The following Fedora 30 Security updates need testing: Age URL 6 https://bodhi.fedoraproject.org/updates/FEDORA-2020-68ab318468 firefox-75.0-1.fc30 nss-3.51.0-1.fc30
The following Fedora 30 Critical Path updates have yet to be approved: Age URL 279 https://bodhi.fedoraproject.org/updates/FEDORA-2019-c05e4425d1 dash-0.5.10.2-3.fc30 32 https://bodhi.fedoraproject.org/updates/FEDORA-2020-fffba1c2dd python3-3.7.7-1.fc30 python3-docs-3.7.7-1.fc30 13 https://bodhi.fedoraproject.org/updates/FEDORA-2020-12af8048d1 hwdata-0.334-1.fc30 13 https://bodhi.fedoraproject.org/updates/FEDORA-2020-ac975e9953 pcre2-10.34-9.fc30 11 https://bodhi.fedoraproject.org/updates/FEDORA-2020-af5e567e17 gnome-software-3.32.4-8.fc30 11 https://bodhi.fedoraproject.org/updates/FEDORA-2020-703f700e48 perl-5.28.2-444.fc30 9 https://bodhi.fedoraproject.org/updates/FEDORA-2020-8995ab0593 btrfs-progs-5.6-1.fc30 7 https://bodhi.fedoraproject.org/updates/FEDORA-2020-9a5fd130bb vim-8.2.525-1.fc30 6 https://bodhi.fedoraproject.org/updates/FEDORA-2020-b5926985df annobin-8.71-4.fc30 gcc-9.3.1-2.fc30 6 https://bodhi.fedoraproject.org/updates/FEDORA-2020-1f5fc160d9 python-productmd-1.26-1.fc30 6 https://bodhi.fedoraproject.org/updates/FEDORA-2020-68ab318468 firefox-75.0-1.fc30 nss-3.51.0-1.fc30 6 https://bodhi.fedoraproject.org/updates/FEDORA-2020-a8aa6ac039 graphite2-1.3.14-1.fc30 5 https://bodhi.fedoraproject.org/updates/FEDORA-2020-44b769adaf net-snmp-5.8-19.fc30 2 https://bodhi.fedoraproject.org/updates/FEDORA-2020-767953662f json-c-0.13.1-11.fc30
The following builds have been pushed to Fedora 30 updates-testing
Carla-2.1-2.fc30 NetworkManager-fortisslvpn-1.2.10-4.fc30 bindfs-1.14.5-1.fc30 bubblemail-0.7-1.fc30 cataclysm-dda-0.E-1.fc30 cinnamon-4.4.8-7.fc30 cups-filters-1.27.4-1.fc30 dolphin-emu-5.0.10474-6.fc30 erofs-utils-1.1-1.fc30 git-2.21.2-1.fc30 gnome-shell-3.32.2-3.fc30 gnome-shell-extension-netspeed-3.30-0.9.20200323git9d74599.fc30 gnucash-3.10-1.fc30 gnucash-docs-3.10-1.fc30 kdiagram-2.6.3-1.fc30 kernel-5.5.17-100.fc30 kernel-headers-5.5.17-100.fc30 kernel-tools-5.5.17-100.fc30 librvngabw-0.0.3-1.fc30 libtirpc-1.2.6-0.fc30 libxml2-2.9.10-3.fc30 mozilla-noscript-11.0.23-1.fc30 mozilla-ublock-origin-1.26.0-1.fc30 musl-1.2.0-3.fc30 netdata-1.21.1-1.fc30 nfs-utils-2.4.3-1.rc1.fc30 openhantek-3.0.4b-1.fc30 openttd-1.10.1-1.fc30 packit-0.10.0-1.fc30 php-7.3.17-1.fc30 php-cs-fixer-2.16.2-1.fc30 php-pear-1.10.11-1.fc30 python-click-help-colors-0.8-1.fc30 python-freeipa-1.0.2-1.fc30 python-mercantile-1.1.3-1.fc30 python-octave-kernel-0.31.1-1.fc30 python-regex-2020.4.4-1.fc30 thunderbird-68.7.0-1.fc30 waf-2.0.20-1.fc30 wireshark-3.2.3-1.fc30 youtube-dl-2020.03.24-1.fc30 yubioath-desktop-5.0.3-1.git5e94bd8.fc30
Details about builds:
================================================================================ Carla-2.1-2.fc30 (FEDORA-2020-100037b960) Audio plugin host -------------------------------------------------------------------------------- Update Information:
Update to 2.1-2 -------------------------------------------------------------------------------- ChangeLog:
* Tue Apr 14 2020 Martin Gansser martinkg@fedoraproject.org - 1:2.1-2 - Add epoch to allow update * Tue Apr 14 2020 Martin Gansser martinkg@fedoraproject.org - 1:2.1-1 - Update to 2.1-1 * Wed Apr 8 2020 Martin Gansser martinkg@fedoraproject.org - 2.1-6.rc2 - Update to 2.1-6.rc2 * Mon Feb 17 2020 Orcan Ogetbil <oget[DOT]fedora[AT]gmail[DOT]com> - 2.1-5.beta1.git74eef49 - Rebuild against fluidsynth2 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1823634 - Carla-2.1-b1-test1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1823634 --------------------------------------------------------------------------------
================================================================================ NetworkManager-fortisslvpn-1.2.10-4.fc30 (FEDORA-2020-c0388bdbd5) NetworkManager VPN plugin for Fortinet compatible SSLVPN -------------------------------------------------------------------------------- Update Information:
Update DNS peer handling with new patch. -------------------------------------------------------------------------------- ChangeLog:
* Wed Apr 15 2020 Simone Caronni negativo17@gmail.com - 1.2.10-4 - Update DNS handling patch. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1820906 - NetworkManager-fortisslvpn overwrites /etc/resolv.conf https://bugzilla.redhat.com/show_bug.cgi?id=1820906 --------------------------------------------------------------------------------
================================================================================ bindfs-1.14.5-1.fc30 (FEDORA-2020-f82e18c238) Fuse filesystem to mirror a directory -------------------------------------------------------------------------------- Update Information:
- Update to 1.14.5 fixes rhbz#1815902 -------------------------------------------------------------------------------- ChangeLog:
* Mon Apr 13 2020 Filipe Rosset rosset.filipe@gmail.com - 1.14.5-1 - Update to 1.14.5 fixes rhbz#1815902 * Tue Jan 28 2020 Fedora Release Engineering releng@fedoraproject.org - 1.14.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1815902 - bindfs-1.14.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=1815902 --------------------------------------------------------------------------------
================================================================================ bubblemail-0.7-1.fc30 (FEDORA-2020-ad5afae89a) Extensible mail notification service -------------------------------------------------------------------------------- Update Information:
New release with a lot of bugfixes, a few new features and updated translations. For more details, see the upstream [changelog](https://framagit.org/razer/bubblemail/-/blob/v0.7/CHANGELOG.md). -------------------------------------------------------------------------------- ChangeLog:
