The following Fedora 30 Security updates need testing:
Age URL
91
https://bodhi.fedoraproject.org/updates/FEDORA-2019-71b2273a9f
libarchive-3.3.3-7.fc30
24
https://bodhi.fedoraproject.org/updates/FEDORA-2020-cc26574961
chromium-79.0.3945.130-1.fc30
13
https://bodhi.fedoraproject.org/updates/FEDORA-2020-b8b7a4a0e5
poppler-0.73.0-16.fc30
11
https://bodhi.fedoraproject.org/updates/FEDORA-2020-f8e267d6d0
systemd-241-14.git18dd3fb.fc30
10
https://bodhi.fedoraproject.org/updates/FEDORA-2020-47efc31973 libuv-1.34.2-1.fc30
nghttp2-1.40.0-1.fc30
10
https://bodhi.fedoraproject.org/updates/FEDORA-2020-830d8a1a92
http-parser-2.9.3-1.fc30 nodejs-10.19.0-1.fc30
10
https://bodhi.fedoraproject.org/updates/FEDORA-2020-092ef6572a
glib2-2.60.7-3.fc30
5
https://bodhi.fedoraproject.org/updates/FEDORA-2020-0e6a67af5a
dovecot-2.3.9.3-1.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-5cdbb19cca
python-pillow-5.4.1-4.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-8193c0aa68
mingw-openjpeg2-2.3.1-7.fc30 openjpeg2-2.3.1-6.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-c68458c879
podman-1.8.0-2.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-4d11d35a1f
webkit2gtk3-2.26.4-1.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-2a0aac3502
skopeo-0.1.41-1.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-f6cc7883b8
hiredis-0.13.3-13.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-76d608179d
NetworkManager-ssh-1.2.11-1.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-bdcc8ffc24
python-waitress-1.4.3-1.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-a06ebafad8
python-psutil-5.6.7-1.fc30
The following Fedora 30 Critical Path updates have yet to be approved:
Age URL
222
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c05e4425d1
dash-0.5.10.2-3.fc30
91
https://bodhi.fedoraproject.org/updates/FEDORA-2019-71b2273a9f
libarchive-3.3.3-7.fc30
28
https://bodhi.fedoraproject.org/updates/FEDORA-2020-aa758fe515 koji-1.20.0-1.fc30
13
https://bodhi.fedoraproject.org/updates/FEDORA-2020-b8b7a4a0e5
poppler-0.73.0-16.fc30
13
https://bodhi.fedoraproject.org/updates/FEDORA-2020-5739bd54c3 llvm-8.0.0-7.fc30
rust-1.41.0-1.fc30 rust-packaging-10-2.fc30
11
https://bodhi.fedoraproject.org/updates/FEDORA-2020-5dcfa13703 ceph-14.2.7-2.fc30
11
https://bodhi.fedoraproject.org/updates/FEDORA-2020-f8e267d6d0
systemd-241-14.git18dd3fb.fc30
11
https://bodhi.fedoraproject.org/updates/FEDORA-2020-c4d27dea0b
selinux-policy-3.14.3-56.fc30
11
https://bodhi.fedoraproject.org/updates/FEDORA-2020-66c974fdb6 dnf-4.2.18-1.fc30
dnf-plugins-core-4.0.13-1.fc30 libdnf-0.43.1-2.fc30 microdnf-3.4.0-1.fc30
10
https://bodhi.fedoraproject.org/updates/FEDORA-2020-092ef6572a
glib2-2.60.7-3.fc30
10
https://bodhi.fedoraproject.org/updates/FEDORA-2020-830d8a1a92
http-parser-2.9.3-1.fc30 nodejs-10.19.0-1.fc30
10
https://bodhi.fedoraproject.org/updates/FEDORA-2020-47efc31973 libuv-1.34.2-1.fc30
nghttp2-1.40.0-1.fc30
10
https://bodhi.fedoraproject.org/updates/FEDORA-2020-886fc2deb7
python-productmd-1.24-1.fc30
10
https://bodhi.fedoraproject.org/updates/FEDORA-2020-5e06ad5ec5
cryptsetup-2.3.0-1.fc30
8
https://bodhi.fedoraproject.org/updates/FEDORA-2020-b7b2270753 mdadm-4.1-1.fc30
7
https://bodhi.fedoraproject.org/updates/FEDORA-2020-02278780cf
nfs-utils-2.4.3-0.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2020-e94bce43a0 abrt-2.14.0-1.fc30
abrt-java-connector-1.1.4-1.fc30 libreport-2.12.0-1.fc30 satyr-0.30-2.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2020-970a0aa60e
python-rpm-macros-3-46.fc30
5
https://bodhi.fedoraproject.org/updates/FEDORA-2020-299acf832a pcre-8.43-3.fc30
5
https://bodhi.fedoraproject.org/updates/FEDORA-2020-71be871020
libdnf-0.43.1-3.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-8193c0aa68
mingw-openjpeg2-2.3.1-7.fc30 openjpeg2-2.3.1-6.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-17af221dbb
nss-pem-1.0.6-1.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-293bf84963 vim-8.2.236-1.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-6dfb032e43
flatpak-1.4.4-2.fc30
The following builds have been pushed to Fedora 30 updates-testing
accounts-qml-module-0.7-1.fc30
authselect-1.1-3.fc30
caddy-1.0.3-2.fc30
cinnamon-4.4.8-3.fc30
crun-0.12.2.1-1.fc30
etcd-3.3.12-5.20190413gitf29b1ad.fc30
firejail-0.9.62-1.fc30
golang-github-gorilla-websocket-1.4.1-1.fc30
hugo-0.55.6-2.fc30
libpq-12.2-1.fc30
