The following Fedora 30 Security updates need testing:
Age URL
30
https://bodhi.fedoraproject.org/updates/FEDORA-2019-71b2273a9f
libarchive-3.3.3-7.fc30
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-69da274284 grub2-2.02-87.fc30
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-11dddb785b
samba-4.10.11-0.fc30
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-1cec196e20 git-2.21.1-1.fc30
8
https://bodhi.fedoraproject.org/updates/FEDORA-2019-46b6bd2459
libssh-0.9.3-1.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-2e12bd3a9a xen-4.11.3-2.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3230b2aae9
spamassassin-3.4.3-1.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c7b5103d2a
unbound-1.9.6-1.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c4177f74f5
drupal7-l10n_update-2.3-1.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6abe00cae1
drupal7-webform-4.21-1.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-7938c21723
cyrus-imapd-3.0.13-1.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-5f1a2cc839
drupal7-7.69-1.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-437d94e271 php-7.3.13-1.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e039dfaa30
htmldoc-1.9.7-1.fc30
The following Fedora 30 Critical Path updates have yet to be approved:
Age URL
162
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c05e4425d1
dash-0.5.10.2-3.fc30
30
https://bodhi.fedoraproject.org/updates/FEDORA-2019-71b2273a9f
libarchive-3.3.3-7.fc30
23
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ed226e6112
xorg-x11-server-1.20.6-1.fc30
14
https://bodhi.fedoraproject.org/updates/FEDORA-2019-0d122cc67a dnf-4.2.17-1.fc30
dnf-plugins-core-4.0.12-1.fc30 libcomps-0.1.14-1.fc30 libdnf-0.39.1-1.fc30
microdnf-3.3.0-1.fc30
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-decb570505
python-jsonschema-3.2.0-1.fc30
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-32a8da0e3a bash-5.0.11-1.fc30
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-69da274284 grub2-2.02-87.fc30
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b436a3156c
gnupg2-2.2.18-2.fc30
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-df017ddeb7
pungi-4.1.41-3.fc30
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-1cec196e20 git-2.21.1-1.fc30
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3454e38e8c
supermin-5.1.20-11.fc30
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-212afebfaf emacs-26.3-1.fc30
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-11dddb785b
samba-4.10.11-0.fc30
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8bcab526a8
tigervnc-1.10.0-2.fc30
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-395944db07
glib-networking-2.60.4-1.fc30
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-11d1e41933
librepo-1.11.1-1.fc30
8
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6a84b238e6
libedit-3.1-30.20191211cvs.fc30
8
https://bodhi.fedoraproject.org/updates/FEDORA-2019-46b6bd2459
libssh-0.9.3-1.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-2e12bd3a9a xen-4.11.3-2.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-870994ef73 vim-8.2.019-1.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-2c34f36434
libsolv-0.7.10-1.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e531f61d41
libseccomp-2.4.2-2.fc30
The following builds have been pushed to Fedora 30 updates-testing
arm-image-installer-2.14-1.fc30
chromium-79.0.3945.88-1.fc30
clevis-11-6.fc30
geolite2-20191217-1.fc30
git-tools-2019.11-1.fc30
granite-5.3.0-1.fc30
icecat-68.3.0-2.gnu1.fc30
kernel-5.3.18-200.fc30
libnitrokey-3.5-1.fc30
libwebsockets-3.2.1-1.fc30
magic-8.2.174-1.fc30
module-build-service-2.31.0-1.fc30
nethack-3.6.4-1.fc30
nfs-utils-2.4.2-3.rc3.fc30
nitrokey-app-1.4-1.fc30
openhantek-3.0.1-1.fc30
php-pecl-memcache-4.0.5.1-1.fc30
php-psr-http-server-handler-1.0.1-1.fc30
php-sabre-vobject4-4.2.1-1.fc30
python-hdmf-1.4.0-1.fc30
python-tinydb-3.15.2-1.fc30
rubygem-rouge-3.14.0-1.fc30
wireshark-3.2.0-1.fc30
wordpress-5.3.2-1.fc30
Details about builds:
================================================================================
arm-image-installer-2.14-1.fc30 (FEDORA-2019-540c480868)
Writes binary image files to any specified block device
--------------------------------------------------------------------------------
Update Information:
- fixed issues when host system has VG named fedora, renaming disk image VG to
avoid conflicts - added check to ensure uboot exists before attempting to write
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 19 2019 Paul Whalen <pwhalen(a)fedoraproject.org> - 2.14-1
- Update to 2.14
* Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.13-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1785109 - The arm installer writes in the host file system instead the SDcard
if the host has a LVM system named fedora.
