The following Fedora 30 Security updates need testing:
Age URL
5
https://bodhi.fedoraproject.org/updates/FEDORA-2020-8d3b359179
perl-Mojolicious-8.42-1.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-eb7a965fcf
abcm2ps-8.14.7-2.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-9fa7f4e25c php-7.3.18-1.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2020-d98d2cbae1
clamav-0.102.3-1.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2020-847ad856ab
json-c-0.13.1-12.fc30
The following Fedora 30 Critical Path updates have yet to be approved:
Age URL
10
https://bodhi.fedoraproject.org/updates/FEDORA-2020-ccdb66af9b
hwdata-0.335-1.fc30
10
https://bodhi.fedoraproject.org/updates/FEDORA-2020-e71a1d34cb
perl-Encode-3.06-15.fc30
9
https://bodhi.fedoraproject.org/updates/FEDORA-2020-28da9b3f28
elfutils-0.179-2.fc30
5
https://bodhi.fedoraproject.org/updates/FEDORA-2020-51ce773eb5
firefox-76.0.1-1.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-eca786a240 ethtool-5.6-1.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-f57290bd78
dash-0.5.10.2-4.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-ac6f73c6fc pcre2-10.35-1.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-7db677a922
selinux-policy-3.14.3-58.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2020-1757bac9a0 abrt-2.14.2-1.fc30
abrt-java-connector-1.1.5-1.fc30 gnome-abrt-1.3.2-1.fc30 libreport-2.13.1-3.fc30
reportd-0.7.4-1.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2020-847ad856ab
json-c-0.13.1-12.fc30
The following builds have been pushed to Fedora 30 updates-testing
Cadence-1.0.0-0.11.20200504git5787908.fc30
Carla-2.2-0.1.20200514gitf100892.fc30
ibus-typing-booster-2.8.3-2.fc30
kernel-5.6.13-100.fc30
log4net-2.0.8-10.fc30
netdata-1.22.1-1.fc30
openconnect-8.10-1.fc30
osinfo-db-20200515-1.fc30
python-pikepdf-1.12.0-1.fc30
rubygem-rouge-3.19.0-1.fc30
thunderbird-68.8.0-2.fc30
Details about builds:
================================================================================
Cadence-1.0.0-0.11.20200504git5787908.fc30 (FEDORA-2020-51783fcbfa)
A set of tools useful for audio production
--------------------------------------------------------------------------------
Update Information:
Update to 1.0.0-0.11.20200504git5787908
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 15 2020 Martin Gansser <martinkg(a)fedoraproject.org> -
1.0.0-0.11.20200504git5787908
- Update to 1.0.0-0.11.20200504git5787908
--------------------------------------------------------------------------------
================================================================================
Carla-2.2-0.1.20200514gitf100892.fc30 (FEDORA-2020-f705bff8ac)
Audio plugin host
--------------------------------------------------------------------------------
Update Information:
- Update to 2.2-0.1.20200514gitf100892 - Add ExcludeArch ppc64le due PowerPC is
no longer supported by JUCE
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 15 2020 Martin Gansser <martinkg(a)fedoraproject.org> -
1:2.2-0.1.20200514gitf100892
- Update to 2.2-0.1.20200514gitf100892
- Add ExcludeArch ppc64le due PowerPC is no longer supported by JUCE
* Tue Apr 14 2020 Martin Gansser <martinkg(a)fedoraproject.org> - 1:2.1-2
- Add epoch to allow update
* Tue Apr 14 2020 Martin Gansser <martinkg(a)fedoraproject.org> - 1:2.1-1
- Update to 2.1-1
--------------------------------------------------------------------------------
================================================================================
ibus-typing-booster-2.8.3-2.fc30 (FEDORA-2020-b34550d860)
A completion input method
--------------------------------------------------------------------------------
Update Information:
Do not run the Gtk GUI test from the spec file.
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 15 2020 Mike FABIAN <mfabian(a)redhat.com> - 2.8.3-2
- Do not run the Gtk GUI test from the spec file.
