The following Fedora 30 Security updates need testing:
Age URL
12
https://bodhi.fedoraproject.org/updates/FEDORA-2020-2b53cff132
thunderbird-68.7.0-1.fc30
12
https://bodhi.fedoraproject.org/updates/FEDORA-2020-0c71c00af4
libxml2-2.9.10-3.fc30
5
https://bodhi.fedoraproject.org/updates/FEDORA-2020-4e093619bb git-2.21.3-1.fc30
5
https://bodhi.fedoraproject.org/updates/FEDORA-2020-fd8761fd13
php-horde-horde-5.2.22-1.fc30
5
https://bodhi.fedoraproject.org/updates/FEDORA-2020-5a4da65166 cups-2.2.12-8.fc30
5
https://bodhi.fedoraproject.org/updates/FEDORA-2020-827b677e15
python-bleach-3.1.4-2.fc30
5
https://bodhi.fedoraproject.org/updates/FEDORA-2020-1e85425a52
sqliteodbc-0.9996-4.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-c9eb911737
pxz-4.999.9-19.beta.20200421git.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-da2d1ef2d7
openssl-1.1.1g-1.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-d171bf636d
rubygem-json-2.2.0-202.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-0e7f1b663b
chromium-81.0.4044.122-1.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-969414e05b
openvpn-2.4.9-1.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-bd170e803f
webkit2gtk3-2.28.2-1.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-cbc3149753 xen-4.11.4-1.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2020-92ed6d99e4
java-latest-openjdk-14.0.1.7-2.rolling.fc30
The following Fedora 30 Critical Path updates have yet to be approved:
Age URL
292
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c05e4425d1
dash-0.5.10.2-3.fc30
12
https://bodhi.fedoraproject.org/updates/FEDORA-2020-b3aa343948
libtirpc-1.2.6-0.fc30
12
https://bodhi.fedoraproject.org/updates/FEDORA-2020-0c71c00af4
libxml2-2.9.10-3.fc30
12
https://bodhi.fedoraproject.org/updates/FEDORA-2020-2b53cff132
thunderbird-68.7.0-1.fc30
12
https://bodhi.fedoraproject.org/updates/FEDORA-2020-a7509f2334
nfs-utils-2.4.3-1.rc1.fc30
10
https://bodhi.fedoraproject.org/updates/FEDORA-2020-1208e2a2b8 vim-8.2.587-1.fc30
5
https://bodhi.fedoraproject.org/updates/FEDORA-2020-44d12740d8 ceph-14.2.9-1.fc30
5
https://bodhi.fedoraproject.org/updates/FEDORA-2020-5a4da65166 cups-2.2.12-8.fc30
5
https://bodhi.fedoraproject.org/updates/FEDORA-2020-fd4d0014e1
python2-2.7.18-1.fc30 python2-docs-2.7.18-1.fc30
5
https://bodhi.fedoraproject.org/updates/FEDORA-2020-c1dd22ce63 koji-1.21.0-1.fc30
5
https://bodhi.fedoraproject.org/updates/FEDORA-2020-9b3da9c8e7
linux-firmware-20200421-107.fc30
5
https://bodhi.fedoraproject.org/updates/FEDORA-2020-4e093619bb git-2.21.3-1.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-0f078e7280
pyproject-rpm-macros-0-14.fc30 python-pip-19.0.3-7.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-a615847091
cairo-1.16.0-6.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-da2d1ef2d7
openssl-1.1.1g-1.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-184ff81bcd
glusterfs-6.9-1.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-cbc3149753 xen-4.11.4-1.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-9a6ac01ec2
kernel-5.6.7-100.fc30 kernel-headers-5.6.7-100.fc30 kernel-tools-5.6.7-100.fc30
The following builds have been pushed to Fedora 30 updates-testing
RBTools-1.0.3-1.fc30
corosync-3.0.4-1.fc30
create-fake-rpm-2-1.fc30
golang-github-alecthomas-kong-0.2.7-1.fc30
guayadeque-0.4.7-0.8.20200427git42f77b6.fc30
java-11-openjdk-11.0.7.10-0.fc30
jss-4.6.4-1.fc30
lighttpd-1.4.55-2.fc30
mingw-biblesync-2.0.1-2.fc30
nextcloud-client-2.6.4-4.fc30
nrpe-4.0.2-3.20200423git4f7dd11.fc30
perl-Date-Holidays-DE-2.05-1.fc30
perl-DateTime-TimeZone-2.39-1.fc30
pki-core-10.8.3-2.fc30
python-click-man-0.4.1-1.fc30
python-cloudscraper-1.2.34-1.fc30
python-ogr-0.11.3-1.fc30
python3-exiv2-0.7.2-1.fc30
rr-5.3.0-14.20200427gitbab9ca9.fc30
uwsgi-2.0.18-7.fc30
Details about builds:
================================================================================
RBTools-1.0.3-1.fc30 (FEDORA-2020-3b23f59a9d)
Tools for use with ReviewBoard
--------------------------------------------------------------------------------
Update Information:
Update to RBTools 1.0.3
https://www.reviewboard.org/docs/releasenotes/rbtools/1.0.3/
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 27 2020 Stephen Gallagher <sgallagh(a)redhat.com> - 1.0.3-1
- Update to RBTools 1.0.3
