The following Fedora 30 Security updates need testing:
Age URL
48
https://bodhi.fedoraproject.org/updates/FEDORA-2019-a96124345a
rubygem-jquery-ui-rails-6.0.1-1.fc30
48
https://bodhi.fedoraproject.org/updates/FEDORA-2019-06f5bbdaf5
python-gnupg-0.4.4-1.fc30
44
https://bodhi.fedoraproject.org/updates/FEDORA-2019-bf800b1c04
kubernetes-1.13.5-1.fc30
38
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4a8eeaf80e
freeradius-3.0.19-3.fc30
37
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b30b48200c
advancecomp-2.1-11.fc30
20
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6a8b5fb46a mutt-1.12.0-1.fc30
18
https://bodhi.fedoraproject.org/updates/FEDORA-2019-cb2bff6d48
poppler-0.73.0-13.fc30
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b6d3c8b0a8
pam-u2f-1.0.8-1.fc30
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-320d5295fc
mingw-libxslt-1.1.33-1.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d5ded5326b
dbus-1.12.16-1.fc30
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-fa3e40f00a
libtiff-4.0.10-5.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-aeda234b68 xen-4.11.1-6.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-a8121923d5
php-brumann-polyfill-unserialize-1.0.3-1.fc30 php-typo3-phar-stream-wrapper2-2.1.2-1.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9f613ab692
drupal7-uuid-1.3-1.fc30
The following Fedora 30 Critical Path updates have yet to be approved:
Age URL
18
https://bodhi.fedoraproject.org/updates/FEDORA-2019-cb2bff6d48
poppler-0.73.0-13.fc30
18
https://bodhi.fedoraproject.org/updates/FEDORA-2019-f42bbbeb54
iproute-5.1.0-1.fc30
18
https://bodhi.fedoraproject.org/updates/FEDORA-2019-06f611666c
nfs-utils-2.3.4-2.fc30
17
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3f20be4d52
selinux-policy-3.14.3-38.fc30
17
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d754a7fa00 cups-2.2.11-3.fc30
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c0cd19cfcd
igt-gpu-tools-1.23-1.20190531git4108c74.fc30 xorg-x11-drv-intel-2.99.917-42.20180618.fc30
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-71f312266b
perl-podlators-4.12-1.fc30
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3c0523b33c
elfutils-0.176-3.fc30
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-128d522632
libevdev-1.7.0-1.fc30
10
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8d0daa04d1
firewalld-0.6.4-1.fc30
10
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ba2ca87218
redhat-rpm-config-130-1.fc30
10
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3b09e23a58
iio-sensor-proxy-2.7-1.fc30
10
https://bodhi.fedoraproject.org/updates/FEDORA-2019-5101717387 bluez-5.50-8.fc30
8
https://bodhi.fedoraproject.org/updates/FEDORA-2019-60ba61b5ab ceph-14.2.1-2.fc30
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-caa00da046
audit-3.0-0.9.20190507gitf58ec40.fc30
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ffb90829eb
fedora-release-30-4
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-7840da1aa2
epiphany-3.32.3-1.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8a62644235
python-mako-1.0.12-1.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d5ded5326b
dbus-1.12.16-1.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-599e026ca8
osinfo-db-20190611-1.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6ca7ba6183
glusterfs-6.3-1.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-57ca4efaf9
python-blivet-3.1.4-1.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-be28413187 file-5.36-3.fc30
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6c74403348 libqb-1.0.5-2.fc30
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4b588c7cc3
corosync-3.0.2-1.fc30
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-fa3e40f00a
libtiff-4.0.10-5.fc30
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-292a7fc61f
libblockdev-2.22-1.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-db12c4b65c
fcoe-utils-1.0.32-8.git9834b34.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-f251d18245
breeze-icon-theme-5.59.0-1.fc30 extra-cmake-modules-5.59.0-1.fc30 kf5-5.59.0-1.fc30
kf5-attica-5.59.0-1.fc30 kf5-baloo-5.59.0-1.fc30 kf5-bluez-qt-5.59.0-1.fc30
kf5-frameworkintegration-5.59.0-1.fc30 kf5-kactivities-5.59.0-1.fc30
kf5-kactivities-stats-5.59.0-1.fc30 kf5-kapidox-5.59.0-1.fc30 kf5-karchive-5.59.0-1.fc30
kf5-kauth-5.59.0-1.fc30 kf5-kbookmarks-5.59.0-1.fc30 kf5-kcmutils-5.59.0-1.fc30
kf5-kcodecs-5.59.0-1.fc30 kf5-kcompletion-5.59.0-1.fc30 kf5-kconfig-5.59.0-1.fc30