https://bugzilla.redhat.com/show_bug.cgi?id=1785109
--------------------------------------------------------------------------------
================================================================================
chromium-79.0.3945.88-1.fc30 (FEDORA-2019-2307619ddd)
A WebKit (Blink) powered web browser
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2019-13767. ---- Update to Chromium 79. Fixes the usual
giant pile of bugs and security issues. This time, the list is: CVE-2019-13725
CVE-2019-13726 CVE-2019-13727 CVE-2019-13728 CVE-2019-13729 CVE-2019-13730
CVE-2019-13732 CVE-2019-13734 CVE-2019-13735 CVE-2019-13764 CVE-2019-13736
CVE-2019-13737 CVE-2019-13738 CVE-2019-13739 CVE-2019-13740 CVE-2019-13741
CVE-2019-13742 CVE-2019-13743 CVE-2019-13744 CVE-2019-13745 CVE-2019-13746
CVE-2019-13747 CVE-2019-13748 CVE-2019-13749 CVE-2019-13750 CVE-2019-13751
CVE-2019-13752 CVE-2019-13753 CVE-2019-13754 CVE-2019-13755 CVE-2019-13756
CVE-2019-13757 CVE-2019-13758 CVE-2019-13759 CVE-2019-13761 CVE-2019-13762
CVE-2019-13763
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 17 2019 Tom Callaway <spot(a)fedoraproject.org> - 79.0.3945.88-1
- update to 79.0.3945.88
* Tue Dec 10 2019 Tom Callaway <spot(a)fedoraproject.org> - 79.0.3945.79-1
- update to 79.0.3945.79
* Wed Dec 4 2019 Tom Callaway <spot(a)fedoraproject.org> - 79.0.3945.56-2
- fix lib provides filtering
* Tue Dec 3 2019 Tom Callaway <spot(a)fedoraproject.org> - 79.0.3945.56-1
- update to current beta (rawhide only)
- switch to upstream patch for clock_nanosleep fix
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1784989 - CVE-2019-13767 chromium-browser: Use after free in media picker
https://bugzilla.redhat.com/show_bug.cgi?id=1784989
[ 2 ] Bug #1782008 - CVE-2019-13763 chromium-browser: Insufficient policy enforcement in
payments
https://bugzilla.redhat.com/show_bug.cgi?id=1782008
[ 3 ] Bug #1782007 - CVE-2019-13762 chromium-browser: Insufficient policy enforcement in
downloads
https://bugzilla.redhat.com/show_bug.cgi?id=1782007
[ 4 ] Bug #1782006 - CVE-2019-13761 chromium-browser: Incorrect security UI in Omnibox
https://bugzilla.redhat.com/show_bug.cgi?id=1782006
[ 5 ] Bug #1782005 - CVE-2019-13759 chromium-browser: Incorrect security UI in
interstitials
https://bugzilla.redhat.com/show_bug.cgi?id=1782005
[ 6 ] Bug #1782004 - CVE-2019-13757 chromium-browser: Incorrect security UI in Omnibox
https://bugzilla.redhat.com/show_bug.cgi?id=1782004
[ 7 ] Bug #1782000 - CVE-2019-13753 sqlite: fts3: incorrectly removed corruption check
https://bugzilla.redhat.com/show_bug.cgi?id=1782000
[ 8 ] Bug #1782003 - CVE-2019-13756 chromium-browser: Incorrect security UI in printing
https://bugzilla.redhat.com/show_bug.cgi?id=1782003
[ 9 ] Bug #1782002 - CVE-2019-13755 chromium-browser: Insufficient policy enforcement in
extensions
https://bugzilla.redhat.com/show_bug.cgi?id=1782002
[ 10 ] Bug #1782001 - CVE-2019-13754 chromium-browser: Insufficient policy enforcement
in extensions
https://bugzilla.redhat.com/show_bug.cgi?id=1782001
[ 11 ] Bug #1781998 - CVE-2019-13751 sqlite: fts3: improve detection of corrupted
records
https://bugzilla.redhat.com/show_bug.cgi?id=1781998
[ 12 ] Bug #1781999 - CVE-2019-13752 sqlite: fts3: improve shadow table corruption
detection
https://bugzilla.redhat.com/show_bug.cgi?id=1781999
[ 13 ] Bug #1781995 - CVE-2019-13749 chromium-browser: Incorrect security UI in Omnibox