libxcrypt-4.4.14-1.fc30
net-snmp-5.8-16.fc30
pcre2-10.34-6.fc30
perl-BSSolv-0.17-1.fc30
php-seld-phar-utils-1.1.0-1.fc30
postgresql-11.7-2.fc30
python-pycryptodomex-3.9.6-2.fc30
thunderbird-68.5.0-1.fc30
whois-5.5.6-1.fc30
Details about builds:
================================================================================
accounts-qml-module-0.7-1.fc30 (FEDORA-2020-2bcd5ee423)
QML bindings for libaccounts-qt + libsignon-qt
--------------------------------------------------------------------------------
Update Information:
QML bindings for libaccounts-qt + libsignon-qt
--------------------------------------------------------------------------------
ChangeLog:
* Tue Feb 11 2020 Rex Dieter <rdieter(a)fedoraproject.org> - 0.7-1
- first try, inspiration from opensuse packaging
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1801765 - Review Request: accounts-qml-module - QML bindings for
libaccounts-qt + libsignon-qt
https://bugzilla.redhat.com/show_bug.cgi?id=1801765
--------------------------------------------------------------------------------
================================================================================
authselect-1.1-3.fc30 (FEDORA-2020-262cfead59)
Configures authentication and identity sources from supported profiles
--------------------------------------------------------------------------------
Update Information:
Fix
https://github.com/pbrezina/authselect/issues/197 - authselect was unable to
restore default non-authselect configuration.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 17 2020 Pavel B��ezina <pbrezina(a)redhat.com> - 1.1-4
- fix restoring non-authselect configuration from backup
--------------------------------------------------------------------------------
================================================================================
caddy-1.0.3-2.fc30 (FEDORA-2020-279c61dd70)
Web server with automatic HTTPS
--------------------------------------------------------------------------------
Update Information:
Rebuilt to fix [GHSA-
jf24-p9p9-4rjh](https://github.com/gorilla/websocket/security/advisories/...
jf24-p9p9-4rjh); Potential DoS Vector in gorilla/websocket <= v1.4.0.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 17 2020 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 1.0.3-2
- Rebuilt for GHSA-jf24-p9p9-4rjh
--------------------------------------------------------------------------------
================================================================================
cinnamon-4.4.8-3.fc30 (FEDORA-2020-6e757cddf1)
Window management and application launching for GNOME
--------------------------------------------------------------------------------
Update Information:
- Enable notification sound - Patch cinnamon-setting info for python-3.8
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 17 2020 Leigh Scott <leigh123linux(a)googlemail.com> - 4.4.8-3
- Enable notification sound
- Patch cinnamon-setting info for python-3.8
* Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.4.8-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
crun-0.12.2.1-1.fc30 (FEDORA-2020-3f045b3cf3)
OCI runtime written in C
--------------------------------------------------------------------------------
Update Information:
built version 0.12.2.1 ---- built version 0.12.1
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 17 2020 Giuseppe Scrivano <gscrivan(a)redhat.com> - 0.12.2.1-1
- built version 0.12.2.1
* Mon Feb 17 2020 Giuseppe Scrivano <gscrivan(a)redhat.com> - 0.12.2-1
- built version 0.12.2
* Thu Feb 6 2020 Giuseppe Scrivano <gscrivan(a)redhat.com> - 0.12.1-1
- built version 0.12.1
* Mon Feb 3 2020 Giuseppe Scrivano <gscrivan(a)redhat.com> - 0.12-1
- built version 0.12
* Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.11-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Mon Dec 23 2019 Giuseppe Scrivano <gscrivan(a)redhat.com> - 0.11-1
- built version 0.11
--------------------------------------------------------------------------------
================================================================================
etcd-3.3.12-5.20190413gitf29b1ad.fc30 (FEDORA-2020-279c61dd70)
A highly-available key value store for shared configuration
--------------------------------------------------------------------------------
Update Information:
Rebuilt to fix [GHSA-
jf24-p9p9-4rjh](https://github.com/gorilla/websocket/security/advisories/...