kf5-kconfigwidgets-5.59.0-1.fc30 kf5-kcoreaddons-5.59.0-1.fc30 kf5-kcrash-5.59.0-1.fc30
kf5-kdbusaddons-5.59.0-1.fc30 kf5-kdeclarative-5.59.0-1.fc30 kf5-kded-5.59.0-1.fc30
kf5-kdelibs4support-5.59.0-1.fc30 kf5-kdesignerplugin-5.59.0-1.fc30
kf5-kdesu-5.59.0-1.fc30 kf5-kdewebkit-5.59.0-1.fc30 kf5-kdnssd-5.59.0-1.fc30
kf5-kdoctools-5.59.0-1.fc30 kf5-kemoticons-5.59.0-1.fc30 kf5-kfilemetadata-5.59.0-1.fc30
kf5-kglobalaccel-5.59.0-1.fc30 kf5-kguiad
dons-5.59.0-1.fc30 kf5-kholidays-5.59.0-1.fc30 kf5-khtml-5.59.0-1.fc30
kf5-ki18n-5.59.0-1.fc30 kf5-kiconthemes-5.59.0-1.fc30 kf5-kidletime-5.59.0-1.fc30
kf5-kimageformats-5.59.0-1.fc30 kf5-kinit-5.59.0-1.fc30 kf5-kio-5.59.0-1.fc30
kf5-kirigami2-5.59.0-1.fc30 kf5-kitemmodels-5.59.0-1.fc30 kf5-kitemviews-5.59.0-1.fc30
kf5-kjobwidgets-5.59.0-1.fc30 kf5-kjs-5.59.0-1.fc30 kf5-kjsembed-5.59.0-1.fc30
kf5-kmediaplayer-5.59.0-1.fc30 kf5-knewstuff-5.59.0-1.fc30
kf5-knotifications-5.59.0-1.fc30 kf5-knotifyconfig-5.59.0-1.fc30
kf5-kpackage-5.59.0-1.fc30 kf5-kparts-5.59.0-1.fc30 kf5-kpeople-5.59.0-1.fc30
kf5-kplotting-5.59.0-1.fc30 kf5-kpty-5.59.0-1.fc30 kf5-kross-5.59.0-1.fc30
kf5-krunner-5.59.0-1.fc30 kf5-kservice-5.59.0-1.fc30 kf5-ktexteditor-5.59.0-1.fc30
kf5-ktextwidgets-5.59.0-1.fc30 kf5-kunitconversion-5.59.0-1.fc30 kf5-kwallet-5.59.0-1.fc30
kf5-kwayland-5.59.0-1.fc30 kf5-kwidgetsaddons-5.59.0-1.fc30
kf5-kwindowsystem-5.59.0-1.fc30 kf5-kxmlgui-5.59.0-1.fc30 kf5-kxmlrpcclient-5.59.0-1.fc30
kf5-modemmanager-qt-5.59.0-1.fc30 kf5-networkmanager-qt-5.59.0-1.fc30
kf5-plasma-5.59.0-1.fc30 kf5-prison-5.59.0-1.fc30 kf5-purpose-5.59.0-1.fc30
kf5-solid-5.59.0-1.fc30 kf5-sonnet-5.59.0-1.fc30 kf5-syndication-5.59.0-1.fc30
kf5-syntax-highlighting-5.59.0-1.fc30 kf5-threadweaver-5.59.0-1.fc30
oxygen-icon-theme-5.59.0-1.fc30 qqc2-desktop-style-5.59.0-1.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-aeda234b68 xen-4.11.1-6.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-13d9bfc7e8 exo-0.12.6-1.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e9c4bcfcf2
ModemManager-1.10.2-1.fc30 libqmi-1.22.4-1.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-bd3d74ebd4
evolution-3.32.3-1.fc30 evolution-data-server-3.32.3-1.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-1575ccd38c sssd-2.2.0-1.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-fd3abd06fc pcre2-10.33-4.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3c98465176
openssh-8.0p1-4.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-dd1633d7cb
switcheroo-control-1.3.1-1.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-118ee2329e
vim-8.1.1561-1.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-926e24f840
libbluray-1.1.2-1.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-60d950e4b6
gobject-introspection-1.60.2-1.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-f7675395b8
libgee-0.20.1-5.fc30 libgee06-0.6.8-14.fc30
The following builds have been pushed to Fedora 30 updates-testing
GraphicsMagick-1.3.32-1.fc30
compiz-0.8.16.1-3.fc30
libwpe-1.3.1-1.fc30
marco-1.22.2-1.fc30
mate-control-center-1.22.1-2.fc30
mate-themes-3.22.20-1.fc30
msoffcrypto-tool-4.10.0-1.fc30
subscription-manager-1.25.9-1.fc30
wpebackend-fdo-1.3.1-1.fc30
Details about builds:
================================================================================
GraphicsMagick-1.3.32-1.fc30 (FEDORA-2019-da4c20882c)
An ImageMagick fork, offering faster image generation and better quality
--------------------------------------------------------------------------------
Update Information:
New bug and security fix release, see
http://www.graphicsmagick.org/NEWS.html#june-15-2019
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 17 2019 Rex Dieter <rdieter(a)fedoraproject.org> - 1.3.32-1
- 1.3.32
* Thu May 30 2019 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.3.31-6
- Perl 5.30 rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1554189 - CVE-2017-18219 CVE-2017-18220 GraphicsMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1554189
[ 2 ] Bug #1543274 - CVE-2018-6799 GraphicsMagick: Heap overwrite in
magick/pixel_cache.c:AcquireCacheNexus() can lead to denial of service [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1543274
[ 3 ] Bug #1494552 - CVE-2017-14504 CVE-2017-14649 CVE-2017-14733 CVE-2017-14994
CVE-2017-14997 CVE-2017-15238 CVE-2017-15930 CVE-2017-16545 CVE-2017-16547 CVE-2017-17498
CVE-2017-17500 CVE-2017-17501 CVE-2017-17502 CVE-2017-17503 GraphicsMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1494552