* Tue Apr 14 2020 Alexander Ploumistos alexpl@fedoraproject.org - 0.7-1 - Update to 0.7 * Sat Feb 22 2020 Robert-Andr�� Mauchin zebob.m@gmail.com - 0.5-1 - Update to 0.5 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1819130 - bubblemail-0.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=1819130 --------------------------------------------------------------------------------
================================================================================ cataclysm-dda-0.E-1.fc30 (FEDORA-2020-f8cf9fd67b) Turn-based survival game set in a post-apocalyptic world -------------------------------------------------------------------------------- Update Information:
Update to 0.E -------------------------------------------------------------------------------- ChangeLog:
* Tue Apr 14 2020 Artem Polishchuk ego.cordatus@gmail.com - 0.E-1 - Update to 0.E * Sun Apr 5 2020 Artem Polishchuk ego.cordatus@gmail.com - 0.D.10491-1.20200405git0f1e6aa - Update to 10491 * Tue Mar 24 2020 Artem Polishchuk ego.cordatus@gmail.com - 0.D.10444-1.20200324git5cee241 - Update to 10444 --------------------------------------------------------------------------------
================================================================================ cinnamon-4.4.8-7.fc30 (FEDORA-2020-dab137d349) Window management and application launching for GNOME -------------------------------------------------------------------------------- Update Information:
- Disable bell-mode -------------------------------------------------------------------------------- ChangeLog:
* Tue Apr 14 2020 Leigh Scott leigh123linux@gmail.com - 4.4.8-7 - Fix last commit * Tue Apr 14 2020 Leigh Scott leigh123linux@gmail.com - 4.4.8-6 - Disable bell-mode * Tue Apr 14 2020 Leigh Scott leigh123linux@gmail.com - 4.4.8-5 - Remove BuildRequires pkgconfig(gconf-2.0) * Wed Feb 26 2020 Leigh Scott leigh123linux@googlemail.com - 4.4.8-4 - Bump for f33 rawhide --------------------------------------------------------------------------------
================================================================================ cups-filters-1.27.4-1.fc30 (FEDORA-2020-c956aa3279) OpenPrinting CUPS filters and backends -------------------------------------------------------------------------------- Update Information:
1.27.4 ---- memory issues in cups-browsed -------------------------------------------------------------------------------- ChangeLog:
* Tue Apr 14 2020 Zdenek Dohnal zdohnal@redhat.com - 1.27.4-1 - 1.27.4 * Wed Apr 8 2020 Zdenek Dohnal zdohnal@redhat.com - 1.27.3-3 - memory issues in cups-browsed * Mon Apr 6 2020 Zdenek Dohnal zdohnal@redhat.com - 1.27.3-2 - make nss-mdns and avahi recommended --------------------------------------------------------------------------------
================================================================================ dolphin-emu-5.0.10474-6.fc30 (FEDORA-2020-ceedbb1377) GameCube / Wii / Triforce Emulator -------------------------------------------------------------------------------- Update Information:
Fix mistakes in Wayland wrapper change ---- Fixes Wayland issue when running from terminal -------------------------------------------------------------------------------- ChangeLog:
* Mon Apr 13 2020 Jeremy Newton <alexjnewt at hotmail dot com> - 5.0.10474-6 - Forgot shebang in wrapper - Symlink manpage for dolphin-emu-x11 * Mon Apr 13 2020 Jeremy Newton <alexjnewt at hotmail dot com> - 5.0.10474-5 - Fix permissions of wrapper script * Mon Apr 13 2020 Jeremy Newton <alexjnewt at hotmail dot com> - 5.0.10474-4 - Add wrapper script for xwayland, fixes RH#1823234 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1823234 - dolphin fails to initialize video backend under wayland https://bugzilla.redhat.com/show_bug.cgi?id=1823234 --------------------------------------------------------------------------------
================================================================================ erofs-utils-1.1-1.fc30 (FEDORA-2020-f71c8b1160) Utilities for working with EROFS -------------------------------------------------------------------------------- Update Information:
Update to the upstream 1.1 release: https://git.kernel.org/pub/scm/linux/kernel/git/xiang/erofs- utils.git/plain/ChangeLog?h=v1.1 -------------------------------------------------------------------------------- ChangeLog:
* Mon Apr 13 2020 David Michael fedora.dm0@gmail.com - 1.1-1 - Update to the 1.1 release. --------------------------------------------------------------------------------
================================================================================ git-2.21.2-1.fc30 (FEDORA-2020-fc00fe1705) Fast Version Control System -------------------------------------------------------------------------------- Update Information:
Security fix for CVE-2020-5260 From the upstream [release notes](https://www.kernel.org/pub/software/scm/git/docs/RelNotes/2.17.4.txt): > With a crafted URL that contains a newline in it, the credential > helper machinery can be fooled to give credential information for > a wrong host. The attack has been made impossible by forbidding > a newline character in any value passed via the credential > protocol. -------------------------------------------------------------------------------- ChangeLog:
* Tue Apr 14 2020 Todd Zullinger tmz@pobox.com - 2.21.2-1 - update to 2.21.2 (CVE-2020-5260) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1822020 - CVE-2020-5260 git: Crafted URL containing new lines can cause credential leak https://bugzilla.redhat.com/show_bug.cgi?id=1822020 --------------------------------------------------------------------------------
================================================================================ gnome-shell-3.32.2-3.fc30 (FEDORA-2020-8824216b0e) Window management and application launching for GNOME -------------------------------------------------------------------------------- Update Information:
This update backports a commit from the upstream 3.32 branch to fix a bug that can cause the Shell to crash under certain circumstances. -------------------------------------------------------------------------------- ChangeLog:
* Mon Apr 13 2020 Adam Williamson awilliam@redhat.com - 3.32.2-3 - Backport MR #576 to fix a crash on screen lock Resolves: #1823445 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1823445 - gnome-shell killed after screen lock https://bugzilla.redhat.com/show_bug.cgi?id=1823445 --------------------------------------------------------------------------------
================================================================================ gnome-shell-extension-netspeed-3.30-0.9.20200323git9d74599.fc30 (FEDORA-2020-7662d36fe2) A gnome-shell extension to show speed of the internet -------------------------------------------------------------------------------- Update Information:
- Add missing lib.js file (RHBZ#1823337) -------------------------------------------------------------------------------- ChangeLog:
* Mon Apr 13 2020 Martin Gansser martinkg@fedoraproject.org - 3.30-0.9.20200323git9d74599 - Add missing lib.js file (RHBZ#1823337) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1823337 - gnome-shell-extension-netspeed package doesn't include all *.js files from source package https://bugzilla.redhat.com/show_bug.cgi?id=1823337 --------------------------------------------------------------------------------
================================================================================ gnucash-3.10-1.fc30 (FEDORA-2020-c921b12037) Finance management application -------------------------------------------------------------------------------- Update Information:
This updates GnuCash to the latest upstream release 3.10. For more information on the fixes in this update, see the upstream release notes at https://gnucash.org/news.phtml#n-200412-3.10.news -------------------------------------------------------------------------------- ChangeLog:
* Mon Apr 13 2020 Bill Nottingham notting@splat.cc - 3.10-1 - update to 3.10 * Tue Jan 28 2020 Fedora Release Engineering releng@fedoraproject.org - 3.8-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Tue Jan 21 2020 Rex Dieter rdieter@fedoraproject.org - 3.8-2 - rebuild (aqbanking) * Tue Jan 21 2020 Kalev Lember klember@redhat.com - 3.8-1 - Update to 3.8 * Fri Jan 17 2020 Jeff Law law@redhat.com - 3.7-3 - Rename one instance of struct _iterate to struct __iterate to avoid ODR problems with LTO * Fri Nov 1 2019 Pete Walter pwalter@fedoraproject.org - 3.7-2 - Rebuild for ICU 65 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1818648 - gnucash-3.10 is available https://bugzilla.redhat.com/show_bug.cgi?id=1818648 --------------------------------------------------------------------------------
================================================================================ gnucash-docs-3.10-1.fc30 (FEDORA-2020-c921b12037) Help files and documentation for the GnuCash personal finance manager -------------------------------------------------------------------------------- Update Information:
This updates GnuCash to the latest upstream release 3.10. For more information on the fixes in this update, see the upstream release notes at https://gnucash.org/news.phtml#n-200412-3.10.news -------------------------------------------------------------------------------- ChangeLog:
* Mon Apr 13 2020 Bill Nottingham notting@splat.cc - 3.10-1 - update to 3.10 * Tue Jan 28 2020 Fedora Release Engineering releng@fedoraproject.org - 3.8-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Tue Jan 21 2020 Kalev Lember klember@redhat.com - 3.8-1 - Update to 3.8 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1818648 - gnucash-3.10 is available https://bugzilla.redhat.com/show_bug.cgi?id=1818648 --------------------------------------------------------------------------------
================================================================================ kdiagram-2.6.3-1.fc30 (FEDORA-2020-a919495d2b) Powerful libraries (KChart, KGantt) for creating business diagrams -------------------------------------------------------------------------------- Update Information:
New upstream bugfix release -------------------------------------------------------------------------------- ChangeLog:
* Mon Apr 13 2020 Rex Dieter rdieter@fedoraproject.org - 2.6.3-1 - 2.6.3 --------------------------------------------------------------------------------
================================================================================ kernel-5.5.17-100.fc30 (FEDORA-2020-12a5371d67) The Linux kernel -------------------------------------------------------------------------------- Update Information:
The 5.5.17 stable kernel update contains a number of important fixes across the tree. -------------------------------------------------------------------------------- ChangeLog:
* Mon Apr 13 2020 Justin M. Forbes jforbes@fedoraproject.org - 5.5.17-100 - Linux v5.5.17 --------------------------------------------------------------------------------
================================================================================ kernel-headers-5.5.17-100.fc30 (FEDORA-2020-12a5371d67) Header files for the Linux kernel for use by glibc -------------------------------------------------------------------------------- Update Information:
The 5.5.17 stable kernel update contains a number of important fixes across the tree. -------------------------------------------------------------------------------- ChangeLog:
* Mon Apr 13 2020 Justin M. Forbes jforbes@fedoraproject.org - 5.5.17-100 - Linux v5.5.17 --------------------------------------------------------------------------------
