The following Fedora 30 Security updates need testing:
Age URL
6
https://bodhi.fedoraproject.org/updates/FEDORA-2020-8d3b359179
perl-Mojolicious-8.42-1.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-eb7a965fcf
abcm2ps-8.14.7-2.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-9fa7f4e25c php-7.3.18-1.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-d98d2cbae1
clamav-0.102.3-1.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-847ad856ab
json-c-0.13.1-12.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2020-bc22f06aa3
openconnect-8.10-1.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2020-5a69decc0c
kernel-5.6.13-100.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2020-7fd99ffae0
thunderbird-68.8.0-2.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2020-cfc319e067
log4net-2.0.8-10.fc30
The following Fedora 30 Critical Path updates have yet to be approved:
Age URL
11
https://bodhi.fedoraproject.org/updates/FEDORA-2020-ccdb66af9b
hwdata-0.335-1.fc30
11
https://bodhi.fedoraproject.org/updates/FEDORA-2020-e71a1d34cb
perl-Encode-3.06-15.fc30
10
https://bodhi.fedoraproject.org/updates/FEDORA-2020-28da9b3f28
elfutils-0.179-2.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2020-51ce773eb5
firefox-76.0.1-1.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-eca786a240 ethtool-5.6-1.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-f57290bd78
dash-0.5.10.2-4.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-ac6f73c6fc pcre2-10.35-1.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-7db677a922
selinux-policy-3.14.3-58.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-1757bac9a0 abrt-2.14.2-1.fc30
abrt-java-connector-1.1.5-1.fc30 gnome-abrt-1.3.2-1.fc30 libreport-2.13.1-3.fc30
reportd-0.7.4-1.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-847ad856ab
json-c-0.13.1-12.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2020-7fd99ffae0
thunderbird-68.8.0-2.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2020-5a69decc0c
kernel-5.6.13-100.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2020-2320e85ab1
osinfo-db-20200515-1.fc30
The following builds have been pushed to Fedora 30 updates-testing
Carla-2.2-1.beta1.fc30
armadillo-9.880.1-1.fc30
coturn-4.5.1.2-1.fc30
guayadeque-0.4.7-0.10.20200516gitb44f4c8.fc30
librsync-2.3.0-1.fc30
python-gpxpy-1.4.1-1.fc30
python-markdown2-2.3.9-1.fc30
python-regex-2020.5.14-1.fc30
python-sqlalchemy-1.3.17-1.fc30
virtualbox-guest-additions-6.1.8-1.fc30
Details about builds:
================================================================================
Carla-2.2-1.beta1.fc30 (FEDORA-2020-a1b600ba61)
Audio plugin host
--------------------------------------------------------------------------------
Update Information:
Update to 2.2-1.beta1 ---- - Update to 2.2-0.1.20200514gitf100892 - Add
ExcludeArch ppc64le due PowerPC is no longer supported by JUCE
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 16 2020 Martin Gansser <martinkg(a)fedoraproject.org> -
1:2.2-0.1.20200514gitf100892
- Update to 2.2beta1
* Fri May 15 2020 Martin Gansser <martinkg(a)fedoraproject.org> -
1:2.2-0.1.20200514gitf100892
- Update to 2.2-0.1.20200514gitf100892
- Add ExcludeArch ppc64le due PowerPC is no longer supported by JUCE
* Tue Apr 14 2020 Martin Gansser <martinkg(a)fedoraproject.org> - 1:2.1-2
- Add epoch to allow update
* Tue Apr 14 2020 Martin Gansser <martinkg(a)fedoraproject.org> - 1:2.1-1
- Update to 2.1-1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1836399 - Carla-2.2b1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1836399
--------------------------------------------------------------------------------
================================================================================
armadillo-9.880.1-1.fc30 (FEDORA-2020-1a7a417112)
Fast C++ matrix library with syntax similar to MATLAB and Octave
--------------------------------------------------------------------------------
Update Information:
Update to the latest stable release. The main changes are: * expanded `qr()`
to optionally use pivoted decomposition; * updated physical constants to NIST
2018 CODATA values; * added `ARMA_DONT_USE_CXX11_MUTEX` configuration option to
disable use of `std::mutex`; * faster handling of matrix multiplication
expressions by `diagvec()` and `diagmat()`; * added `trimatu_ind()` and
`trimatl_ind()`; * more consistent detection of sparse vector expressions.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 16 2020 Jos�� Matos <jamatos(a)fedoraproject.org> - 9.880.1-1
- update to 9.880.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1823269 - armadillo-9.880.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1823269
--------------------------------------------------------------------------------
================================================================================
coturn-4.5.1.2-1.fc30 (FEDORA-2020-d9287bb71d)
TURN/STUN & ICE Server
--------------------------------------------------------------------------------
Update Information:
Coturn 4.5.1.2 ============== - merge regression fix: * Do not display
empty CLI passwd alert if CLI is not enabled - merge PR #359: * Remove
`turn_free_simple()` * Remove `turn_malloc()` * Remove `turn_realloc()`
* Remove `turn_free()` * Remove `turn_calloc()` * Remove `turn_strdup()`