-
https://www.reviewboard.org/docs/releasenotes/rbtools/1.0.3/
* Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.2-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Thu Oct 3 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 1.0.2-5
- Rebuilt for Python 3.8.0rc1 (#1748018)
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 1.0.2-4
- Rebuilt for Python 3.8
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 1.0.2-3
- Rebuilt for Python 3.8
* Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
corosync-3.0.4-1.fc30 (FEDORA-2020-0afe424fbd)
The Corosync Cluster Engine and Application Programming Interfaces
--------------------------------------------------------------------------------
Update Information:
This update improves stability and addresses several bugs
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 23 2020 Jan Friesse <jfriesse(a)redhat.com> - 3.0.4-1
- New upstream release
--------------------------------------------------------------------------------
================================================================================
create-fake-rpm-2-1.fc30 (FEDORA-2020-94b86b8f5b)
Generate fake (S)RPM
--------------------------------------------------------------------------------
Update Information:
new package
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1825681 - Review Request: create-fake-rpm - Generate fake (S)RPM
https://bugzilla.redhat.com/show_bug.cgi?id=1825681
--------------------------------------------------------------------------------
================================================================================
golang-github-alecthomas-kong-0.2.7-1.fc30 (FEDORA-2020-7a8d7dc34f)
Kong is a command-line parser for Go
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 26 2020 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.2.7-1
- Update to latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1828057 - golang-github-alecthomas-kong-0.2.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1828057
--------------------------------------------------------------------------------
================================================================================
guayadeque-0.4.7-0.8.20200427git42f77b6.fc30 (FEDORA-2020-e1bd667b2b)
Music player
--------------------------------------------------------------------------------
Update Information:
Update to 0.4.7-0.8.20200427git42f77b6
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 27 2020 Martin Gansser <martinkg(a)fedoraproject.org> -
0.4.7-0.8.20200427git42f77b6
- Update to 0.4.7-0.8.20200427git42f77b6
--------------------------------------------------------------------------------
================================================================================
java-11-openjdk-11.0.7.10-0.fc30 (FEDORA-2020-73341c894c)
OpenJDK Runtime Environment 11
--------------------------------------------------------------------------------
Update Information:
Update to upstream's security update, Critical Patch Update April 2020. See:
https://bitly.com/oj1107
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 22 2020 Andrew John Hughes <gnu.andrew(a)redhat.com> - 1:11.0.7.10-0
- Update to shenandoah-jdk-11.0.7+10 (GA)
- Switch to GA mode for final release.
- Remove JDK-8237879 backport as this was integrated upstream in jdk-11.0.7+10.
* Tue Apr 21 2020 Andrew John Hughes <gnu.andrew(a)redhat.com> - 1:11.0.7.9-0.0.ea
- Update to shenandoah-jdk-11.0.7+9 (EA)
- Remove JDK-8241296 backport as this was integrated upstream in jdk-11.0.7+9.
* Tue Apr 21 2020 Andrew John Hughes <gnu.andrew(a)redhat.com> - 1:11.0.7.8-0.0.ea
- Update to shenandoah-jdk-11.0.7+8 (EA)
* Mon Apr 20 2020 Andrew John Hughes <gnu.andrew(a)redhat.com> - 1:11.0.7.7-0.0.ea
- Update to shenandoah-jdk-11.0.7+7 (EA)
* Mon Apr 20 2020 Andrew John Hughes <gnu.andrew(a)redhat.com> - 1:11.0.7.6-0.0.ea
- Update to shenandoah-jdk-11.0.7+6 (EA)
* Sun Apr 19 2020 Andrew John Hughes <gnu.andrew(a)redhat.com> - 1:11.0.7.5-0.0.ea
- Update to shenandoah-jdk-11.0.7+5 (EA)
* Sun Apr 19 2020 Andrew John Hughes <gnu.andrew(a)redhat.com> - 1:11.0.7.4-0.0.ea
- Update to shenandoah-jdk-11.0.7+4 (EA)
* Thu Apr 16 2020 Andrew John Hughes <gnu.andrew(a)redhat.com> - 1:11.0.7.3-0.0.ea
- Add JDK-8228407 backport to resolve crashes during verification.