https://bugzilla.redhat.com/show_bug.cgi?id=1781995
[ 14 ] Bug #1781993 - CVE-2019-13747 chromium-browser: Uninitialized Use in rendering
https://bugzilla.redhat.com/show_bug.cgi?id=1781993
[ 15 ] Bug #1781997 - CVE-2019-13750 sqlite: dropping of shadow tables not restricted in
defensive mode
https://bugzilla.redhat.com/show_bug.cgi?id=1781997
[ 16 ] Bug #1781992 - CVE-2019-13746 chromium-browser: Insufficient policy enforcement
in Omnibox
https://bugzilla.redhat.com/show_bug.cgi?id=1781992
[ 17 ] Bug #1781994 - CVE-2019-13748 chromium-browser: Insufficient policy enforcement
in developer tools
https://bugzilla.redhat.com/show_bug.cgi?id=1781994
[ 18 ] Bug #1781991 - CVE-2019-13745 chromium-browser: Insufficient policy enforcement
in audio
https://bugzilla.redhat.com/show_bug.cgi?id=1781991
[ 19 ] Bug #1781990 - CVE-2019-13743 chromium-browser: Incorrect security UI in external
protocol handling
https://bugzilla.redhat.com/show_bug.cgi?id=1781990
[ 20 ] Bug #1781987 - CVE-2019-13740 chromium-browser: Incorrect security UI in sharing
https://bugzilla.redhat.com/show_bug.cgi?id=1781987
[ 21 ] Bug #1781989 - CVE-2019-13742 chromium-browser: Incorrect security UI in Omnibox
https://bugzilla.redhat.com/show_bug.cgi?id=1781989
[ 22 ] Bug #1781988 - CVE-2019-13741 chromium-browser: Insufficient validation of
untrusted input in Blink
https://bugzilla.redhat.com/show_bug.cgi?id=1781988
[ 23 ] Bug #1781986 - CVE-2019-13739 chromium-browser: Incorrect security UI in Omnibox
https://bugzilla.redhat.com/show_bug.cgi?id=1781986
[ 24 ] Bug #1781985 - CVE-2019-13738 chromium-browser: Insufficient policy enforcement
in navigation
https://bugzilla.redhat.com/show_bug.cgi?id=1781985
[ 25 ] Bug #1781983 - CVE-2019-13736 chromium-browser: Integer overflow in PDFium
https://bugzilla.redhat.com/show_bug.cgi?id=1781983
[ 26 ] Bug #1781984 - CVE-2019-13737 chromium-browser: Insufficient policy enforcement
in autocomplete
https://bugzilla.redhat.com/show_bug.cgi?id=1781984
[ 27 ] Bug #1781980 - CVE-2019-13734 sqlite: fts3: improve shadow table corruption
detection
https://bugzilla.redhat.com/show_bug.cgi?id=1781980
[ 28 ] Bug #1781982 - CVE-2019-13764 chromium-browser: Type Confusion in V8
https://bugzilla.redhat.com/show_bug.cgi?id=1781982
[ 29 ] Bug #1781981 - CVE-2019-13735 chromium-browser: Out of bounds write in V8
https://bugzilla.redhat.com/show_bug.cgi?id=1781981
[ 30 ] Bug #1781979 - CVE-2019-13732 chromium-browser: Use after free in WebAudio
https://bugzilla.redhat.com/show_bug.cgi?id=1781979
[ 31 ] Bug #1781978 - CVE-2019-13730 chromium-browser: Type Confusion in V8
https://bugzilla.redhat.com/show_bug.cgi?id=1781978
[ 32 ] Bug #1781974 - CVE-2019-13726 chromium-browser: Heap buffer overflow in password
manager
https://bugzilla.redhat.com/show_bug.cgi?id=1781974
[ 33 ] Bug #1781975 - CVE-2019-13727 chromium-browser: Insufficient policy enforcement
in WebSockets
https://bugzilla.redhat.com/show_bug.cgi?id=1781975
[ 34 ] Bug #1781976 - CVE-2019-13728 chromium-browser: Out of bounds write in V8
https://bugzilla.redhat.com/show_bug.cgi?id=1781976
[ 35 ] Bug #1781977 - CVE-2019-13729 chromium-browser: Use after free in WebSockets
https://bugzilla.redhat.com/show_bug.cgi?id=1781977
[ 36 ] Bug #1781973 - CVE-2019-13725 chromium-browser: Use after free in Bluetooth
https://bugzilla.redhat.com/show_bug.cgi?id=1781973