* Remove `SSL_NEW()` and `SSL_FREE()` * Remove pointer debugging machinery
* Remove `ns_bzero()`, `ns_bcopy()`, and `ns_bcmp()` * Remove
`[su]{08,16,32,64}bits` type defines - merge PR #327 * Strip white-spaces
from config file lines end - merge PR #386 * fix the webadmin ip
permission add/delete sql injection - merge PR #390 * fix mongo driver
crash when invalid connection string is used - merge PR #392 enhanced fread
return length check - merge PR #367 disconnect database gracefully - merge
PR #382 * Using `SSL_get_version` method for BoringSSL compatibility *
Now we put in `turn_session_info->tls_method` the real TLS version. Earlier we
put UNKNOWN in this field if it was a TLS protocol that was not defined
supportel TLS protocol during compile time. - merge PR #276 Add systemd
service example - merge PR #284 Add bandwidth usage reporting packet/bandwidth
usage by peers - merge PR #381 Modifying configure to enable compile with
private libraries - merge PR #455 Typo corrected - merge PR #417 Append only
to log files rather to override them - merge PR #442 Updated incorrect string
length check for 'ssh' - merge PR #449 Fix Dockerfile for latest Debian -
http server NULL dereference * Reported (by
quarkslab.com, cisco/talos)
* CVE-2020-6061 / TALOS-2020-0984 - http server out of bound read *
Reported (by
quarkslab.com, cisco/talos) * CVE-2020-6061 / TALOS-2020-0984
- merge PR #472 STUN input validation - merge PR #398 FIPS - merge PR #478
prod - merge PR #463 fix typos and grammar - update travis config ubuntu/mac
images - merge PR #466 added null check for second char - merge PR #470
compiler warning fixes - merge PR #475 Update `README.docker` - merge PR
#471 Fix a memory leak when an SHATYPE isn't supported - merge PR #488 Fix
typos about `INSTALL` filenames - fix compiler warning comparison between
signed and unsigned integer expressions - fix compiler warning string
truncation - change Diffie Hellman default key length from 1066 to 2066 -
merge PR #522 drop of supplementary group IDs - merge PR #514 Unify spelling
of Coturn - merge PR#506 Rename "prod" config option to "no-software-
attribute" - merge PR #519 fix config extension in `README.docker` - merge
PR #516 change sql data dir in `docker-compose-all.yml` - merge PR #513 remove
trailing spaces from `README`s - merge PR #525 add flags to disable periodic
use of dynamic tables
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 16 2020 Robert Scheck <robert(a)fedoraproject.org> - 4.5.1.2-1
- Update to 4.5.1.2
--------------------------------------------------------------------------------
================================================================================
guayadeque-0.4.7-0.10.20200516gitb44f4c8.fc30 (FEDORA-2020-d6c9846187)
Music player
--------------------------------------------------------------------------------
Update Information:
Update to 0.4.7-0.10.20200516gitb44f4c8
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 16 2020 Martin Gansser <martinkg(a)fedoraproject.org> -
0.4.7-0.11.20200516gitb44f4c8
- Update to 0.4.7-0.11.20200516gitb44f4c8
--------------------------------------------------------------------------------
================================================================================
librsync-2.3.0-1.fc30 (FEDORA-2020-509e44414c)
Rsync remote-delta algorithm library
--------------------------------------------------------------------------------
Update Information:
librsync 2.3.0 ============== * Bump minor version from 2.2.1 to 2.3.0 to
reflect additional `rs_sig_args()` and `strong_len=-1` support. * Add public
`rs_sig_args()` function for getting the recommend signature args from the file
size. Added support to rdiff for `--sum-size=-1` to indicate "use minimum size
safe against random block collisions". Added warning output for sum-sizes that
are too small to be safe. Fixed possible rdiff bug affecting popt parsing on
non-little-endian platforms. * Fixed yet more compiler warnings for various
platforms/compilers. * Improved cmake popt handling to find popt dependencies
using PkgConfig. * Tidied internal code and improved tests for `netint.[ch]`,
`tube.c`, and `hashtable.h`. * Improved C99 compatibility. Add `-std=c99
-pedantic` to `CMAKE_C_FLAGS` for gcc and clang. Fix all C99 warnings by making
all code C99 compliant. Tidy all CMake checks, #cmakedefines, and #includes. Fix
64bit support for mdfour checksums. * Usage clarified in rdiff (1) man page.
librsync 2.2.1 ============== * Fix #176 hangs calculating deltas for files
larger than 4GB. librsync 2.2.0 ============== * Bump minor version from
2.1.0 to 2.2.0 to reflect additional RabinKarp rollsum support. * Fix MSVC
builds by adding missing `LIBRSYNC_EXPORT` to variables in `librsync.h`, add
`-DLIBRSYNC_STATIC_DEFINE` to the sumset_test target, and correctly install
`.dll` files in the bin directory. * Add RabinKarp rollsum support and make it
the default. RabinKarp is a much better rolling hash, which reduces the risk of
hash collision corruption and speeds up delta calculations. The rdiff cmd gets a
new `-R (rollsum|rabinkarp)` argument with the default being `rabinkarp`, Use
`-R rollsum` to generate backwards-compatible signatures. * Use single-byte
literal commands for small inserts in deltas. This makes each small insert use 1
less byte in deltas. * Fix multiple warnings (cross-)compiling for windows.
