The following Fedora 30 Security updates need testing:
Age URL
110
https://bodhi.fedoraproject.org/updates/FEDORA-2019-71b2273a9f
libarchive-3.3.3-7.fc30
44
https://bodhi.fedoraproject.org/updates/FEDORA-2020-cc26574961
chromium-79.0.3945.130-1.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2020-552e4e7879 cacti-1.2.10-1.fc30
cacti-spine-1.2.10-1.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2020-ccc3e64ea5
podman-1.8.0-4.fc30
5
https://bodhi.fedoraproject.org/updates/FEDORA-2020-9009363f0f zsh-5.7.1-6.fc30
5
https://bodhi.fedoraproject.org/updates/FEDORA-2020-bb5aa250c9
sympa-6.2.54-1.fc30
5
https://bodhi.fedoraproject.org/updates/FEDORA-2020-e7f95c4df0
mbedtls-2.16.5-1.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-b00f3fbb69
seamonkey-2.53.1-2.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-0e6897cd35
java-1.8.0-openjdk-aarch32-1.8.0.242.b07-1.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-9b3dabc21c
python3-typed_ast-1.4.0-2.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-d24bd1cad3
mediawiki-1.32.6-1.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-c870aa8378
tomcat-9.0.31-1.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-0cab7041f7
ansible-2.9.6-1.fc30
The following Fedora 30 Critical Path updates have yet to be approved:
Age URL
242
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c05e4425d1
dash-0.5.10.2-3.fc30
110
https://bodhi.fedoraproject.org/updates/FEDORA-2019-71b2273a9f
libarchive-3.3.3-7.fc30
13
https://bodhi.fedoraproject.org/updates/FEDORA-2020-5d27f4c3f9
wireless-tools-29-25.fc30
10
https://bodhi.fedoraproject.org/updates/FEDORA-2020-b257bf174c
shadow-utils-4.6-9.fc30
10
https://bodhi.fedoraproject.org/updates/FEDORA-2020-46d974c05c
epiphany-3.32.6-1.fc30
10
https://bodhi.fedoraproject.org/updates/FEDORA-2020-43a673534c sssd-2.2.3-13.fc30
10
https://bodhi.fedoraproject.org/updates/FEDORA-2020-1f7f07fc0b
libpcap-1.9.1-2.fc30
8
https://bodhi.fedoraproject.org/updates/FEDORA-2020-3c0dd5e756 pcre-8.44-1.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2020-4f4ab30209
glusterfs-6.8-1.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2020-c4f2c2c7ab
perl-Encode-3.03-12.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2020-c47f499c3b
hwdata-0.333-1.fc30
5
https://bodhi.fedoraproject.org/updates/FEDORA-2020-f13060e7a5 vim-8.2.348-1.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-36282d2a6d cups-2.2.12-6.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-3b3877d2c3
kernel-5.5.8-100.fc30 kernel-headers-5.5.8-100.fc30 kernel-tools-5.5.8-100.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-6ff1ecb240
gnome-software-3.32.4-7.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-6f6589f3ef ceph-14.2.8-1.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-57e2ad2b12 nspr-4.25.0-1.fc30
nss-3.50.0-1.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-09e7d027b6 koji-1.20.1-1.fc30
python-pycdio-2.0.0-8.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-02ee4b1a1c
dnf-plugins-extras-4.0.8-4.fc30 libdnf-0.43.1-4.fc30
The following builds have been pushed to Fedora 30 updates-testing
Rex-1.8.2-1.fc30
borgbackup-1.1.11-1.fc30
bowtie-1.2.3-1.fc30
cataclysm-dda-0.D.10399-1.20200306git3eee117.fc30
cmst-2020.03.07-1.fc30
drawing-0.4.13-1.fc30
mate-applets-1.22.2-2.fc30
mate-media-1.22.2-3.fc30
neofetch-7.0.0-1.fc30
vdr-tvguide-1.3.0-1.fc30
weechat-2.7.1-1.fc30
Details about builds:
================================================================================
Rex-1.8.2-1.fc30 (FEDORA-2020-2ad1ed20ac)
The friendly automation framework on basis of Perl
--------------------------------------------------------------------------------
Update Information:
This update brings a the new version 1.8.2 of the friendly automation framework
Rex to a Fedora box near you. It contains a lot of bugfixes.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 7 2020 Dominic Hopf <dmaphy(a)fedoraproject.org> - 1.8.2-1
- Upgrade to Rex 1.8.2
* Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5.0-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5.0-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Fri May 31 2019 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.5.0-7
- Perl 5.30 rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1793510 - Rex-1.5.0-8.fc32 FTBFS: t/db.t fails: DBI
connect('dbname=mysql;mysql_socket=/tmp/ARIQelXu_N/tmp/mysql.sock;user=root','',...)
