a single panel
- Redesigned notifications
--------------------------------------------------------------------------------
================================================================================
fmit-1.2.13-1.fc30 (FEDORA-2019-5a70ede6ef)
Free Music Instrument Tuner
--------------------------------------------------------------------------------
Update Information:
Update to the latest available version.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 13 2019 Damian Wrobel <dwrobel(a)ertelnet.rybnik.pl> - 1.2.13-1
- Update to the latest available version.
--------------------------------------------------------------------------------
================================================================================
freeipa-4.8.2-1.fc30 (FEDORA-2019-b9c8d5871d)
The Identity, Policy and Audit system
--------------------------------------------------------------------------------
Update Information:
New upstream release FreeIPA 4.8.2. Release notes:
https://www.freeipa.org/page/Releases/4.8.2
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 12 2019 Rob Crittenden <rcritten(a)redhat.com> - 4.8.2-1
- New upstream release 4.8.2
- Replace %{_libdir} macro in BuildRequires (#1746882)
- Restore user-nsswitch.conf before calling authselect (#1746557)
- ipa service-find does not list cifs service created by
ipa-client-samba (#1731433)
- Occasional 'whoami.data is undefined' error in FreeIPA web UI
(#1699109)
- ipa-kra-install fails due to fs.protected_regular=1 (#1698384)
* Sun Oct 20 2019 Alexander Bokovoy <abokovoy(a)redhat.com> - 4.8.1-4
- Don't create log files from helper scripts
- Fixes: rhbz#1754189
* Tue Oct 8 2019 Christian Heimes <cheimes(a)redhat.com> - 4.8.1-3
- Fix compatibility issue with preexec_fn in Python 3.8
- Fixes: rhbz#1759290
* Tue Oct 1 2019 Alexander Bokovoy <abokovoy(a)redhat.com> - 4.8.1-2
- Fix ipasam for compatibility with Samba 4.11
- Fixes: rhbz#1757089
--------------------------------------------------------------------------------
================================================================================
fsarchiver-0.8.5-6.fc30 (FEDORA-2019-062694b88e)
Safe and flexible file-system backup/deployment tool
--------------------------------------------------------------------------------
Update Information:
New upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 13 2019 Adel Gadllah <adel.gadllah(a)gmail.com> - 0.8.5-1
- New upstream release
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.8.3-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1628569 - fsarchiver in Fedora is stuck at version 0.8.3 which does not
implement zstd file compression
https://bugzilla.redhat.com/show_bug.cgi?id=1628569
--------------------------------------------------------------------------------
================================================================================
i3-4.17.1-1.fc30 (FEDORA-2019-1a6bb7a0a6)
Improved tiling window manager
--------------------------------------------------------------------------------
Update Information:
Update to 4.17.1 and split off devel subpackages
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 11 2019 Dan ��erm��k <dan.cermak(a)cgc-instruments.com> - 4.17.1-1
- Create devel and devel-doc subpackages
- Cleanup specfile
- Remove dzen2 dependency, only recommend dmenu & i3status
* Mon Sep 16 2019 anadahz <andz(a)torproject.org> - 4.17.1-1
- New version
- Add Missing R: pulseaudio-utils
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1712913 - Split out the doxygen docs from the i3-doc package
https://bugzilla.redhat.com/show_bug.cgi?id=1712913
[ 2 ] Bug #1742476 - i3-4.17.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1742476
--------------------------------------------------------------------------------
================================================================================
librs232-1.0.3-9.20190917git1c29a27.fc30 (FEDORA-2019-aff93e51dd)
Library for serial communications over RS-232 with Lua bindings
--------------------------------------------------------------------------------
Update Information:
Update to the latest available version
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 13 2019 Damian Wrobel <dwrobel(a)ertelnet.rybnik.pl> -
1.0.3-9.20190917git1c29a27
- Drop patch upstream merged
- Update to the latest available version
- Add patch to fix compilation error
--------------------------------------------------------------------------------
================================================================================
libzypp-17.16.0-1.fc30 (FEDORA-2019-01633701f4)
A package management library
--------------------------------------------------------------------------------
Update Information:
Update Zypper to 1.14.32. Remove symlink of `/etc/zypp/repos.d` pointing to
`/etc/yum.repos.d` since Fedora repositories are now incompatible with Zypper
(Fedora Modularity not supported).
