The following Fedora 30 Security updates need testing:
Age URL
6
https://bodhi.fedoraproject.org/updates/FEDORA-2020-9fa7f4e25c php-7.3.18-1.fc30
5
https://bodhi.fedoraproject.org/updates/FEDORA-2020-d98d2cbae1
clamav-0.102.3-1.fc30
5
https://bodhi.fedoraproject.org/updates/FEDORA-2020-847ad856ab
json-c-0.13.1-12.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-bc22f06aa3
openconnect-8.10-1.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-7fd99ffae0
thunderbird-68.8.0-2.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-cfc319e067
log4net-2.0.8-10.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-3864f32b3d
python-markdown2-2.3.9-1.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-c807d02b1f
netdata-1.22.1-3.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-2d381e061b
libEMF-1.0.12-1.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2020-8a651e7466
knot-resolver-5.1.1-1.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2020-c16c248013
dovecot-2.3.10.1-1.fc30
The following Fedora 30 Critical Path updates have yet to be approved:
Age URL
10
https://bodhi.fedoraproject.org/updates/FEDORA-2020-51ce773eb5
firefox-76.0.1-1.fc30
7
https://bodhi.fedoraproject.org/updates/FEDORA-2020-eca786a240 ethtool-5.6-1.fc30
7
https://bodhi.fedoraproject.org/updates/FEDORA-2020-f57290bd78
dash-0.5.10.2-4.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2020-ac6f73c6fc pcre2-10.35-1.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2020-7db677a922
selinux-policy-3.14.3-58.fc30
5
https://bodhi.fedoraproject.org/updates/FEDORA-2020-847ad856ab
json-c-0.13.1-12.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-7fd99ffae0
thunderbird-68.8.0-2.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-2320e85ab1
osinfo-db-20200515-1.fc30
The following builds have been pushed to Fedora 30 updates-testing
abrt-2.14.2-1.fc30
abrt-java-connector-1.1.5-1.fc30
chatterino2-2.1.7-1.fc30
fedpkg-1.38-4.fc30
gnome-abrt-1.3.3-1.fc30
guayadeque-0.4.7-0.11.20200520git6be35ba.fc30
libreport-2.13.1-3.fc30
libtpms-0.7.1-0.20200520git8fe99d1fd0.fc30
nss-3.52.0-2.fc30
perl-Mozilla-CA-20200520-1.fc30
python38-3.8.3-1.fc30
reportd-0.7.4-1.fc30
rpkg-1.60-3.fc30
vim-go-1.23-2.fc30
virtualbox-guest-additions-6.1.8-2.fc30
Details about builds:
================================================================================
abrt-2.14.2-1.fc30 (FEDORA-2020-1757bac9a0)
Automatic bug detection and reporting tool
--------------------------------------------------------------------------------
Update Information:
* libreport - Support new "time" and "time_for_children" kernel
namespaces
- client-python: Accomodate for multiple debug directories - gui-wizard-gtk:
Wrap event log messages * abrt - a-a-save-package-data: Add R and tcl to
interpreted langs - plugins: xorg-utils: Loopify parsing - CLI
enhancements and fixes - autogen.sh: Handle NOCONFIGURE per the Build API
- plugins: journal: Fix ci_mapping being overwritten - plugins: abrt-
journal-core: Don���t assume anything about uid_t - lib,plugins: Accomodate
for multiple debug directories * abrt-java-connector - compatibility
with libreport-2.13 * reportd - compatibility with libreport-2.13
* gnome-abrt - compatibility with libreport-2.13
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 12 2020 Michal Fabik <mfabik(a)redhat.com> - 2.14.2-1
- Fix broken builds with --enable-authenticated-autoreporting
* Fri Apr 24 2020 Michal Fabik <mfabik(a)redhat.com> - 2.14.1-1
- tests: Add perl, php R and tcl to dont-blame-interpret
- a-a-save-package-data: Add R and tcl to interpreted langs
- a-a-save-package-data: Use regexps to match interpreters
- .travis.yml: Update secret
- plugins: xorg-utils: Loopify parsing
- Add namespace to libreport function and global names
- cli: Correct debug directories in config
- cli: Show defaults in help output
- cli: Fix verbosity option
- cli: Fix descriptions for --since and --until
- autogen.sh: Handle NOCONFIGURE per the Build API
- plugins: journal: Fix ci_mapping being overwritten
- plugins: abrt-journal-core: Don���t assume anything about uid_t
- lib,plugins: Accomodate for multiple debug directories
- dbus: Drop bogus dependency
- dbus: Drop abrt_problems2
- Drop libcap dependency
- Drop Travis config
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1827873 - reportd-0.7.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1827873
--------------------------------------------------------------------------------
================================================================================