* Thu Apr 16 2020 Andrew John Hughes <gnu.andrew(a)redhat.com> - 1:11.0.7.3-0.0.ea
- Update to shenandoah-jdk-11.0.7+3 (EA)
* Mon Apr 6 2020 Andrew John Hughes <gnu.andrew(a)redhat.com> - 1:11.0.7.2-0.5.ea
- Sync SystemTap & desktop files with upstream IcedTea release 3.15.0 using new
script
* Sat Mar 28 2020 Andrew John Hughes <gnu.andrew(a)redhat.com> - 1:11.0.7.2-0.4.ea
- Add JDK-8237396 backport to resolve Shenandoah TCK breakage in traversal mode.
* Fri Mar 20 2020 Andrew John Hughes <gnu.andrew(a)redhat.com> - 1:11.0.7.2-0.2.ea
- Backport JDK-8241296 to fix segfaults when active_handles is NULL (RH1813550)
* Fri Mar 13 2020 Severin Gehwolf <sgehwolf(a)redhat.com> - 1:11.0.7.2-0.1.ea
- Add patch for make 4.3 (JDK-8237879)
* Wed Mar 4 2020 Andrew John Hughes <gnu.andrew(a)redhat.com> - 1:11.0.7.2-0.0.ea
- Update to shenandoah-jdk-11.0.7+2 (EA)
- Drop JDK-8224851 backport now included upstream.
* Thu Feb 27 2020 Andrew Hughes <gnu.andrew(a)redhat.com> - 1:11.0.7.1-0.0.ea
- Update to shenandoah-jdk-11.0.7+1 (EA)
- Switch to EA mode for 11.0.7 pre-release builds.
- Drop JDK-8236039 backport now applied upstream.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1827464 - Update OpenJDK to 11.0.7
https://bugzilla.redhat.com/show_bug.cgi?id=1827464
--------------------------------------------------------------------------------
================================================================================
jss-4.6.4-1.fc30 (FEDORA-2020-ebe88a5cc4)
Java Security Services (JSS)
--------------------------------------------------------------------------------
Update Information:
Bug fix for JSS and Dogtag PKI
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 27 2020 Dogtag PKI Team <pki-devel(a)redhat.com> - 4.6.4-1
- Rebase to JSS 4.6.4
- Fixes memory leak present since v4.6.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1814242 - Upgrade to 10.8.3 breaks PKI Tomcat Server
https://bugzilla.redhat.com/show_bug.cgi?id=1814242
--------------------------------------------------------------------------------
================================================================================
lighttpd-1.4.55-2.fc30 (FEDORA-2020-62cfcd6cdc)
Lightning fast webserver with light system requirements
--------------------------------------------------------------------------------
Update Information:
Fix ipv6 default config bug.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 27 2020 Gwyn Ciesla <gwync(a)protonmail.com> - 1.4.55-2
- Fix ipv6 default config bug.
* Mon Feb 3 2020 Gwyn Ciesla <gwync(a)protonmail.com> - 1.4.55-1
- 1.4.55
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.54-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Mon Jan 13 2020 Gwyn Ciesla <gwync(a)protonmail.com> - 1.4.54-5
- Path corrections, BZ 1789874
* Fri Nov 1 2019 Gwyn Ciesla <gwync(a)protonmail.com> - 1.4.54-4
- Conditional correction.
* Fri Nov 1 2019 Gwyn Ciesla <gwync(a)protonmail.com> - 1.4.54-3
- Conditionalize GeoIP, fix logo requires.
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.54-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1069029 - lighttpd default configuration generates scary warnings
https://bugzilla.redhat.com/show_bug.cgi?id=1069029
--------------------------------------------------------------------------------
================================================================================
mingw-biblesync-2.0.1-2.fc30 (FEDORA-2020-d752e3b411)
A Cross-platform library for sharing Bible navigation
--------------------------------------------------------------------------------
Update Information:
Properly label license files
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1827887 - Review Request: mingw-biblesync - A Cross-platform library for
sharing Bible navigation
https://bugzilla.redhat.com/show_bug.cgi?id=1827887
--------------------------------------------------------------------------------
================================================================================
nextcloud-client-2.6.4-4.fc30 (FEDORA-2020-55ce43f6c4)
The Nextcloud Client
--------------------------------------------------------------------------------
Update Information:
Added Requires: libgnome-keyring Read
https://bugzilla.redhat.com/show_bug.cgi?id=1652973
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 27 2020 Germano Massullo <germano.massullo(a)gmail.com> - 2.6.4-4
- Added Requires: libgnome-keyring Read
https://bugzilla.redhat.com/show_bug.cgi?id=1652973
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1652973 - Add libgnome-keyring as dependency
https://bugzilla.redhat.com/show_bug.cgi?id=1652973
[ 2 ] Bug #1791915 - Nextcloud Desktop doesn't remember credentials
https://bugzilla.redhat.com/show_bug.cgi?id=1791915
--------------------------------------------------------------------------------
================================================================================
nrpe-4.0.2-3.20200423git4f7dd11.fc30 (FEDORA-2020-8383fe653e)
Host/service/network monitoring agent for Nagios
--------------------------------------------------------------------------------
Update Information:
Fix regression with nasty_metacharacters
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 26 2020 Martin Jackson <mhjacks(a)swbell.net> - 4.0.2-3.20200423git4f7dd11
- Fix regression with nasty_metacharacters
- Update Patch3
- Drop patch13 (trees have diverged)
--------------------------------------------------------------------------------