================================================================================ kernel-tools-5.5.17-100.fc30 (FEDORA-2020-12a5371d67) Assortment of tools for the Linux kernel -------------------------------------------------------------------------------- Update Information:
The 5.5.17 stable kernel update contains a number of important fixes across the tree. -------------------------------------------------------------------------------- ChangeLog:
* Mon Apr 13 2020 Justin M. Forbes jforbes@fedoraproject.org - 5.5.17-100 - Linux v5.5.17 --------------------------------------------------------------------------------
================================================================================ librvngabw-0.0.3-1.fc30 (FEDORA-2020-4d15a4a048) An AbiWord document generator library -------------------------------------------------------------------------------- Update Information:
new upstream release -------------------------------------------------------------------------------- ChangeLog:
* Sun Apr 5 2020 David Tardon dtardon@redhat.com - 0.0.3-1 - new upstream release * Wed Jan 29 2020 Fedora Release Engineering releng@fedoraproject.org - 0.0.2-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Thu Jul 25 2019 Fedora Release Engineering releng@fedoraproject.org - 0.0.2-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ libtirpc-1.2.6-0.fc30 (FEDORA-2020-b3aa343948) Transport Independent RPC Library -------------------------------------------------------------------------------- Update Information:
Updated to the latest upstream release: libtirpc-1-2-6 -------------------------------------------------------------------------------- ChangeLog:
* Tue Apr 14 2020 Steve Dickson steved@redhat.com 1.2.6-0 - Updated to the latest upstream release: libtirpc-1-2-6 (bz 1822751) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1822751 - libtirpc-1.2.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1822751 --------------------------------------------------------------------------------
================================================================================ libxml2-2.9.10-3.fc30 (FEDORA-2020-0c71c00af4) Library providing XML and HTML support -------------------------------------------------------------------------------- Update Information:
Update to 2.9.10 and fix CVE-2019-19956, CVE-2019-20388 and CVE-2020-7595 -------------------------------------------------------------------------------- ChangeLog:
* Mon Feb 10 2020 David King amigadave@amigadave.com - 2.9.10-3 - Fix CVE-2019-20388 (#1799736) - Fix CVE-2020-7595 (#1799786) * Fri Jan 3 2020 Jan Pokorny jpokorny@fedoraproject.org - 2.9.10-2 - Fix relaxed approach to nested documents on object disposal (#1780573) * Fri Nov 8 2019 David King amigadave@amigadave.com - 2.9.10-1 - Update to 2.9.10 (#1767151) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1788857 - CVE-2019-19956 libxml2: There's a memory leak in xmlParseBalancedChunkMemoryRecover in parser.c that could result in a crash [fedora-30] https://bugzilla.redhat.com/show_bug.cgi?id=1788857 [ 2 ] Bug #1799736 - CVE-2019-20388 libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1799736 [ 3 ] Bug #1799787 - CVE-2020-7595 libxml2: infinite loop in a certain end-of-file situation [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1799787 --------------------------------------------------------------------------------
================================================================================ mozilla-noscript-11.0.23-1.fc30 (FEDORA-2020-bdf94a7428) JavaScript white list extension for Mozilla Firefox -------------------------------------------------------------------------------- Update Information:
### Changes since 11.0.15: * Updated TLDs * Further refresh syntax parsing leniency (thanks insertscript) * Uniform refresh url matching across HTTP and DOM checks (thanks insertscript) * More aggressive blocking for data: refresh attempts (thanks insertscript) * Prevent ANY redirection to data: URIs in documents * Apply "font-family: Inter" to the mobile stylesheet only * Support synonyms for "release" * Force CSP inheritance for redirections to data: URIs on Gecko pre-69 * Added CSS reference to Inter font to improve UI look on Fenix -------------------------------------------------------------------------------- ChangeLog:
* Sun Apr 12 2020 Dominik Mierzejewski rpm@greysector.net - 11.0.23-1 - update to 11.0.23 (#1813501) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1813501 - mozilla-noscript-11.0.23 is available https://bugzilla.redhat.com/show_bug.cgi?id=1813501 --------------------------------------------------------------------------------
================================================================================ mozilla-ublock-origin-1.26.0-1.fc30 (FEDORA-2020-95e943d6a2) An efficient blocker for Firefox -------------------------------------------------------------------------------- Update Information:
## Closed as fixed: * Remove Adblock Warning Removal * Add a way to blanket- except blocked cname-based requests * uBO icon in Manage Your Extensions disappears in the offline mode * Add remove-class scriptlet * Picker-window doesn't appear if images on a site is chosen * uBlock Origin v1.25.0 new feature cause DNS leaks * Ability to remove DOM element instead of hiding? ## Notable commits with no entry in issue tracker: * Use prime number to generate cache- bypass token * Allow empty needle in BidiTrieContainer.lastIndexOf() * Reorganize filter instances deduplication code * Add filter instance deduplicater in static net filtering engine * Add support for cname type and denyallow option * Support line continuation in filter lists * Improve window.open-defuser scriptlet * Improve validation of CSS selector-based cosmetic filters * Add procedural cosmetic operators remove() and upward() * Improve set-constant.js scriptlet -------------------------------------------------------------------------------- ChangeLog:
* Sun Apr 12 2020 Dominik Mierzejewski rpm@greysector.net - 1.26.0-1 - update to 1.26.0 (#1820622) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1820622 - mozilla-ublock-origin-1.26.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1820622 --------------------------------------------------------------------------------