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 12 2019 Neal Gompa <ngompa13(a)gmail.com> - 17.16.0-1
- Rebase to 17.16.0 (#1755979)
- Replace /etc/zypp/repos.d symlink with empty directory
as Fedora repos are no longer compatible with Zypper
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1747529 - zypper-1.14.32 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747529
[ 2 ] Bug #1755979 - libzypp-17.16.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1755979
--------------------------------------------------------------------------------
================================================================================
lua-mosquitto-0.3-1.fc30 (FEDORA-2019-b0419ce524)
Lua bindings to libmosquitto
--------------------------------------------------------------------------------
Update Information:
Update to the latest available version.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 13 2019 Damian Wrobel <dwrobel(a)ertelnet.rybnik.pl> - 0.3-1
- Update to the latest available version.
--------------------------------------------------------------------------------
================================================================================
mingw-OpenEXR-2.2.1-5.fc30 (FEDORA-2019-ce3385517b)
MinGW Windows OpenEXR library
--------------------------------------------------------------------------------
Update Information:
This update backports fixes for CVE-2018-18443 and CVE-2018-18444.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 13 2019 Sandro Mani <manisandro(a)gmail.com> - 2.2.1-5
- Backport fix for CVE-2018-18444
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1643094 - CVE-2018-18444 OpenEXR: Out-of-bounds write in makeMultiView.cpp
https://bugzilla.redhat.com/show_bug.cgi?id=1643094
[ 2 ] Bug #1643093 - CVE-2018-18443 OpenEXR: Memory leak in ThreadPool in in
IlmBase/IlmThread/IlmThreadPool.cpp
https://bugzilla.redhat.com/show_bug.cgi?id=1643093
--------------------------------------------------------------------------------
================================================================================
mingw-djvulibre-3.5.27-7.fc30 (FEDORA-2019-f923712bab)
MinGW Windows djvulibre library
--------------------------------------------------------------------------------
Update Information:
This update backports fixes for CVE-2019-15142, CVE-2019-15143, CVE-2019-15144,
CVE-2019-15145, CVE-2019-18804
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 13 2019 Sandro Mani <manisandro(a)gmail.com> - 3.5.27-7
- Backport fix for CVE-2019-15142
- Backport fix for CVE-2019-15143
- Backport fix for CVE-2019-15144
- Backport fix for CVE-2019-15145
- Backport fix for CVE-2019-18804
* Tue Oct 8 2019 Sandro Mani <manisandro(a)gmail.com> - 3.5.27-6
- Rebuild (Changes/Mingw32GccDwarf2)
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.5.27-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1767922 - CVE-2019-15145 mingw-djvulibre: djvulibre: out-of-bounds read in
JB2Dict::JB2Codec::get_direct_context in libdjvu/JB2Image.h [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1767922
[ 2 ] Bug #1771268 - CVE-2019-18804 mingw-djvulibre: djvulibre: null pointer dereference
in function DJVU::filter_fv in [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1771268
[ 3 ] Bug #1767843 - CVE-2019-15142 mingw-djvulibre: djvulibre: heap-based buffer
overflow in GStringRep::strdup in libdjvu/GString.cpp [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1767843
[ 4 ] Bug #1767858 - CVE-2019-15143 mingw-djvulibre: djvulibre: infinite loop in
GBitmap::read_rle_raw related to libdjvu/DjVmDir.cpp and libdjvu/GBitmap.cpp [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1767858
[ 5 ] Bug #1767869 - CVE-2019-15144 mingw-djvulibre: djvulibre: recursive call to
GArrayTemplate<Run>::sort in GContainer.h leads to stack overflow [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1767869
--------------------------------------------------------------------------------
================================================================================
mingw-hunspell-1.7.0-6.fc30 (FEDORA-2019-746b0b02f7)
MinGW Windows spell checker and morphological analyzer library
--------------------------------------------------------------------------------
Update Information:
This update fixes CVE-2019-16707.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 13 2019 Sandro Mani <manisandro(a)gmail.com> - 1.7.0-6
- Backport fix for CVE-2019-16707
* Tue Oct 8 2019 Sandro Mani <manisandro(a)gmail.com> - 1.7.0-5
- Rebuild (Changes/Mingw32GccDwarf2)
* Wed Aug 28 2019 Sandro Mani <manisandro(a)gmail.com> - 1.7.0-4
- Rebuild (readline)
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.7.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1771028 - CVE-2019-16707 mingw-hunspell: hunspell: out-of-bounds read in
