The following Fedora 30 Security updates need testing:
Age URL
23
https://bodhi.fedoraproject.org/updates/FEDORA-2020-2b53cff132
thunderbird-68.7.0-1.fc30
13
https://bodhi.fedoraproject.org/updates/FEDORA-2020-cbc3149753 xen-4.11.4-1.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2020-20ac7c92a1
community-mysql-8.0.20-1.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-36b36afea6
seamonkey-2.53.2-1.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-21ca991b3b
java-1.8.0-openjdk-1.8.0.252.b09-0.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-c952520959
viewvc-1.1.28-1.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-fa83ea0492
pure-ftpd-1.0.49-5.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-a6a921a591 squid-4.11-1.fc30
The following Fedora 30 Critical Path updates have yet to be approved:
Age URL
303
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c05e4425d1
dash-0.5.10.2-3.fc30
23
https://bodhi.fedoraproject.org/updates/FEDORA-2020-2b53cff132
thunderbird-68.7.0-1.fc30
13
https://bodhi.fedoraproject.org/updates/FEDORA-2020-cbc3149753 xen-4.11.4-1.fc30
11
https://bodhi.fedoraproject.org/updates/FEDORA-2020-0afe424fbd
corosync-3.0.4-1.fc30
7
https://bodhi.fedoraproject.org/updates/FEDORA-2020-5088f068f4 koji-1.21.0-2.fc30
7
https://bodhi.fedoraproject.org/updates/FEDORA-2020-4d7243aae8
gpgme-1.13.1-7.fc30
7
https://bodhi.fedoraproject.org/updates/FEDORA-2020-3a3d3c95ff
gnupg2-2.2.20-2.fc30
7
https://bodhi.fedoraproject.org/updates/FEDORA-2020-ca9a886202 pungi-4.2.2-1.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-ccdb66af9b
hwdata-0.335-1.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-e71a1d34cb
perl-Encode-3.06-15.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-28da9b3f28
elfutils-0.179-2.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-513d099847
kernel-5.6.11-100.fc30 kernel-headers-5.6.11-100.fc30
The following builds have been pushed to Fedora 30 updates-testing
389-ds-base-1.4.1.19-1.fc30
blueman-2.1.3-1.fc30
chromium-81.0.4044.138-1.fc30
condor-8.8.8-1.fc30
copyq-3.11.1-1.fc30
ephemeral-6.4.1-1.fc30
guayadeque-0.4.7-0.10.20200507gitb08bddd.fc30
python-pyftdi-0.51.2-1.fc30
python-pyi2cflash-0.2.2-1.fc30
python-pyspiflash-0.6.3-1.fc30
rust-1.43.1-1.fc30
sleuthkit-4.9.0-1.fc30
xrootd-4.12.0-1.fc30
Details about builds:
================================================================================
389-ds-base-1.4.1.19-1.fc30 (FEDORA-2020-1e86bff22f)
389 Directory Server (base)
--------------------------------------------------------------------------------
Update Information:
Bump version to 1.4.1.19
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 8 2020 Mark Reynolds <mreynolds(a)redhat.com> - 1.4.1.19-1
- Bump version to 1.4.1.19
- Issue 50787 - fix implementation of attr unique
- Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
- Issue 51068 - deadlock when updating the schema
- Issue 51060 - unable to set sslVersionMin to TLS1.0
- Issue 51064 - Unable to install server where IPv6 is disabled
- Issue 51051 - CLI fix consistency issues with confirmations
- Issue 51047 - React deprecating ComponentWillMount
- Issue 50499 - fix npm audit issues
- Issue 51035 - Heavy StartTLS connection load can randomly fail with err=1
- Issue 51031 - UI - transition between two instances needs improvement
--------------------------------------------------------------------------------
================================================================================
blueman-2.1.3-1.fc30 (FEDORA-2020-e4a21e1ac2)
GTK+ Bluetooth Manager
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release (2.1.3)
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 8 2020 Artur Iwicki <fedora(a)svgames.pl> - 1:2.1.3-1
- Update to latest upstream release (2.1.3)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1833228 - blueman v.2.1.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1833228
--------------------------------------------------------------------------------
================================================================================
chromium-81.0.4044.138-1.fc30 (FEDORA-2020-06c54925d3)
A WebKit (Blink) powered web browser
--------------------------------------------------------------------------------
Update Information:
Are you ready, kids? I said, are you ready? Whoooooo has another update for you
to see? Google Chromium! For browsing and tweeting (but not FTP) Google
Chromium! If improved security be something you wish Google Chromium! Then run
dnf while you flop like a fish! Google Chromium! Google Chromium! Google
Chromium! Google Chromium! Ahem. Sorry*. This update fixes the following
security vulnerabilities: * CVE-2020-6464 * CVE-2020-6461 * CVE-2020-6462
*Not sorry
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 7 2020 Tom Callaway <spot(a)fedoraproject.org> - 81.0.4044.138-1
- update to 81.0.4044.138
* Tue May 5 2020 Tom Callaway <spot(a)fedoraproject.org> - 81.0.4044.129-1
- update to 81.0.4044.129