================================================================================ musl-1.2.0-3.fc30 (FEDORA-2020-67d9f33dfb) Fully featured lightweight standard C library for Linux -------------------------------------------------------------------------------- Update Information:
Add missing symlink for dynamically linked executables to work -------------------------------------------------------------------------------- ChangeLog:
* Tue Apr 14 2020 Neal Gompa ngompa13@gmail.com - 1.2.0-3 - Add missing symlink for dynamically linked executables to work --------------------------------------------------------------------------------
================================================================================ netdata-1.21.1-1.fc30 (FEDORA-2020-3d66a0419f) Real-time performance monitoring -------------------------------------------------------------------------------- Update Information:
Update from upstream ---- Update from upstream -------------------------------------------------------------------------------- ChangeLog:
* Tue Apr 14 2020 Didier Fabert didier.fabert@gmail.com 1.21.1-1 - Update from upstream * Tue Apr 7 2020 Didier Fabert didier.fabert@gmail.com 1.21.0-1 - Update from upstream -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1821125 - netdata-1.21.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1821125 [ 2 ] Bug #1823449 - netdata-1.21.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1823449 --------------------------------------------------------------------------------
================================================================================ nfs-utils-2.4.3-1.rc1.fc30 (FEDORA-2020-a7509f2334) NFS utilities and supporting clients and daemons for the kernel NFS server -------------------------------------------------------------------------------- Update Information:
Updated to the latest RC release: nfs-utils-2-4-4-rc2 -------------------------------------------------------------------------------- ChangeLog:
* Tue Mar 3 2020 Steve Dickson steved@redhat.com 2.4.3-1.rc1 - Updated to the latest RC release: nfs-utils-2-4-4-rc1.patch (bz 1807999) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1807999 - nfs-utils-2-4-4-rc2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1807999 --------------------------------------------------------------------------------
================================================================================ openhantek-3.0.4b-1.fc30 (FEDORA-2020-c05bba55f2) Hantek and compatible USB digital signal oscilloscope -------------------------------------------------------------------------------- Update Information:
Update to 3.0.4b. -------------------------------------------------------------------------------- ChangeLog:
* Tue Apr 14 2020 Vasiliy N. Glazov vascom2@gmail.com - 3.0.4b-1 - Update to 3.0.4b --------------------------------------------------------------------------------
================================================================================ openttd-1.10.1-1.fc30 (FEDORA-2020-b6eb6cc341) Transport system simulation game -------------------------------------------------------------------------------- Update Information:
1.10.1 (2020-04-13) ------------------------------------------------------------------------ * Fix #8081: Crash when placing a ship depot next to a dock (#8082) * Fix: [GS] A Goal's QuestionID was getting truncated (#8072) * Fix #8064: Refit capacity could be displayed incorrectly in extreme edgecases (#8065) * Fix #8060: Restore admin network API compatibility (#8061) * Fix #8055: Crash when roadtype availability changes with the road construction toolbar open (#8058) -------------------------------------------------------------------------------- ChangeLog:
* Tue Apr 14 2020 Felix Kaechele heffer@fedoraproject.org - 1.10.1-1 - update to 1.10.1 --------------------------------------------------------------------------------
================================================================================ packit-0.10.0-1.fc30 (FEDORA-2020-68b542ab45) A tool for integrating upstream projects with Fedora operating system -------------------------------------------------------------------------------- Update Information:
New upstream release -------------------------------------------------------------------------------- ChangeLog:
* Tue Apr 14 2020 Jiri Popelka jpopelka@redhat.com - 0.10.0-1 - new upstream release: 0.10.0 --------------------------------------------------------------------------------
================================================================================ php-7.3.17-1.fc30 (FEDORA-2020-96cb012029) PHP scripting language for creating dynamic web sites -------------------------------------------------------------------------------- Update Information:
**PHP version 7.3.17** (16 Apr 2020) **Core:** * Fixed bug php#79364 (When copy empty array, next key is unspecified). (cmb) * Fixed bug php#78210 (Invalid pointer address). (cmb, Nikita) **CURL:** * Fixed bug php#79199 (curl_copy_handle() memory leak). (cmb) **Date:** * Fixed bug php#79396 (DateTime hour incorrect during DST jump forward). (Nate Brunette) **Iconv:** * Fixed bug php#79200 (Some iconv functions cut Windows-1258). (cmb) **OPcache:** * Fixed bug php#79412 (Opcache chokes and uses 100% CPU on specific script). (Dmitry) **Session:** * Fixed bug php#79413 (session_create_id() fails for active sessions). (cmb) **Shmop:** * Fixed bug php#79427 (Integer Overflow in shmop_open()). (cmb) **SimpleXML:** * Fixed bug php#61597 (SXE properties may lack attributes and content). (cmb) **Spl:** * Fixed bug php#75673 (SplStack::unserialize() behavior). (cmb) * Fixed bug php#79393 (Null coalescing operator failing with SplFixedArray). (cmb) **Standard:** * Fixed bug php#79330 (shell_exec() silently truncates after a null byte). (stas) * Fixed bug php#79465 (OOB Read in urldecode()). (stas) * Fixed bug php#79410 (system() swallows last chunk if it is exactly 4095 bytes without newline). (Christian Schneider) **Zip:** * Fixed Bug php#79296 (ZipArchive::open fails on empty file). (Remi) * Fixed bug php#79424 (php_zip_glob uses gl_pathc after call to globfree). (Max Rees) -------------------------------------------------------------------------------- ChangeLog:
* Tue Apr 14 2020 Remi Collet remi@remirepo.net - 7.3.17-1 - Update to 7.3.17 - http://www.php.net/releases/7_3_17.php --------------------------------------------------------------------------------
================================================================================ php-cs-fixer-2.16.2-1.fc30 (FEDORA-2020-7e3a023c3f) A tool to automatically fix PHP code style -------------------------------------------------------------------------------- Update Information:
Changelog for **version 2.16.2** * bug #3820 Braces - (re)indenting comment issues (SpacePossum) * bug #3911 PhpdocVarWithoutNameFixer - fix for properties only (dmvdbrugge) * bug #4601 ClassKeywordRemoveFixer - Fix for namespace (yassine-ah, kubawerlos) * bug #4630 FullyQualifiedStrictTypesFixer - Ignore partial class names which look like FQCNs (localheinz, SpacePossum) * bug #4661 ExplicitStringVariableFixer - variables pair if one is already explicit (kubawerlos) * bug #4675 NonPrintableCharacterFixer - fix for backslash and quotes when changing to escape sequences (kubawerlos) * bug #4678 TokensAnalyzer::isConstantInvocation - fix for importing multiple classes with single "use" (kubawerlos) * bug #4682 Fix handling array type declaration in properties (julienfalque) * bug #4685 Improve Symfony 5 compatibility (keradus) * bug #4688 TokensAnalyzer::isConstantInvocation - Fix detection for fully qualified return type (julienfalque) * bug #4689 DeclareStrictTypesFixer - fix for "strict_types" set to "0" (kubawerlos) * bug #4690 PhpdocVarAnnotationCorrectOrderFixer - fix for multiline `@var` without type (kubawerlos) * bug #4710 SingleTraitInsertPerStatement - fix formatting for multiline "use" (kubawerlos) * bug #4711 Ensure that files from "tests" directory in release are autoloaded (kubawerlos) * bug #4749 TokensAnalyze::isUnaryPredecessorOperator fix for CT::T_ARRAY_INDEX_C��� (SpacePossum) * bug #4759 Add more priority cases (SpacePossum) * bug #4761 NoSuperfluousElseifFixer - handle single line (SpacePossum) * bug #4783 NoSuperfluousPhpdocTagsFixer - fix for really big PHPDoc (kubawerlos, mvorisek) * bug #4787 NoUnneededFinalMethodFixer - Mark as risky (SpacePossum) * bug #4795 OrderedClassElementsFixer - Fix (SpacePossum) * bug #4801 GlobalNamespaceImportFixer - fix docblock handling (gharlan) * bug #4804 TokensAnalyzer::isUnarySuccessorOperator fix for array curly braces (SpacePossum) * bug #4807 IncrementStyleFixer - handle after ")" (SpacePossum) * bug #4808 Modernize types casting fixer array curly (SpacePossum) * bug #4809 Fix "braces" and "method_argument_space" priority (julienfalque) * bug #4813 BracesFixer - fix invalid code generation on alternative syntax (SpacePossum) * bug #4822 fix 2 bugs in phpdoc_line_span (lmichelin) * bug #4823 ReturnAssignmentFixer - repeat fix (SpacePossum) * bug #4824 NoUnusedImportsFixer - SingleLineAfterImportsFixer - fix priority (SpacePossum) * bug #4825 GlobalNamespaceImportFixer - do not import global into global (SpacePossum) * bug #4829 YodaStyleFixer - fix precedence for T_MOD_EQUAL and T_COALESCE_EQUAL (SpacePossum) * bug #4830 TernaryToNullCoalescingFixer - handle yield from (SpacePossum) * bug #4835 Remove duplicate "function_to_constant" from RuleSet (SpacePossum) * bug #4840 LineEndingFixer - T_CLOSE_TAG support, StringLineEndingFixer - T_INLI��� (SpacePossum) * bug #4846 FunctionsAnalyzer - better isGlobalFunctionCall detection (SpacePossum) * bug #4852 Priority issues (SpacePossum) * bug #4870 HeaderCommentFixer - do not remove class docs (gharlan) * bug #4871 NoExtraBlankLinesFixer - handle cases on same line (SpacePossum) * bug #4895 Fix conflict between header_comment and declare_strict_types (BackEndTea, julienfalque) * bug #4911 PhpdocSeparationFixer - fix regression with lack of next line (keradus) * feature #4742 FunctionToConstantFixer - get_class($this) support (SpacePossum) * minor #4377 CommentsAnalyzer - fix for declare before header comment (kubawerlos) * minor #4636 DX: do not check for PHPDBG when collecting coverage (kubawerlos) * minor #4644 Docs: add info about "-vv..." (voku) * minor #4691 Run Travis CI on stable PHP 7.4 (kubawerlos) * minor #4693 Increase Travis CI Git clone depth (julienfalque) * minor #4699 LineEndingFixer - handle "\r\r\n" (kubawerlos) * minor #4703 NoSuperfluousPhpdocTagsFixer,PhpdocAddMissingParamAnnotationFixer - p��� (SpacePossum) * minor #4707 Fix typos (TysonAndre) * minor #4712 NoBlankLinesAfterPhpdocFixer ��� Do not strip newline between docblock and use statements (mollierobbert) * minor #4715 Enhancement: Install ergebnis/composer- normalize via Phive (localheinz) * minor #4722 Fix Circle CI build (julienfalque) * minor #4724 DX: Simplify installing PCOV (kubawerlos) * minor #4736 NoUnusedImportsFixer - do not match variable name as import (SpacePossum) * minor #4746 NoSuperfluousPhpdocTagsFixer - Remove for typed properties (PHP 7.4) (ruudk) * minor #4753 Do not apply any text/.git filters to fixtures (mvorisek) * minor #4757 Test $expected is used before $input (SpacePossum) * minor #4758 Autoreview the PHPDoc of *Fixer::getPriority