* Sun May 3 2020 Mike FABIAN <mfabian(a)redhat.com> - 2.8.3-1
- Update to 2.8.3
- Save default dictionaries and input methods when making the lists
empty in the setup tool
- Fix reading ���include��� instructions in Compose files and observe XCOMPOSEFILE
(Resolves:
https://github.com/mike-fabian/ibus-typing-booster/issues/93)
- Fix right-to-left detection for LC_MESSAGES=C
(Resolves:
https://github.com/mike-fabian/ibus-typing-booster/issues/97)
- GUI tests added thanks to Takao Fujiwara
- Update UnicodeData.txt to Unicode 13.0.0
- Translation updates for it, hu, tr, pt_BR
--------------------------------------------------------------------------------
================================================================================
kernel-5.6.13-100.fc30 (FEDORA-2020-5a69decc0c)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 5.6.13 stable kernel update contains a number of important fixes across the
tree ---- The 5.6.12 stable update contains a number of important fixes across
the tree.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 14 2020 Justin M. Forbes <jforbes(a)fedoraproject.org> - 5.6.13-100
- Linux v5.6.13
- Fix boot hang caused by buggy TPM support (rhbz 1779611)
- Fix CVE-2020-12655 (rhbz 1832543 1832545)
* Tue May 12 2020 Justin M. Forbes <jforbes(a)fedoraproject.org>
- Fix CVE-2020-10711 (rhbz 1825116 1834778)
* Mon May 11 2020 Justin M. Forbes <jforbes(a)fedoraproject.org> - 5.6.12-100
- Linux v5.6.12
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1825116 - CVE-2020-10711 Kernel: NetLabel: null pointer dereference while
receiving CIPSO packet with null category may cause kernel panic
https://bugzilla.redhat.com/show_bug.cgi?id=1825116
[ 2 ] Bug #1832543 - CVE-2020-12655 kernel: sync of excessive duration via an XFS v5
image with crafted metadata
https://bugzilla.redhat.com/show_bug.cgi?id=1832543
[ 3 ] Bug #1834845 - CVE-2020-12770 kernel: sg_write function lacks an sg_remove_request
call in a certain failure case
https://bugzilla.redhat.com/show_bug.cgi?id=1834845
--------------------------------------------------------------------------------
================================================================================
log4net-2.0.8-10.fc30 (FEDORA-2020-cfc319e067)
A .NET framework for logging
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2018-1285
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 15 2020 Timotheus Pokorra <timotheus.pokorra(a)solidcharity.com> - 2.0.8-10
- apply security fix for xml configurator: [CVE-2018-1285] XXE vulnerability in Apache
log4net
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.8-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Wed Aug 21 2019 Timotheus Pokorra <timotheus.pokorra(a)solidcharity.com> - 2.0.8-8
- Rebuilt with new mono package so that the Provides is fixed again
- don't require nant for building
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.8-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1835982 - CVE-2018-1285 log4net: XXE in applications that accept arbitrary
configuration files from users
https://bugzilla.redhat.com/show_bug.cgi?id=1835982
--------------------------------------------------------------------------------
================================================================================
netdata-1.22.1-1.fc30 (FEDORA-2020-e3eae31728)
Real-time performance monitoring
--------------------------------------------------------------------------------
Update Information:
Update from upstream
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 13 2020 Didier Fabert <didier.fabert(a)gmail.com> 1.22.1-1
- Update from upstream
* Sat Apr 18 2020 Juan Orti Alcaine <jortialc(a)redhat.com> 1.21.1-2
- Sync /usr/libexec/netdata/plugins.d/ binaries permissions with upstream
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1834571 - netdata-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1834571
--------------------------------------------------------------------------------
================================================================================
openconnect-8.10-1.fc30 (FEDORA-2020-bc22f06aa3)
Open client for Cisco AnyConnect VPN, Juniper Network Connect/Pulse, PAN GlobalProtect
--------------------------------------------------------------------------------
Update Information:
Update to 8.10 release (CVE-2020-12823)