SuggestMgr::leftcommonsubstring in suggestmgr.cxx [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1771028
--------------------------------------------------------------------------------
================================================================================
nss_wrapper-1.1.7-1.fc30 (FEDORA-2019-c1a50f7cb7)
A wrapper for the user, group and hosts NSS API
--------------------------------------------------------------------------------
Update Information:
Update to version 1.1.7
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 13 2019 Andreas Schneider <asn(a)redhat.com> - 1.1.7-1
- Update to version 1.1.7
--------------------------------------------------------------------------------
================================================================================
php-doctrine-collections-1.6.4-1.fc30 (FEDORA-2019-8a0cf62370)
Collections abstraction library
--------------------------------------------------------------------------------
Update Information:
**Version 1.6.4** **Bug, Documentation** * 218: reflect that
ExpressionBuilder#andX() and orX() params are variadic in PHPDoc thanks to
@someniatko ---- **Version 1.6.3** **Enhancement** * 213: Remove PHP 7.4
from allow_failures matrix thanks to @carusogabriel **Bug** * 211: fix
#210 by including psalm-* annotations to ArrayCollection#map() thanks to
@someniatko
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 13 2019 Remi Collet <remi(a)remirepo.net> - 1.6.4-1
- update to 1.6.4
* Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
php-doctrine-inflector-1.3.1-1.fc30 (FEDORA-2019-7520564d35)
Common string manipulations with regard to casing and singular/plural rules
--------------------------------------------------------------------------------
Update Information:
**Version 1.3.1** * Fix Incorrect singular and plural for words such as
'canvas' and 'gas'
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 13 2019 Remi Collet <remi(a)remirepo.net> - 1.3.1-1
- update to 1.3.1
* Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.0-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
php-doctrine-instantiator-1.3.0-1.fc30 (FEDORA-2019-43a9ed24e4)
Instantiate objects in PHP without invoking their constructors
--------------------------------------------------------------------------------
Update Information:
**Version 1.3.0** **Enhancement** * 61: Adds support of internal child
class instantiation thanks to @gquemener * 60: Typehint getReflectionClass
thanks to @seferov * 59: Fix error_handler type hints thanks to @ScullWM *
39: Can't instantiate final class extending ArrayIterator thanks to
@ciaranmcnulty
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 13 2019 Remi Collet <remi(a)remirepo.net> - 1.3.0-1
- update to 1.3.0
--------------------------------------------------------------------------------
================================================================================
php-symfony-2.8.52-1.fc30 (FEDORA-2019-9c2ad3b018)
PHP framework for web projects
--------------------------------------------------------------------------------
Update Information:
**Version 2.8.52** (2019-11-13) * security #cve-2019-18888 [HttpFoundation]
fix guessing mime-types of files with leading dash (nicolas-grekas) * security
#cve-2019-18887 [HttpKernel] Use constant time comparison in UriSigner (stof)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 13 2019 Remi Collet <remi(a)remirepo.net> - 2.8.52-1
- update to 2.8.52
* Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.8.51-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Wed Jun 19 2019 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 2.8.51-2
- Disable tests by default (follows php-symfony3 and php-symfony4 pkgs)
- Always require build dependencies
- Use range version dependencies for Fedora >= 27 || RHEL >= 8
- Bump psr/log min version to 1.0.1 so php-composer(psr/log) virtual provide can be used
--------------------------------------------------------------------------------
================================================================================
python-pyaes-1.6.1-1.fc30 (FEDORA-2019-071874dd17)
Pure-Python implementation of AES block-cipher and common modes of operation
--------------------------------------------------------------------------------
Update Information:
PyAES ver. 1.6.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 13 2019 Peter Lemenkov <lemenkov(a)gmail.com> - 1.6.1-1
- Ver. 1.6.1
* Thu Oct 3 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 1.6.0-10
- Rebuilt for Python 3.8.0rc1 (#1748018)
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 1.6.0-9
- Rebuilt for Python 3.8
* Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6.0-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1771149 - python-pyaes-1.6.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1771149