jf24-p9p9-4rjh); Potential DoS Vector in gorilla/websocket <= v1.4.0.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 17 2020 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 3.3.12-5
- Rebuilt for GHSA-jf24-p9p9-4rjh
--------------------------------------------------------------------------------
================================================================================
firejail-0.9.62-1.fc30 (FEDORA-2020-0fb484d7f7)
Linux namespaces sandbox program
--------------------------------------------------------------------------------
Update Information:
Rebase to version 0.9.62
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 17 2020 Ondrej Dubaj <odubaj(a)redhat.com> - 0.9.62-1
- Rebase to version 0.9.62
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1725965 - firejail-0.9.62 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1725965
[ 2 ] Bug #1716681 - CVE-2019-12589 firejail: improper seccomp restrictions due to
filters being writable inside the jail [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1716681
[ 3 ] Bug #1803907 - Error mounting appimage: appimage.c:119 appimage_set: Invalid
argument
https://bugzilla.redhat.com/show_bug.cgi?id=1803907
[ 4 ] Bug #1787915 - [abrt] firejail: ioperm(): faudit killed by SIGSYS
https://bugzilla.redhat.com/show_bug.cgi?id=1787915
[ 5 ] Bug #1716910 - CVE-2019-12499 firejail: file descriptors command execution
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1716910
--------------------------------------------------------------------------------
================================================================================
golang-github-gorilla-websocket-1.4.1-1.fc30 (FEDORA-2020-8f18c45545)
A WebSocket implementation for Go
--------------------------------------------------------------------------------
Update Information:
Update to latest version. Fix GHSA-jf24-p9p9-4rjh.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 17 2020 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 1.4.1-1
- Update to latest version
- Fix GHSA-jf24-p9p9-4rjh
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1747010 - golang-github-gorilla-websocket-1.4.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747010
--------------------------------------------------------------------------------
================================================================================
hugo-0.55.6-2.fc30 (FEDORA-2020-279c61dd70)
A Fast and Flexible Static Site Generator built with love in GoLang
--------------------------------------------------------------------------------
Update Information:
Rebuilt to fix [GHSA-
jf24-p9p9-4rjh](https://github.com/gorilla/websocket/security/advisories/...
jf24-p9p9-4rjh); Potential DoS Vector in gorilla/websocket <= v1.4.0.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 17 2020 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.55.6-2
- Rebuilt for GHSA-jf24-p9p9-4rjh
--------------------------------------------------------------------------------
================================================================================
libpq-12.2-1.fc30 (FEDORA-2020-0697263271)
PostgreSQL client library
--------------------------------------------------------------------------------
Update Information:
Rebase to upstream release 12.2
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 17 2020 Patrik Novotn�� <panovotn(a)redhat.com> - 12.2-1
- Rebase to upstream release 12.2
* Tue Feb 4 2020 Patrik Novotn�� <panovotn(a)redhat.com> - 12.1-1
- Rebase to upstream release 12.1
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 11.6-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Mon Nov 25 2019 Patrik Novotn�� <panovotn(a)redhat.com> - 11.6-1
- Rebase to upstream version 11.6
--------------------------------------------------------------------------------
================================================================================
libxcrypt-4.4.14-1.fc30 (FEDORA-2020-60ca02e4fe)
Extended crypt library for descrypt, md5crypt, bcrypt, and others
--------------------------------------------------------------------------------
Update Information:
- New upstream release. - Modernize spec file. - Use macro for conflicting man-
pages package.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 17 2020 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.14-1
- New upstream release
* Sun Feb 16 2020 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.13-1
- New upstream release
* Tue Feb 11 2020 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.12-3
- Add an upstream patch to fix a typo in the documentation
* Wed Feb 5 2020 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.12-2
- Add two upstream patches to resolve minor bugs
--------------------------------------------------------------------------------
================================================================================
net-snmp-5.8-16.fc30 (FEDORA-2020-d588eaa6e2)
A collection of SNMP protocol tools and libraries
--------------------------------------------------------------------------------
Update Information:
Set net-snmp-devel as requirement for net-snmp-perl.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 17 2020 Josef Ridky <jridky(a)redhat.com> - 1:5.8-16