based on the priority map (SpacePossum) * minor #4765 Add test on some return types (SpacePossum) * minor #4766 Remove false test skip (SpacePossum) * minor #4767 Remove useless priority comments (kubawerlos) * minor #4769 DX: add missing priority tests (kubawerlos) * minor #4772 NoUnneededFinalMethodFixer - update description (kubawerlos) * minor #4774 DX: simplify Utils::camelCaseToUnderscore (kubawerlos) * minor #4781 NoUnneededCurlyBracesFixer - handle namespaces (SpacePossum) * minor #4784 Travis CI - Use multiple keyservers (ktomk) * minor #4785 Improve static analysis (enumag) * minor #4788 Configurable fixers code sample (SpacePossum) * minor #4791 Increase PHPStan level to 3 (julienfalque) * minor #4797 clean ups (SpacePossum) * minor #4803 FinalClassFixer - Doctrine\ORM\Mapping as ORM alias should not be required (localheinz) * minor #4839 2.15 - clean ups (SpacePossum) * minor #4842 ReturnAssignmentFixer - Support more cases (julienfalque) * minor #4843 NoSuperfluousPhpdocTagsFixer - fix typo in option description (OndraM) * minor #4844 Same requirements for descriptions (SpacePossum) * minor #4849 Increase PHPStan level to 5 (julienfalque) * minor #4850 Fix phpstan (SpacePossum) * minor #4857 Fixed the unit tests (GrahamCampbell) * minor #4865 Use latest xcode image (GrahamCampbell) * minor #4892 CombineNestedDirnameFixer - Add space after comma (julienfalque) * minor #4894 DX: PhpdocToParamTypeFixer - improve typing (keradus) * minor #4898 FixerTest - yield the data in AutoReview (Nyholm) * minor #4899 Fix exception message format for fabbot.io (SpacePossum) * minor #4905 Support composer v2 installed.json files (GrahamCampbell) * minor #4906 CI: use Composer stable release for AppVeyor (kubawerlos) * minor #4909 DX: HeaderCommentFixer - use non-aliased version of option name in code (keradus) * minor #4912 CI: Fix AppVeyor integration (keradus) -------------------------------------------------------------------------------- ChangeLog:
* Mon Apr 13 2020 Remi Collet remi@remirepo.net - 2.16.2-1 - update to 2.16.2 --------------------------------------------------------------------------------
================================================================================ php-pear-1.10.11-1.fc30 (FEDORA-2020-0b239c9a5f) PHP Extension and Application Repository framework -------------------------------------------------------------------------------- Update Information:
**Version 1.10.11** Changelog: * PR #102: Fix logging error for urls not in cache * PR #103: Fix undefined constant name * PR #105: Sort list of packages * PR #106: Update REST.php * PR #107: Update .travis.yml to include PHP 7.4 * PR #108: Remove unneeded code -------------------------------------------------------------------------------- ChangeLog:
* Tue Apr 14 2020 Remi Collet remi@remirepo.net - 1.10.11-1 - update to 1.10.11 --------------------------------------------------------------------------------
================================================================================ python-click-help-colors-0.8-1.fc30 (FEDORA-2020-1270472aa2) Colorization of help messages in Click -------------------------------------------------------------------------------- Update Information:
new package python-clock-help-colors -------------------------------------------------------------------------------- ChangeLog:
--------------------------------------------------------------------------------
================================================================================ python-freeipa-1.0.2-1.fc30 (FEDORA-2020-06730065a6) Lightweight FreeIPA client -------------------------------------------------------------------------------- Update Information:
Initial packaging for Fedora -------------------------------------------------------------------------------- ChangeLog:
-------------------------------------------------------------------------------- References:
[ 1 ] Bug #1823091 - Review Request: python-freeipa - Lightweight FreeIPA client https://bugzilla.redhat.com/show_bug.cgi?id=1823091 --------------------------------------------------------------------------------
================================================================================ python-mercantile-1.1.3-1.fc30 (FEDORA-2020-d1b8dcc2af) Web Mercator XYZ tile utilities -------------------------------------------------------------------------------- Update Information:
Update to latest version -------------------------------------------------------------------------------- ChangeLog:
* Tue Apr 14 2020 Elliott Sales de Andrade quantum.analyst@gmail.com - 1.1.3-1 - Update to latest version -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1823544 - python-mercantile-1.1.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1823544 --------------------------------------------------------------------------------
================================================================================ python-octave-kernel-0.31.1-1.fc30 (FEDORA-2020-6928392cab) A Jupyter kernel for Octave -------------------------------------------------------------------------------- Update Information:
Update to latest version -------------------------------------------------------------------------------- ChangeLog:
* Tue Apr 14 2020 Elliott Sales de Andrade quantum.analyst@gmail.com - 0.31.1-1 - Update to latest version * Thu Jan 30 2020 Fedora Release Engineering releng@fedoraproject.org - 0.31.0-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Thu Oct 3 2019 Miro Hron��ok mhroncok@redhat.com - 0.31.0-5 - Rebuilt for Python 3.8.0rc1 (#1748018) * Mon Aug 19 2019 Miro Hron��ok mhroncok@redhat.com - 0.31.0-4 - Rebuilt for Python 3.8 * Fri Jul 26 2019 Fedora Release Engineering releng@fedoraproject.org - 0.31.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Mon Jul 22 2019 Elliott Sales de Andrade quantum.analyst@gmail.com - 0.31.0-2 - Fix tests with Octave 5 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1822918 - python-octave-kernel-0.31.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1822918 --------------------------------------------------------------------------------