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1828859 - CVE-2020-6462 chromium-browser: Use after free in task scheduling
https://bugzilla.redhat.com/show_bug.cgi?id=1828859
[ 2 ] Bug #1828860 - CVE-2020-6461 chromium-browser: Use after free in storage
https://bugzilla.redhat.com/show_bug.cgi?id=1828860
[ 3 ] Bug #1832488 - CVE-2020-6464 chromium-browser: Type Confusion in Blink
https://bugzilla.redhat.com/show_bug.cgi?id=1832488
--------------------------------------------------------------------------------
================================================================================
condor-8.8.8-1.fc30 (FEDORA-2020-ae934f6790)
HTCondor: High Throughput Computing
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream 8.8.8
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 9 2020 Tim Theisen <ttheisen(a)fedoraproject.org> - 8.8.8-1
- Update to latest upstream 8.8.8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1822525 - Security issues in Condor < 8.8.8
https://bugzilla.redhat.com/show_bug.cgi?id=1822525
[ 2 ] Bug #1828437 - CVE-2019-18823 condor: htcondor: Incorrect access control in
condor_startd [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1828437
--------------------------------------------------------------------------------
================================================================================
copyq-3.11.1-1.fc30 (FEDORA-2020-0cd7082659)
Advanced clipboard manager
--------------------------------------------------------------------------------
Update Information:
Upstream release rhbz#1830240 ---- Upstream release rhbz#1830240
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 8 2020 Gerald Cox <gbcox(a)fedoraproject.org> - 3.11.1-1
- Upstream release rhbz#1830240
* Fri May 1 2020 Gerald Cox <gbcox(a)fedoraproject.org>- 3.11.0-1
- Upstream release rhbz#1830240
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1830240 - copyq-3.11.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1830240
--------------------------------------------------------------------------------
================================================================================
ephemeral-6.4.1-1.fc30 (FEDORA-2020-156eff5eb5)
Private-by-default, always-incognito browser
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 3 2020 Artem Polishchuk <ego.cordatus(a)gmail.com> - 6.4.1-1
- Update to 6.4.1
--------------------------------------------------------------------------------
================================================================================
guayadeque-0.4.7-0.10.20200507gitb08bddd.fc30 (FEDORA-2020-5f28df9b89)
Music player
--------------------------------------------------------------------------------
Update Information:
- Update to 0.4.7-0.10.20200507gitb08bddd - Add BR pkgconfig(jsoncpp) ----
Update to 0.4.7-0.9.20200507git3d4ee2b
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 8 2020 Martin Gansser <martinkg(a)fedoraproject.org> -
0.4.7-0.10.20200507gitb08bddd
- Update to 0.4.7-0.10.20200507gitb08bddd
- Add BR pkgconfig(jsoncpp)
* Thu May 7 2020 Martin Gansser <martinkg(a)fedoraproject.org> -
0.4.7-0.9.20200507git3d4ee2b
- Update to 0.4.7-0.9.20200507git3d4ee2b
--------------------------------------------------------------------------------
================================================================================
python-pyftdi-0.51.2-1.fc30 (FEDORA-2020-4b711f8d94)
Python support for FTDI devices
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release 0.51.2 (rhbz#)
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 8 2020 Fabian Affolter <mail(a)fabian-affolter.ch> - 0.51.2-1
- Update to latest upstream release 0.51.2 (rhbz#)
* Wed Apr 22 2020 Fabian Affolter <mail(a)fabian-affolter.ch> - 0.50.2-1
- Update to latest upstream release 0.50.1 (rhbz#1826260)
* Fri Apr 17 2020 Fabian Affolter <mail(a)fabian-affolter.ch> - 0.50.1-1
- Update to latest upstream release 0.50.1 (rhbz#1821032)
* Sun Apr 5 2020 Fabian Affolter <mail(a)fabian-affolter.ch> - 0.50.0-1
- Update to latest upstream release 0.50.0 (rhbz#1821032)
* Mon Mar 23 2020 Fabian Affolter <mail(a)fabian-affolter.ch> - 0.48.3-1
- Update to latest upstream release 0.48.3 (rhbz#1816213)
* Mon Mar 23 2020 Fabian Affolter <mail(a)fabian-affolter.ch> - 0.48.2-1
- Update to latest upstream release 0.48.2 (rhbz#1816213)
* Tue Mar 17 2020 Fabian Affolter <mail(a)fabian-affolter.ch> - 0.47.2-1
- Update to latest upstream release 0.47.2 (rhbz#1815122)
* Tue Mar 17 2020 Fabian Affolter <mail(a)fabian-affolter.ch> - 0.46-1
- Update to latest upstream release 0.46
* Sat Feb 29 2020 Fabian Affolter <mail(a)fabian-affolter.ch> - 0.44.2-1
- Move docs to subpackage
- Update to latest upstream release 0.44.2
* Thu Jan 30 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.42.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
python-pyi2cflash-0.2.2-1.fc30 (FEDORA-2020-cb5ba9da69)
Python I2C eeprom device drivers
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release 0.2.2 (rhbz#1833299)