abrt-java-connector-1.1.5-1.fc30 (FEDORA-2020-1757bac9a0)
JNI Agent library converting Java exceptions to ABRT problems
--------------------------------------------------------------------------------
Update Information:
* libreport - Support new "time" and "time_for_children" kernel
namespaces
- client-python: Accomodate for multiple debug directories - gui-wizard-gtk:
Wrap event log messages * abrt - a-a-save-package-data: Add R and tcl to
interpreted langs - plugins: xorg-utils: Loopify parsing - CLI
enhancements and fixes - autogen.sh: Handle NOCONFIGURE per the Build API
- plugins: journal: Fix ci_mapping being overwritten - plugins: abrt-
journal-core: Don���t assume anything about uid_t - lib,plugins: Accomodate
for multiple debug directories * abrt-java-connector - compatibility
with libreport-2.13 * reportd - compatibility with libreport-2.13
* gnome-abrt - compatibility with libreport-2.13
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 13 2020 Michal Fabik <mfabik(a)redhat.com> - 1.1.5-1
- new upstream release: 1.1.5
* Tue May 12 2020 Packit Service <user-cont-team+packit-service(a)redhat.com> -
1.1.5-1
- new upstream release: 1.1.5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1827873 - reportd-0.7.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1827873
--------------------------------------------------------------------------------
================================================================================
chatterino2-2.1.7-1.fc30 (FEDORA-2020-72106cbcd3)
Chat client for twitch.tv
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 28 2020 Artem Polishchuk <ego.cordatus(a)gmail.com> - 2.1.7-1
- Update to 2.1.7
- Add new submodule 'qtkeychain'
- Drop patches (upstreamed now)
- Disable LTO
* Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.1.4-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
fedpkg-1.38-4.fc30 (FEDORA-2020-c4f24f18b2)
Fedora utility for working with dist-git
--------------------------------------------------------------------------------
Update Information:
Patch: Switch from krb_login to gssapi_login Replaces deprecated method
krb_login.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 18 2020 Ond��ej Nosek <onosek(a)redhat.com> - 1.38-4
- Patch: Fix unittest for bodhi based on its version
--------------------------------------------------------------------------------
================================================================================
gnome-abrt-1.3.3-1.fc30 (FEDORA-2020-1757bac9a0)
A utility for viewing problems that have occurred with the system
--------------------------------------------------------------------------------
Update Information:
* libreport - Support new "time" and "time_for_children" kernel
namespaces
- client-python: Accomodate for multiple debug directories - gui-wizard-gtk:
Wrap event log messages * abrt - a-a-save-package-data: Add R and tcl to
interpreted langs - plugins: xorg-utils: Loopify parsing - CLI
enhancements and fixes - autogen.sh: Handle NOCONFIGURE per the Build API
- plugins: journal: Fix ci_mapping being overwritten - plugins: abrt-
journal-core: Don���t assume anything about uid_t - lib,plugins: Accomodate
for multiple debug directories * abrt-java-connector - compatibility
with libreport-2.13 * reportd - compatibility with libreport-2.13
* gnome-abrt - compatibility with libreport-2.13
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 20 2020 Packit Service <user-cont-team+packit-service(a)redhat.com> -
1.3.3-1
- new upstream release: 1.3.3
* Tue May 19 2020 Ernestas Kulik <ekulik(a)redhat.com> - 1.3.2-2
- Add missing python3-beautifulsoup4 dependency
- Add patch for
https://bugzilla.redhat.com/show_bug.cgi?id=1836614
* Wed May 13 2020 Packit Service <user-cont-team+packit-service(a)redhat.com> -
1.3.2-1
- new upstream release: 1.3.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1827873 - reportd-0.7.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1827873
--------------------------------------------------------------------------------
================================================================================
guayadeque-0.4.7-0.11.20200520git6be35ba.fc30 (FEDORA-2020-d08a0536aa)
Music player
--------------------------------------------------------------------------------
Update Information:
Update to 0.4.7-0.11.20200520git6be35ba ---- Update to
0.4.7-0.10.20200516gitb44f4c8
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 20 2020 Martin Gansser <martinkg(a)fedoraproject.org> -
0.4.7-0.11.20200520git6be35ba
- Update to 0.4.7-0.11.20200520git6be35ba