================================================================================ python-regex-2020.4.4-1.fc30 (FEDORA-2020-7061d3de32) Alternative regular expression module, to replace re -------------------------------------------------------------------------------- Update Information:
Update Regex to the latest released version. -------------------------------------------------------------------------------- ChangeLog:
* Tue Apr 14 2020 Thomas Moschny thomas.moschny@gmx.de - 2020.4.4-1 - Update to 2020.4.4. --------------------------------------------------------------------------------
================================================================================ thunderbird-68.7.0-1.fc30 (FEDORA-2020-2b53cff132) Mozilla Thunderbird mail/newsgroup client -------------------------------------------------------------------------------- Update Information:
Update to latest upstream version -------------------------------------------------------------------------------- ChangeLog:
* Thu Apr 9 2020 Jan Horak jhorak@redhat.com - 68.7.0-1 - Update to 68.7.0 build1 * Fri Mar 13 2020 Jan Horak jhorak@redhat.com - 68.6.0-1 - Update to 68.6.0 build2 * Tue Mar 3 2020 David Auer dreua@posteo.de - 68.5.0-2 - Fix spellcheck (rhbz#1753011) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1822184 - thunderbird-68.7.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1822184 --------------------------------------------------------------------------------
================================================================================ waf-2.0.20-1.fc30 (FEDORA-2020-c75f624316) A Python-based build system -------------------------------------------------------------------------------- Update Information:
#### WAF 2.0.20 #### * Detect -flto and -fno-lto in parse_config #2281 * Improve custom option processing #2280 * Enable Clang on cygwin #2279 * Make distclean target 'no_lock_in_top/run' modifiers compatible with env vars #2271 * Update irix compiler detection * Exclude ConfigSet from altering ConfigurationContext.run_build caches #2273 * Add gas support in extras/gccdeps.py #2278 * Improve compatibility with custom commands in extras/clang_compilation_database #2274 -------------------------------------------------------------------------------- ChangeLog:
* Tue Apr 14 2020 Thomas Moschny thomas.moschny@gmx.de - 2.0.20-1 - Update to 2.0.20. --------------------------------------------------------------------------------
================================================================================ wireshark-3.2.3-1.fc30 (FEDORA-2020-da7dcee2ec) Network traffic analyzer -------------------------------------------------------------------------------- Update Information:
3.2.3 ---- New version 3.2.2 Security fix for CVE-2020-7044, CVE-2020-9428, CVE-2020-9430, CVE-2020-9431 -------------------------------------------------------------------------------- ChangeLog:
* Mon Apr 13 2020 Gwyn Ciesla gwync@protonmail.com - 1:3.2.3-1 - 3.2.3 * Fri Apr 3 2020 Michal Ruprich michalruprich@gmail.com - 1:3.2.2-1 - New version 3.2.2 * Fri Jan 31 2020 Fedora Release Engineering releng@fedoraproject.org - 1:3.2.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1796459 - CVE-2020-7044 wireshark: WASSP dissector crash (wnpa-sec-2020-01) https://bugzilla.redhat.com/show_bug.cgi?id=1796459 [ 2 ] Bug #1814586 - CVE-2020-9431 wireshark: LTE RRC dissector memory leak could result in excessive memory resource consumption https://bugzilla.redhat.com/show_bug.cgi?id=1814586 [ 3 ] Bug #1814615 - CVE-2020-9430 wireshark: injecting a malformed packet may cause WiMax DLMAP dissector to crash due to out-of-bound read https://bugzilla.redhat.com/show_bug.cgi?id=1814615 [ 4 ] Bug #1814622 - CVE-2020-9428 wireshark: injecting a malformed packet may cause the EAP dissector to crash due to out-of-bounds read https://bugzilla.redhat.com/show_bug.cgi?id=1814622 --------------------------------------------------------------------------------
================================================================================ youtube-dl-2020.03.24-1.fc30 (FEDORA-2020-656ddcaaf7) A small command-line program to download online videos -------------------------------------------------------------------------------- Update Information:
Update to 2020.03.24 -------------------------------------------------------------------------------- ChangeLog:
* Mon Apr 13 2020 Robert-Andr�� Mauchin zebob.m@gmail.com - 2020.03.24-1 - Update to 2020.03.24 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1810696 - youtube-dl-2020.03.24 is available https://bugzilla.redhat.com/show_bug.cgi?id=1810696 --------------------------------------------------------------------------------
================================================================================ yubioath-desktop-5.0.3-1.git5e94bd8.fc30 (FEDORA-2020-22614d2505) Yubikey tool for generating OATH event-based HOTP and time-based TOTP codes -------------------------------------------------------------------------------- Update Information:
Upstream release rhbz#1823928 -------------------------------------------------------------------------------- ChangeLog:
* Tue Apr 14 2020 Gerald Cox gbcox@fedoraproject.org - 5.0.3-1.git5e94bd8 - Upstream release rhbz#1823928 * Mon Apr 6 2020 Rex Dieter rdieter@fedoraproject.org - 5.0.2-2.git4df579e - rebuild (qt5) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1823928 - yubioath-desktop - upstream release 5.0.3 https://bugzilla.redhat.com/show_bug.cgi?id=1823928 --------------------------------------------------------------------------------