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 8 2020 Fabian Affolter <mail(a)fabian-affolter.ch> - 0.2.2-1
- Update to latest upstream release 0.2.2 (rhbz#1833299)
- Fix FTI (rhbz#1830681)
* Thu Mar 19 2020 Fabian Affolter <mail(a)fabian-affolter.ch> - 0.2.1-1
- Update to latest upstream release 0.2.1 (rhbz#1814986)
* Thu Jan 30 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.1.1-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Thu Oct 3 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 0.1.1-3
- Rebuilt for Python 3.8.0rc1 (#1748018)
* Thu Aug 22 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 0.1.1-2
- Rebuilt for Python 3.8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1830681 - FTI: python-pyi2cflash: python3-pyi2cflash
https://bugzilla.redhat.com/show_bug.cgi?id=1830681
[ 2 ] Bug #1833299 - python-pyi2cflash-0.2.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1833299
--------------------------------------------------------------------------------
================================================================================
python-pyspiflash-0.6.3-1.fc30 (FEDORA-2020-fb292250d2)
Python SPI data flash device drivers
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release 0.2.2 (rhbz#1833300)
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 8 2020 Fabian Affolter <mail(a)fabian-affolter.ch> - 0.6.3-1
- Update to latest upstream release 0.2.2 (rhbz#1833300)
* Fri Apr 10 2020 Fabian Affolter <mail(a)fabian-affolter.ch> - 0.6.2-1
- Update to latest upstream release 0.6.2 (rhbz#1822562)
* Thu Jan 30 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1833300 - python-pyspiflash-0.6.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1833300
--------------------------------------------------------------------------------
================================================================================
rust-1.43.1-1.fc30 (FEDORA-2020-c6f8dc9c02)
The Rust Programming Language
--------------------------------------------------------------------------------
Update Information:
Update to Rust 1.43.1: * Fixed undetectable CPU features * Fixed broken `cargo
package --list` See the [blog post](https://blog.rust-
lang.org/2020/05/07/Rust.1.43.1.html) and [release
notes](https://github.com/rust-
lang/rust/blob/master/RELEASES.md#version-1431-2020-05-07) for more details.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 7 2020 Josh Stone <jistone(a)redhat.com> - 1.43.1-1
- Update to 1.43.1.
--------------------------------------------------------------------------------
================================================================================
sleuthkit-4.9.0-1.fc30 (FEDORA-2020-6e3e0c6386)
The Sleuth Kit (TSK)
--------------------------------------------------------------------------------
Update Information:
Update to 4.9.0
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 8 2020 Nicolas Chauvet <kwizart(a)gmail.com> - 4.9.0-1
- Update to 4.9.0
* Tue Jan 28 2020 Nicolas Chauvet <kwizart(a)gmail.com> - 4.8.0-1
- Update to 4.8.0
* Thu Dec 19 2019 Nicolas Chauvet <kwizart(a)gmail.com> - 4.7.0-1
- Update to 4.7.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1752018 - CVE-2019-14532 sleuthkit: sleuth: off-by-one overwrite due to
underflow in tools/hashtools/hfind.cpp [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1752018
[ 2 ] Bug #1752019 - CVE-2019-14532 sleuthkit: sleuth: off-by-one overwrite due to
underflow in tools/hashtools/hfind.cpp [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1752019
[ 3 ] Bug #1795752 - sleuthkit-4.9.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1795752
[ 4 ] Bug #1811819 - CVE-2020-10232 sleuthkit: Stack buffer overflow vulnerability in
yaffsfs_istat() in fs/yaffs.c. [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1811819
[ 5 ] Bug #1811820 - CVE-2020-10232 sleuthkit: Stack buffer overflow vulnerability in
yaffsfs_istat() in fs/yaffs.c. [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1811820
[ 6 ] Bug #1811823 - CVE-2020-10233 sleuthkit: Heap based buffer overead in in
ntfs_dinode_lookup() in fs/ntfs.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1811823
[ 7 ] Bug #1811824 - CVE-2020-10233 sleuthkit: Heap based buffer overead in in
ntfs_dinode_lookup() in fs/ntfs.c [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1811824
--------------------------------------------------------------------------------
================================================================================
xrootd-4.12.0-1.fc30 (FEDORA-2020-5b56e74ffa)
Extended ROOT file server
--------------------------------------------------------------------------------
Update Information:
xrootd 4.12.0
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 8 2020 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 1:4.12.0-1
- Update to version 4.12.0
- Fix empty xrdmapc manpage
* Tue Apr 21 2020 Bj��rn Esser <besser82(a)fedoraproject.org> - 1:4.11.3-2
- Rebuild (json-c)
--------------------------------------------------------------------------------