================================================================================
perl-Date-Holidays-DE-2.05-1.fc30 (FEDORA-2020-ee893c3ea5)
Perl module to determine German holidays
--------------------------------------------------------------------------------
Update Information:
Date::Holidays::DE 2.04 ======================= * Added github repository to
meta data * Added Liberation Day for Berlin for 2020 Date::Holidays::DE 2.05
======================= * Set date for Liberation Day
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 27 2020 Robert Scheck <robert(a)fedoraproject.org> 2.05-1
- Upgrade to 2.05 (#1828234)
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.03-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
perl-DateTime-TimeZone-2.39-1.fc30 (FEDORA-2020-bdbc8e8c25)
Time zone object base class and factory
--------------------------------------------------------------------------------
Update Information:
Update to the latest release
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 27 2020 Jitka Plesnikova <jplesnik(a)redhat.com> - 2.39-1
- 2.39 bump (2020a Olson database)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1827726 - perl-DateTime-TimeZone-2.39 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1827726
--------------------------------------------------------------------------------
================================================================================
pki-core-10.8.3-2.fc30 (FEDORA-2020-ebe88a5cc4)
PKI Core Package
--------------------------------------------------------------------------------
Update Information:
Bug fix for JSS and Dogtag PKI
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 27 2020 Dinesh Prasanth M K <dmoluguw(a)redhat.com> - 10.8.3-2
- Fix bz#1814242 / dogtag issue #3168: Fix EC admin certificate profile upgrade
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1814242 - Upgrade to 10.8.3 breaks PKI Tomcat Server
https://bugzilla.redhat.com/show_bug.cgi?id=1814242
--------------------------------------------------------------------------------
================================================================================
python-click-man-0.4.1-1.fc30 (FEDORA-2020-6d40c83117)
Generate man pages for click based CLI applications
--------------------------------------------------------------------------------
Update Information:
New upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 27 2020 Jiri Popelka <jpopelka(a)redhat.com> - 0.4.1-1
- 0.4.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1828275 - Does not work with python-click-7.1.1
https://bugzilla.redhat.com/show_bug.cgi?id=1828275
--------------------------------------------------------------------------------
================================================================================
python-cloudscraper-1.2.34-1.fc30 (FEDORA-2020-2897968aeb)
Python module to bypass Cloudflare's anti-bot page
--------------------------------------------------------------------------------
Update Information:
Update to 1.2.34 : - Add ability for custom ssl context to be passed - Added
new timer to anticaptcha module - Fixed Cloudflare's challenge form change -
Removed DNT from headers causing reCaptcha on some sites - Updated cipher suite
for browsers
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 27 2020 Lyes Saadi <fedora(a)lyes.eu> - 1.2.34-1
- Update to 1.2.34
--------------------------------------------------------------------------------
================================================================================
python-ogr-0.11.3-1.fc30 (FEDORA-2020-f7e844d1b6)
One API for multiple git forges
--------------------------------------------------------------------------------
Update Information:
new upstream release: 0.11.3
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 27 2020 Packit Service <user-cont-team+packit-service(a)redhat.com> -
0.11.3-1
- new upstream release: 0.11.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1824591 - python-ogr-0.11.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1824591
--------------------------------------------------------------------------------
================================================================================
python3-exiv2-0.7.2-1.fc30 (FEDORA-2020-333cbac64e)
Python3 bindings for the exiv2 library
--------------------------------------------------------------------------------
Update Information:
Update to version 0.7.2
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 27 2020 Andreas Schneider <asn(a)redhat.com> - 0.7.2-1
- Update to version 0.7.2
--------------------------------------------------------------------------------
================================================================================
rr-5.3.0-14.20200427gitbab9ca9.fc30 (FEDORA-2020-fbdf51ba14)
Tool to record and replay execution of applications
--------------------------------------------------------------------------------
Update Information:
Sync with upstream branch master,
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
uwsgi-2.0.18-7.fc30 (FEDORA-2020-c65bda637b)
Fast, self-healing, application container server
--------------------------------------------------------------------------------
Update Information:
Re-introducing tmpfiles.d (Jorge Gallegos)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 27 2020 Jorge A Gallegos <kad(a)blegh.net> - 2.0.18-7
- Re-introducing tmpfiles.d (Jorge Gallegos)
--------------------------------------------------------------------------------