- set net-snmp-devel as requirement for net-snmp-perl
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:5.8-15
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Thu Oct 3 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 1:5.8-14
- Rebuilt for Python 3.8.0rc1 (#1748018)
* Thu Sep 19 2019 Josef Ridky <jridky(a)redhat.com> - 1:5.8-13
- Fix snmpv3 trap forwarding (#1753506)
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 1:5.8-12
- Rebuilt for Python 3.8
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:5.8-11
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
pcre2-10.34-6.fc30 (FEDORA-2020-02babc0ff5)
Perl-compatible regular expression library
--------------------------------------------------------------------------------
Update Information:
This release fixes a JIT miscompilation of the chained verbs that can lead to a
crash of the process.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 17 2020 Petr Pisar <ppisar(a)redhat.com> - 10.34-6
- Fix restoring a verb chaing list when exiting a JIT-compiled recursive
function
--------------------------------------------------------------------------------
================================================================================
perl-BSSolv-0.17-1.fc30 (FEDORA-2020-3a2529809c)
OBS solver and repository management using libsolv
--------------------------------------------------------------------------------
Update Information:
Update to final release of perl-BSSolv with Fedora modularity support
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 17 2020 Neal Gompa <ngompa13(a)gmail.com> - 0.17-1
- Update to 0.17
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> -
0.15-3.git20191121.1955d7f
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
php-seld-phar-utils-1.1.0-1.fc30 (FEDORA-2020-fa8aef488f)
PHAR file format utilities
--------------------------------------------------------------------------------
Update Information:
**Version 1.1.0** *Added Linter class with a lint function to lint all PHP
files inside a Phar file.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 17 2020 Remi Collet <remi(a)remirepo.net> - 1.1.0-1
- update to 1.1.0
--------------------------------------------------------------------------------
================================================================================
postgresql-11.7-2.fc30 (FEDORA-2020-434a30f703)
PostgreSQL client programs
--------------------------------------------------------------------------------
Update Information:
Rebase to upstream release 11.7
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 17 2020 Patrik Novotn�� <panovotn(a)redhat.com> - 11.7-2
- Release bump after changelog fix
* Mon Feb 17 2020 Patrik Novotn�� <panovotn(a)redhat.com> - 11.7-1
- Rebase to upstream release 11.7
* Wed Nov 27 2019 Patrik Novotn�� <panovotn(a)redhat.com> - 11.6-1
- New upstream version 11.6
--------------------------------------------------------------------------------
================================================================================
python-pycryptodomex-3.9.6-2.fc30 (FEDORA-2020-7204f05856)
A self-contained cryptographic library for Python
--------------------------------------------------------------------------------
Update Information:
Move test suite module to a separate package ([RHBZ
#1802989](https://bugzilla.redhat.com/show_bug.cgi?id=1802989))
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 17 2020 Mohamed El Morabity <melmorabity(a)fedoraproject.org> - 3.9.6-2
- Move test suite module to a separate package (RHBZ #1802989)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1802989 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1802989
--------------------------------------------------------------------------------
================================================================================
thunderbird-68.5.0-1.fc30 (FEDORA-2020-2211f3adde)
Mozilla Thunderbird mail/newsgroup client
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream version
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 13 2020 Jan Horak <jhorak(a)redhat.com> - 68.5.0-1
- Update to 68.5.0 build1
* Fri Jan 31 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 68.4.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1779264 - thunderbird-68.5.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1779264
--------------------------------------------------------------------------------
================================================================================
whois-5.5.6-1.fc30 (FEDORA-2020-881594a179)
Improved WHOIS client
--------------------------------------------------------------------------------
Update Information:
This release updates a record for th. domain. It also adds records for ��������������.
and ���������. domains.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 17 2020 Petr Pisar <ppisar(a)redhat.com> - 5.5.6-1
- 5.5.6 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1803516 - whois-5.5.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1803516
--------------------------------------------------------------------------------