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 14 2020 David Woodhouse <dwmw2(a)infradead.orG> - 8.10-1
- Update to 8.10 release (CVE-2020-12823)
* Sat May 2 2020 David Woodhouse <dwmw2(a)infradead.org> - 8.09-2
- Fix path to openconnect in bash completion script
* Wed Apr 29 2020 David Woodhouse <dwmw2(a)infradead.org> - 8.09-1
- Update to 8.09 release
* Mon Apr 6 2020 David Woodhouse <dwmw2(a)infradead.org> - 8.08-1
- Update to 8.08 release (CSD stderr handling, cert checking)
* Sat Apr 4 2020 David Woodhouse <dwmw2(a)infradead.org> - 8.07-1
- Update to 8.07 release (runtime check for GnuTLS)
* Tue Mar 31 2020 David Woodhouse <dwmw2(a)infradead.org> - 8.06-1
- Update to 8.06 release (Blacklist bad GnuTLS versions for insecure DTLS)
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org>
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
osinfo-db-20200515-1.fc30 (FEDORA-2020-2320e85ab1)
osinfo database files
--------------------------------------------------------------------------------
Update Information:
Update to new release (v20200515)
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 15 2020 Fabiano Fid��ncio <fidencio(a)redhat.com> - 20200515-1
- Update to new release (v20200515)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1836014 - fedora 32 images missing from libosinfo database
https://bugzilla.redhat.com/show_bug.cgi?id=1836014
--------------------------------------------------------------------------------
================================================================================
python-pikepdf-1.12.0-1.fc30 (FEDORA-2020-8c98d6f27d)
Read and write PDFs with Python, powered by qpdf
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 15 2020 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 1.12.0-1
- Update to latest version
* Mon May 4 2020 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 1.11.2-1
- Update to latest version
* Fri Apr 17 2020 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 1.11.1-1
- Update to latest version
* Tue Apr 14 2020 Zdenek Dohnal <zdohnal(a)redhat.com> - 1.11.0-2
- rebuilt for qpdf-10.0.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1835684 - python-pikepdf-1.12.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1835684
--------------------------------------------------------------------------------
================================================================================
rubygem-rouge-3.19.0-1.fc30 (FEDORA-2020-6b78c022b9)
Pure-ruby colorizer based on pygments
--------------------------------------------------------------------------------
Update Information:
Update to version 3.19.0. Release notes:
https://github.com/rouge-
ruby/rouge/releases/tag/v3.19.0
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 15 2020 Fabio Valentini <decathorpe(a)gmail.com> - 3.19.0-1
- Update to version 3.19.0.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1834954 - rubygem-rouge-3.19.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1834954
--------------------------------------------------------------------------------
================================================================================
thunderbird-68.8.0-2.fc30 (FEDORA-2020-7fd99ffae0)
Mozilla Thunderbird mail/newsgroup client
--------------------------------------------------------------------------------
Update Information:
- Fixed opening mailto: link from Firefox (rhbz#1817330) ---- Update to latest
upstream version
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 15 2020 Martin Stransky <stransky(a)redhat.com> - 68.8.0-2
- Use D-Bus remote on Wayland (rhbz#1817330).
* Thu May 14 2020 Jan Horak <jhorak(a)redhat.com> - 68.8.0-1
- Update to 68.8.0 build2
* Wed Apr 15 2020 Jan Horak <jhorak(a)redhat.com> - 68.7.0-2
- Removed gconf-2.0 build requirement, added perl-interpreter instead to fulfill
perl dependency
* Thu Apr 9 2020 Jan Horak <jhorak(a)redhat.com> - 68.7.0-1
- Update to 68.7.0 build1
* Fri Mar 13 2020 Jan Horak <jhorak(a)redhat.com> - 68.6.0-1
- Update to 68.6.0 build2
* Tue Mar 3 2020 David Auer <dreua(a)posteo.de> - 68.5.0-2
- Fix spellcheck (rhbz#1753011)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1817330 - Firefox cannot open mailto links
https://bugzilla.redhat.com/show_bug.cgi?id=1817330
[ 2 ] Bug #1822184 - thunderbird-68.7.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1822184
--------------------------------------------------------------------------------