--------------------------------------------------------------------------------
================================================================================
python-urllib3-1.25.7-1.fc30 (FEDORA-2019-9ca3bd3d44)
Python HTTP library with thread-safe connection pooling and file post
--------------------------------------------------------------------------------
Update Information:
Update to urllib3-1.25.7
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 13 2019 Jeremy Cline <jcline(a)redhat.com> - 1.25.7-1
- Update to v1.25.7
* Tue Oct 15 2019 Jeremy Cline <jcline(a)redhat.com> - 1.25.6-1
- Update to v1.25.6
--------------------------------------------------------------------------------
================================================================================
rdopkg-1.1.1-1.fc30 (FEDORA-2019-51bfdc6cc5)
RPM packaging automation tool CLI
--------------------------------------------------------------------------------
Update Information:
Update to 1.1.1
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 14 2019 Javier Pe��a <jpena(a)redhat.com> - 1.1.1-1
- Update to 1.1.1
* Tue Oct 1 2019 Javier Pe��a <jpena(a)redhat.com> - 1.1.0-1
- Update to 1.1.0
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 1.0.0-2
- Rebuilt for Python 3.8
* Wed Jul 24 2019 Jakub Ru��i��ka <jruzicka(a)redhat.com> 1.0.0-1
- Update to 1.0.0
* Thu Jun 27 2019 Jakub Ru��i��ka <jruzicka(a)redhat.com> 0.52.0-1
- Update to 0.52.0
--------------------------------------------------------------------------------
================================================================================
rubygem-rubyzip-1.1.7-10.fc30 (FEDORA-2019-0182d0b304)
A ruby module for reading and writing zip files
--------------------------------------------------------------------------------
Update Information:
Fix CVE-2019-16892 denial of service via crafted ZIP file.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 12 2019 V��t Ondruch <vondruch(a)redhat.com> - 1.1.7-10
- Fix CVE-2019-16892 denial of service via crafted ZIP file.
Resolves: rhbz#1771298
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1771298 - CVE-2019-16892 rubygem-rubyzip: denial of service via crafted ZIP
file
https://bugzilla.redhat.com/show_bug.cgi?id=1771298
--------------------------------------------------------------------------------
================================================================================
thinkfan-1.0.2-4.fc30 (FEDORA-2019-b4812ce7f0)
A simple fan control program
--------------------------------------------------------------------------------
Update Information:
This update fixes the /etc/sysconfig/thinkfan file not being used.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 13 2019 Sandro Mani <manisandro(a)gmail.com> - 1.0.2-4
- Adapt service file to use an EnvironmentFile instead of overrides.conf (#1763148)
- Pass -n in ExecStart and drop Type=forking
* Fri Oct 18 2019 Richard Shaw <hobbes1069(a)gmail.com> - 1.0.2-3
- Rebuild for yaml-cpp 0.6.3.
* Sat Jul 27 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1763148 - thinkfan: /etc/sysconfig/thinkfan is not used
https://bugzilla.redhat.com/show_bug.cgi?id=1763148
--------------------------------------------------------------------------------
================================================================================
zchunk-1.1.4-1.fc30 (FEDORA-2019-1c402053e5)
Compressed file format that allows easy deltas
--------------------------------------------------------------------------------
Update Information:
Fix download failure when web server doesn't include `content-type` field with
each range (generally seen when downloading very large 100MB+ zchunk files)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 13 2019 Jonathan Dieter <jdieter(a)gmail.com> - 1.1.4-1
- Fix download failure when web server doesn't include content-type with each
range
* Sat Jul 27 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.2-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
zypper-1.14.32-1.fc30 (FEDORA-2019-01633701f4)
Command line package manager using libzypp
--------------------------------------------------------------------------------
Update Information:
Update Zypper to 1.14.32. Remove symlink of `/etc/zypp/repos.d` pointing to
`/etc/yum.repos.d` since Fedora repositories are now incompatible with Zypper
(Fedora Modularity not supported).
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 12 2019 Neal Gompa <ngompa13(a)gmail.com> - 1.14.32-1
- Update to 1.14.32 (#1747529)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1747529 - zypper-1.14.32 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747529
[ 2 ] Bug #1755979 - libzypp-17.16.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1755979
--------------------------------------------------------------------------------