* Change `rs_file_size()` to report -1 instead of 0 for unknown file sizes (not
a regular file). * Add cmake `BUILD_SHARED_LIBS` option for static library
support. `BUILD_SHARED_LIBS` defaults to `ON`, and can be set to `OFF` using
`ccmake .` to build librsync as a static library. * Fix compile errors and add
`.gitignore` entries for MSVS 2019. Fixes `hashtable.h` to be C99 compliant.
librsync 2.1.0 ============== * Bump minor version from 2.0.3 to 2.1.0 to
reflect additions to `librsync.h`. * Fix exporting of private symbols from
librsync library. Add export of useful large file functions `rs_file_open()`,
`rs_file_close()`, and `rs_file_size()` to `librsync.h`. Add export of
`rs_signature_log_stats()` to log signature hashtable hit/miss stats. Improve
rdiff error output. * Updated release process to include stable tarballs. *
Remove redundant and broken `--paranoia` argument from rdiff. * Fix memory
leak of `rs_signature_t->block_sigs` when freeing signatures. * Document delta
file format. * Fix up doxygen comments.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 16 2020 Robert Scheck <robert(a)fedoraproject.org> 2.3.0-1
- Upgrade to 2.3.0
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
python-gpxpy-1.4.1-1.fc30 (FEDORA-2020-8b29048204)
GPX file parser and GPS track manipulation library
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 16 2020 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 1.4.1-1
- Update to latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1836482 - python-gpxpy-1.4.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1836482
--------------------------------------------------------------------------------
================================================================================
python-markdown2-2.3.9-1.fc30 (FEDORA-2020-3864f32b3d)
A fast and complete Python implementation of Markdown
--------------------------------------------------------------------------------
Update Information:
### python-markdown2 2.3.9 ### - [pull #335] Added header support for wiki
tables - [pull #336] Reset _toc when convert is run - [pull #353] XSS fix -
[pull #350] XSS fix
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 16 2020 Thomas Moschny <thomas.moschny(a)gmx.de> - 2.3.9-1
- Update to 2.3.9.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1831000 - CVE-2020-11888 python-markdown2: python-markdown2: Unsanitized
input allows for cross-site scripting (XSS) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1831000
--------------------------------------------------------------------------------
================================================================================
python-regex-2020.5.14-1.fc30 (FEDORA-2020-77389c20f9)
Alternative regular expression module, to replace re
--------------------------------------------------------------------------------
Update Information:
Update to 2020.5.14.
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 15 2020 Thomas Moschny <thomas.moschny(a)gmx.de> - 2020.5.14-1
- Update to 2020.5.14.
--------------------------------------------------------------------------------
================================================================================
python-sqlalchemy-1.3.17-1.fc30 (FEDORA-2020-bda95e7d66)
Modular and flexible ORM library for python
--------------------------------------------------------------------------------
Update Information:
This is a bugfix and enhancement release. The upstream announcements for
version
[
1.3.16](https://www.sqlalchemy.org/blog/2020/04/08/sqlalchemy-1.3.16-rele...
and
[
1.3.17](https://www.sqlalchemy.org/blog/2020/05/13/sqlalchemy-1.3.17-rele...
summarize and the [
changelog](https://docs.sqlalchemy.org/en/13/changelog/change
log_13.html#change-1.3.17) contains a detailed list of changes in version
1.3.17.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 16 2020 Nils Philippsen <nils(a)tiptoe.de> - 1.3.17-1
- version 1.3.17
--------------------------------------------------------------------------------
================================================================================
virtualbox-guest-additions-6.1.8-1.fc30 (FEDORA-2020-06916b7f13)
VirtualBox Guest Additions
--------------------------------------------------------------------------------
Update Information:
New upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 16 2020 S��rgio Basto <sergio(a)serjux.com> - 6.1.8-1
- Update Virtualbox Guest Additions to 6.1.8
* Thu Apr 16 2020 S��rgio Basto <sergio(a)serjux.com> - 6.1.6-1
- Update Virtualbox Guest Additions to 6.1.6
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1789545 - Can't auto-resize display on Fedora 31 guest VM
https://bugzilla.redhat.com/show_bug.cgi?id=1789545
[ 2 ] Bug #1823891 - virtualbox-guest-additions-6.1.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1823891
--------------------------------------------------------------------------------