[ 4 ] Bug #1475495 - CVE-2017-11638 CVE-2017-11642 CVE-2017-11722 CVE-2017-12935
CVE-2017-12936 CVE-2017-12937 CVE-2017-13063 CVE-2017-13064 CVE-2017-13065 CVE-2017-13648
CVE-2017-13736 CVE-2017-13737 CVE-2017-13775 ... GraphicsMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475495
[ 5 ] Bug #1708526 - CVE-2017-12805 CVE-2017-12806 GraphicsMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1708526
[ 6 ] Bug #1707774 - CVE-2019-11470 CVE-2019-11472 GraphicsMagick: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1707774
[ 7 ] Bug #1707754 - CVE-2019-11474 GraphicsMagick: floating point exception in
coders/xwd.c causing denial of service [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1707754
[ 8 ] Bug #1707716 - CVE-2019-11473 GraphicsMagick: out of bounds in coders/xwd.c
causing denial of service by crafting an XWD image file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1707716
--------------------------------------------------------------------------------
================================================================================
compiz-0.8.16.1-3.fc30 (FEDORA-2019-c8f380b3ef)
OpenGL window and compositing manager
--------------------------------------------------------------------------------
Update Information:
- add support for invisible-borders (marco) - rebuild because of soname bump of
marco (mate-control-center) - rebuild because of soname bump of marco (compiz)
- add themes with large borders for non compositor usage
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 17 2019 Wolfgang Ulbrich <fedora(a)raveit.de - 1:0.8.16.1-3
- build with marco-1.22.2
- enable BR libcompizconfig-devel
* Mon Jun 17 2019 Wolfgang Ulbrich <fedora(a)raveit.de - 1:0.8.16.1-2
- build without marco, because of reverse dependencies to libcompizconfig
- disable BR libcompizconfig-devel
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1721026 - compiz needs a rebuild because of new marco-1.22.2 soname bump
https://bugzilla.redhat.com/show_bug.cgi?id=1721026
--------------------------------------------------------------------------------
================================================================================
libwpe-1.3.1-1.fc30 (FEDORA-2019-222c656d38)
General-purpose library for the WPE-flavored port of WebKit
--------------------------------------------------------------------------------
Update Information:
New version
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 17 2019 Chris King <bunnyapocalypse(a)protonmail.org> - 1.3.1-1
- New version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1721145 - libwpe-1.3.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1721145
--------------------------------------------------------------------------------
================================================================================
marco-1.22.2-1.fc30 (FEDORA-2019-c8f380b3ef)
MATE Desktop window manager
--------------------------------------------------------------------------------
Update Information:
- add support for invisible-borders (marco) - rebuild because of soname bump of
marco (mate-control-center) - rebuild because of soname bump of marco (compiz)
- add themes with large borders for non compositor usage
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 17 2019 Wolfgang Ulbrich <fedora(a)raveit.de> - 1.22.2-1
- update 1.22.2 release
- add support for invisible borders
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1721026 - compiz needs a rebuild because of new marco-1.22.2 soname bump
https://bugzilla.redhat.com/show_bug.cgi?id=1721026
--------------------------------------------------------------------------------
================================================================================
mate-control-center-1.22.1-2.fc30 (FEDORA-2019-c8f380b3ef)
MATE Desktop control-center
--------------------------------------------------------------------------------
Update Information:
- add support for invisible-borders (marco) - rebuild because of soname bump of
marco (mate-control-center) - rebuild because of soname bump of marco (compiz)
- add themes with large borders for non compositor usage
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 17 2019 Wolfgang Ulbrich <fedora(a)raveit.de> - 1.22.1-2
- rebuild because of soname bump of marco
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1721026 - compiz needs a rebuild because of new marco-1.22.2 soname bump
https://bugzilla.redhat.com/show_bug.cgi?id=1721026