failed: Access denied for user 'root'@'localhost' at
/usr/share/perl5/vendor_perl/Test/mysqld.pm line 143.
https://bugzilla.redhat.com/show_bug.cgi?id=1793510
[ 2 ] Bug #1811227 - Rex-1.8.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1811227
--------------------------------------------------------------------------------
================================================================================
borgbackup-1.1.11-1.fc30 (FEDORA-2020-bb12a02976)
A deduplicating backup program with compression and authenticated encryption
--------------------------------------------------------------------------------
Update Information:
Update to 1.1.11 Fixes a (rare) potential index corruption / data loss issue
(upstream issue #4829) To detect past corruption upstream advises to run these
commands borg delete --cache-only YOURREPO borg check --repair YOURREPO
--------------------------------------------------------------------------------
ChangeLog:
* Sun Mar 8 2020 Felix Schwarz <fschwarz(a)fedoraproject.org> - 1.1.11-1
- update to 1.1.11
* Sat Dec 28 2019 Felix Schwarz <fschwarz(a)fedoraproject.org> - 1.1.10-4
- enable GPG source file verification
--------------------------------------------------------------------------------
================================================================================
bowtie-1.2.3-1.fc30 (FEDORA-2020-9c3cab4ee8)
An ultrafast, memory-efficient short read aligner
--------------------------------------------------------------------------------
Update Information:
Update to upstream release 1.2.3
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 28 2020 Jun Aruga <jaruga(a)redhat.com> - 1.2.3-1
- Update to upstream release 1.2.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1809321 - bowtie-1.2.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1809321
--------------------------------------------------------------------------------
================================================================================
cataclysm-dda-0.D.10399-1.20200306git3eee117.fc30 (FEDORA-2020-249a2c4ee8)
Turn-based survival game set in a post-apocalyptic world
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 6 2020 Artem Polishchuk <ego.cordatus(a)gmail.com> -
0.D.10399-1.20200306git3eee117
- Update to 10399
--------------------------------------------------------------------------------
================================================================================
cmst-2020.03.07-1.fc30 (FEDORA-2020-8d57615542)
A Qt based GUI front end for the connman connection manager with systemtray icon
--------------------------------------------------------------------------------
Update Information:
Update to 2020.03.07-1
--------------------------------------------------------------------------------
ChangeLog:
* Sun Mar 8 2020 Martin Gansser <martinkg(a)fedoraproject.org> - 2020.03.07-1
- Update to 2020.03.07-1
* Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> -
2019.01.13-3.git7778754
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> -
2019.01.13-2.git7778754
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1811371 - cmst-2020.03.07 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1811371
--------------------------------------------------------------------------------
================================================================================
drawing-0.4.13-1.fc30 (FEDORA-2020-056443679e)
Drawing application for the GNOME desktop
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sun Mar 8 2020 Artem Polishchuk <ego.cordatus(a)gmail.com> - 0.4.13-1
- Update to 0.4.13
--------------------------------------------------------------------------------
================================================================================
mate-applets-1.22.2-2.fc30 (FEDORA-2020-bd957fb403)
MATE Desktop panel applets
--------------------------------------------------------------------------------
Update Information:
- add some upstream patches - rebuild against latest kernel (5.5.7), and kernel-
tools-libs-devel (5.5.6)
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1806246 - Impossible to get governor cat scaling_governor Invalid argument
https://bugzilla.redhat.com/show_bug.cgi?id=1806246
--------------------------------------------------------------------------------