--------------------------------------------------------------------------------
================================================================================
libreport-2.13.1-3.fc30 (FEDORA-2020-1757bac9a0)
Generic library for reporting various problems
--------------------------------------------------------------------------------
Update Information:
* libreport - Support new "time" and "time_for_children" kernel
namespaces
- client-python: Accomodate for multiple debug directories - gui-wizard-gtk:
Wrap event log messages * abrt - a-a-save-package-data: Add R and tcl to
interpreted langs - plugins: xorg-utils: Loopify parsing - CLI
enhancements and fixes - autogen.sh: Handle NOCONFIGURE per the Build API
- plugins: journal: Fix ci_mapping being overwritten - plugins: abrt-
journal-core: Don���t assume anything about uid_t - lib,plugins: Accomodate
for multiple debug directories * abrt-java-connector - compatibility
with libreport-2.13 * reportd - compatibility with libreport-2.13
* gnome-abrt - compatibility with libreport-2.13
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 11 2020 Michal Fabik <mfabik(a)redhat.com> 2.13.1-1
- Fix broken abrt-vmcore.service due to bad namespacing
* Fri Apr 24 2020 Michal Fabik <mfabik(a)redhat.com> 2.13.0-2
- Support new "time" and "time_for_children" kernel namespaces
- Remove preprocessor namespacing in favor of function name prefixes
- client-python: Accomodate for multiple debug directories
- gui-wizard-gtk: Wrap event log messages
- lib: Drop D-Bus code
- plugins: reporter-rhtsupport: Drop unused debugging code
- Update translations
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1827873 - reportd-0.7.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1827873
--------------------------------------------------------------------------------
================================================================================
libtpms-0.7.1-0.20200520git8fe99d1fd0.fc30 (FEDORA-2020-1eed1d0bf2)
Library providing Trusted Platform Module (TPM) functionality
--------------------------------------------------------------------------------
Update Information:
Following stable-0.7.0 branch for TPM 2 related fixes; v0.7.1 + gcc related
patch
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 20 2020 Stefan Berger <stefanb(a)linux.ibm.com> -
0.7.1-0.20200520git8fe99d1fd0
- Following stable-0.7.0 branch for TPM 2 related fixes; v0.7.1 + gcc related patch
- elliptic curve fixes
- MANUFACTURER changed from "IBM " to "IBM"
- gcc 10 related fix
--------------------------------------------------------------------------------
================================================================================
nss-3.52.0-2.fc30 (FEDORA-2020-424a542a9f)
Network Security Services
--------------------------------------------------------------------------------
Update Information:
rebase to nss-3.52 Delay CK_GCM_PARAMS semantics until fedora 34
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 13 2020 Bob Relyea <rrelyea(a)redhat.com> - 3.52.0-2
- Delay CK_GCM_PARAMS semantics until fedora 34
* Mon May 11 2020 Daiki Ueno <dueno(a)redhat.com> - 3.52.0-1
- Update to NSS 3.52
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1800801 - nss-3.52.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1800801
--------------------------------------------------------------------------------
================================================================================
perl-Mozilla-CA-20200520-1.fc30 (FEDORA-2020-c0d616ed91)
Mozilla's CA certificate bundle in PEM format
--------------------------------------------------------------------------------
Update Information:
This release updates the bundled certificate bundle that we do not use either.
We only deliver it to provide an up-to-date version string.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 20 2020 Petr Pisar <ppisar(a)redhat.com> - 20200520-1
- 20200520 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1837829 - perl-Mozilla-CA-20200520 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1837829
--------------------------------------------------------------------------------
================================================================================
python38-3.8.3-1.fc30 (FEDORA-2020-bc98d7894f)
Version 3.8 of the Python interpreter
--------------------------------------------------------------------------------
Update Information:
## Python 3.8.3 This is the third maintenance release of Python 3.8. See [the c
hangelog](https://docs.python.org/release/3.8.3/whatsnew/changelog.html#c...