--------------------------------------------------------------------------------
================================================================================
mate-themes-3.22.20-1.fc30 (FEDORA-2019-c8f380b3ef)
MATE Desktop themes
--------------------------------------------------------------------------------
Update Information:
- add support for invisible-borders (marco) - rebuild because of soname bump of
marco (mate-control-center) - rebuild because of soname bump of marco (compiz)
- add themes with large borders for non compositor usage
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 17 2019 Wolfgang Ulbrich <fedora(a)raveit.de> - 3.22.20-1
- update to 3.22.20
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1721026 - compiz needs a rebuild because of new marco-1.22.2 soname bump
https://bugzilla.redhat.com/show_bug.cgi?id=1721026
--------------------------------------------------------------------------------
================================================================================
msoffcrypto-tool-4.10.0-1.fc30 (FEDORA-2019-f103c26fd0)
Python tool for decrypting MS Office files with passwords or other keys
--------------------------------------------------------------------------------
Update Information:
The msoffcrypto-tool (formerly ms-offcrypto-tool) is a Python tool and library
for decrypting encrypted Microsoft Office files with password, intermediate key,
or private key which generated its escrow key.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1716196 - Review Request: msoffcrypto-tool - Python tool for decrypting MS
Office files with passwords or other keys
https://bugzilla.redhat.com/show_bug.cgi?id=1716196
--------------------------------------------------------------------------------
================================================================================
subscription-manager-1.25.9-1.fc30 (FEDORA-2019-31ec284168)
Tools and libraries for subscription and repository management
--------------------------------------------------------------------------------
Update Information:
This update fixes multiple bugs, but the most prominent result on Fedora will be
that you will not see this at all. subscription-manager is usually not relevant
to Fedora installs, but it was incorrectly being pulled into live image builds
and showing up as a spoke in the installer and initial-setup. This happened
after Fedora 30 was released, but affects the [semi-demi-hemi-unofficial 'live
respin'
releases](https://dl.fedoraproject.org/pub/alt/live-respins/). Future
respins done after this update goes stable will no longer be affected.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 12 2019 Christopher Snyder <csnyder(a)redhat.com> 1.25.9-1
- 1717147: Updating from System Type to Entitlement Type (waldirio(a)gmail.com)
- Updated from System Type to Entitlement Type (waldirio(a)gmail.com)
- 1708105: Fixed unsetting syspurpose attributes; ENT-1330 (jhnidek(a)redhat.com)
- spec: Don't supplement initial-setup-gui on Fedora (awilliam(a)redhat.com)
- 1713626: Only disable system repos if the disable_system_repos is "1"
(csnyder(a)redhat.com)
- 1673662: Print reasons, why syspurpose status is mismatch; ENT-1247
(jhnidek(a)redhat.com)
- Bump sshpk from 1.13.1 to 1.16.1 in /cockpit
(dependabot[bot](a)users.noreply.github.com)
- Also handle anaconda removal of install classes in rhsm_gui.py
(awilliam(a)redhat.com)
- 1652549: Addition of tests for heartbeat method (wpoteat(a)redhat.com)
- Try to fix ostree unit test. (jhnidek(a)redhat.com)
- Set LANG to run subscription-manager and get proper output (suttner(a)atix.de)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1718622 - Red Hat subscription showing during installation process
https://bugzilla.redhat.com/show_bug.cgi?id=1718622
--------------------------------------------------------------------------------
================================================================================
wpebackend-fdo-1.3.1-1.fc30 (FEDORA-2019-cdcbcbb0e9)
A WPE backend designed for Linux desktop systems
--------------------------------------------------------------------------------
Update Information:
New version
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 17 2019 Chris King <bunnyapocalypse(a)protonmail.com> - 1.3.1-1
- New version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1720294 - wpebackend-fdo-1.3.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1720294
--------------------------------------------------------------------------------