================================================================================
mate-media-1.22.2-3.fc30 (FEDORA-2020-7f79dede7d)
MATE media programs
--------------------------------------------------------------------------------
Update Information:
- fix volume-applet for vertical panels - rhbz (#1794568)
--------------------------------------------------------------------------------
ChangeLog:
* Sun Mar 8 2020 Wolfgang Ulbrich <fedora(a)raveit.de> - 1.22.2-3
- fix volume-applet for vertical panels
- rhbz (#1794568)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1794568 - Behavior change for mic/speaker volume
https://bugzilla.redhat.com/show_bug.cgi?id=1794568
--------------------------------------------------------------------------------
================================================================================
neofetch-7.0.0-1.fc30 (FEDORA-2020-bcf0a5d0ad)
CLI system information tool written in Bash
--------------------------------------------------------------------------------
Update Information:
New upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Sun Mar 8 2020 K. de Jong <keesdejong(a)fedoraproject.org> - 7.0.0-1
- New upstream release
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.1.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1811399 - neofetch-7.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1811399
--------------------------------------------------------------------------------
================================================================================
vdr-tvguide-1.3.0-1.fc30 (FEDORA-2020-8630a60101)
TvGuide is a highly customizable 2D EPG viewer plugin
--------------------------------------------------------------------------------
Update Information:
Update to 1.3.0-1
--------------------------------------------------------------------------------
ChangeLog:
* Sun Mar 8 2020 Martin Gansser <martinkg(a)fedoraproject.org> - 1.3.0-1
- Update to 1.3.0
--------------------------------------------------------------------------------
================================================================================
weechat-2.7.1-1.fc30 (FEDORA-2020-4d232b48b8)
Portable, fast, light and extensible IRC client
--------------------------------------------------------------------------------
Update Information:
New version, fixes a lot of bugs (some of them security). In the same update,
fixed up epel7 build to latest version as well.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 20 2020 Joe Walker <grumpey0(a)gmail.com> - 2.7.1-1
- Update to Version 2.7.1
(
https://weechat.org/files/releasenotes/ReleaseNotes-2.7.1.html)
(
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8955)
* Fri Jan 31 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.7-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Mon Dec 9 2019 Nathan Morell <fedoraproject.org(a)fap.me> - 2.7-1
- Update to 2.7
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 2.4-4
- Rebuilt for Python 3.8
* Sat Jul 27 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.4-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Thu May 30 2019 Jitka Plesnikova <jplesnik(a)redhat.com> - 2.4-2
- Perl 5.30 rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1718050 - weechat-2.7.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1718050
[ 2 ] Bug #1444882 - CVE-2017-8073 weechat: Buffer overflow in the
irc_ctcp_dcc_filename_without_quotes function [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1444882
[ 3 ] Bug #1803066 - CVE-2020-8955 weechat: denial of service in irc_mode_channel_update
in plugins/irc/irc-mode.c [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1803066
[ 4 ] Bug #1803065 - CVE-2020-8955 weechat: denial of service in irc_mode_channel_update
in plugins/irc/irc-mode.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1803065
[ 5 ] Bug #1648007 - Weechat 2.3 is currently available
https://bugzilla.redhat.com/show_bug.cgi?id=1648007
[ 6 ] Bug #1793597 - weechat is missing sources
https://bugzilla.redhat.com/show_bug.cgi?id=1793597
[ 7 ] Bug #1677974 - weechat-2.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1677974
[ 8 ] Bug #1500078 - weechat: Uninitialized buffer used in logger plugin [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1500078
--------------------------------------------------------------------------------