g) for details. Contains the security fix for CVE-2020-8492.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1809065 - CVE-2020-8492 python: wrong backtracking in
urllib.request.AbstractBasicAuthHandler allows for a ReDoS
https://bugzilla.redhat.com/show_bug.cgi?id=1809065
--------------------------------------------------------------------------------
================================================================================
reportd-0.7.4-1.fc30 (FEDORA-2020-1757bac9a0)
Service reporting org.freedesktop.Problems2 entries
--------------------------------------------------------------------------------
Update Information:
* libreport - Support new "time" and "time_for_children" kernel
namespaces
- client-python: Accomodate for multiple debug directories - gui-wizard-gtk:
Wrap event log messages * abrt - a-a-save-package-data: Add R and tcl to
interpreted langs - plugins: xorg-utils: Loopify parsing - CLI
enhancements and fixes - autogen.sh: Handle NOCONFIGURE per the Build API
- plugins: journal: Fix ci_mapping being overwritten - plugins: abrt-
journal-core: Don���t assume anything about uid_t - lib,plugins: Accomodate
for multiple debug directories * abrt-java-connector - compatibility
with libreport-2.13 * reportd - compatibility with libreport-2.13
* gnome-abrt - compatibility with libreport-2.13
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 25 2020 Ernestas Kulik <ekulik(a)redhat.com> - 0.7.4-1
- new upstream release: 0.7.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1827873 - reportd-0.7.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1827873
--------------------------------------------------------------------------------
================================================================================
rpkg-1.60-3.fc30 (FEDORA-2020-c4f24f18b2)
Python library for interacting with rpm+git
--------------------------------------------------------------------------------
Update Information:
Patch: Switch from krb_login to gssapi_login Replaces deprecated method
krb_login.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 19 2020 Ond��ej Nosek <onosek(a)redhat.com> - 1.60-3
- Patch: Switch from krb_login to gssapi_login
* Mon May 11 2020 Ond��ej Nosek <onosek(a)redhat.com> - 1.60-2
- Releasing the epel8 version
--------------------------------------------------------------------------------
================================================================================
vim-go-1.23-2.fc30 (FEDORA-2020-a6601c0033)
Go development plugin for Vim
--------------------------------------------------------------------------------
Update Information:
Deal with *symlink -> directory* change. ---- [Version 1.23
changelog](https://github.com/fatih/vim-go/blob/v1.23/CHANGELOG.md#v123---
may-16-2020)
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 20 2020 Nikola Forr�� <nforro(a)redhat.com> - 1.23-2
- Fix symlink -> directory conflict
* Tue May 19 2020 Nikola Forr�� <nforro(a)redhat.com> - 1.23-1
- Update to 1.23
Resolves: #1837081
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1837081 - vim-go-1.23 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1837081
--------------------------------------------------------------------------------
================================================================================
virtualbox-guest-additions-6.1.8-2.fc30 (FEDORA-2020-5bb17d820e)
VirtualBox Guest Additions
--------------------------------------------------------------------------------
Update Information:
- Add a vboxclient.service which runs VBoxClient --vmsvga when using the VMSVGA
virtual GPU, this fixes resizing in wayland sessions (rhbz 1789545) - Drop
VBoxClient --vmsvga-x11 from VBoxClient-all, it is not necessary now that we run
VBoxClient --vmsvga as service and it was breaking resize support with the
VBoxSVGA virtual GPU (rhbz 1789545) ---- New upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 20 2020 Hans de Goede <hdegoede(a)redhat.com> - 6.1.8-2
- Add a vboxclient.service which runs VBoxClient --vwsvga when using the
VMSVGA virtual GPU, this fixes resizing in wayland sessions (rhbz 1789545)
- Drop VBoxClient --vwsvga-x11 from VBoxClient-all, it is not necessary
now that we run VBoxClient --vwsvga as service and it was breaking resize
support with the VBoxSVGA virtual GPU (rhbz 1789545)
- Drop ExecStartPre modprove vboxvideo vboxsf from vboxservice.service,
this is not necessary, they will be loaded automatically
* Sat May 16 2020 S��rgio Basto <sergio(a)serjux.com> - 6.1.8-1
- Update Virtualbox Guest Additions to 6.1.8
* Thu Apr 16 2020 S��rgio Basto <sergio(a)serjux.com> - 6.1.6-1
- Update Virtualbox Guest Additions to 6.1.6
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1789545 - Can't auto-resize display on Fedora 31 guest VM
https://bugzilla.redhat.com/show_bug.cgi?id=1789545
[ 2 ] Bug #1823891 - virtualbox-guest-additions-6.1.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1823891
--------------------------------------------------------------------------------