[ 37 ] Bug #1782021 - CVE-2019-13744 chromium-browser: Insufficient policy enforcement
in cookies
https://bugzilla.redhat.com/show_bug.cgi?id=1782021
[ 38 ] Bug #1782017 - CVE-2019-13758 chromium-browser: Insufficient policy enforcement
in navigation
https://bugzilla.redhat.com/show_bug.cgi?id=1782017
--------------------------------------------------------------------------------
================================================================================
clevis-11-6.fc30 (FEDORA-2019-ef9798d154)
Automated decryption framework
--------------------------------------------------------------------------------
Update Information:
Backport of upstream tests and fixes, including a fix for rhbz#1672371
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 19 2019 Sergio Correia <scorreia(a)redhat.com> - 11-6
- Backport of upstream tests and the following fixes:
- Rework the logic for reading the existing key
- fix for different output from 'luksAddKey' command w/cryptsetup v2.0.2 (
- pins/tang: check that key derivation key is available
- Backport of upstream PR#70 - Handle case where we try to use a partially
used luksmeta slot
Resolves: rhbz#1672371
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1672371 - clevis-luks binding error
https://bugzilla.redhat.com/show_bug.cgi?id=1672371
--------------------------------------------------------------------------------
================================================================================
geolite2-20191217-1.fc30 (FEDORA-2019-275d1554f0)
Free IP geolocation databases
--------------------------------------------------------------------------------
Update Information:
Latest upstream 20191217
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 19 2019 Carl George <carl(a)george.computer> - 20191217-1
- Latest upstream
--------------------------------------------------------------------------------
================================================================================
git-tools-2019.11-1.fc30 (FEDORA-2019-592b396f23)
Assorted git-related scripts and tools
--------------------------------------------------------------------------------
Update Information:
New upstream release 2019.11 (#1777999)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 19 2019 Greg Bailey <gbailey(a)lxpro.com> - 2019.11-1
- New upstream release 2019.11 (#1777999)
- several performance improvements
- use ISO datetime format
- refactor git calls into a convenience class
- improve documentation
- add several TODO and FIXME notes as a roadmap draft
- remove outdated benchmarks
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1777999 - git-tools-2019.11 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1777999
--------------------------------------------------------------------------------
================================================================================
granite-5.3.0-1.fc30 (FEDORA-2019-7e12a7b863)
elementary companion library for GTK+ and GLib
--------------------------------------------------------------------------------
Update Information:
Update to version 5.3.0. Release notes:
https://github.com/elementary/granite/releases/tag/5.3.0
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 19 2019 Fabio Valentini <decathorpe(a)gmail.com> - 5.3.0-1
- Update to version 5.3.0.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1783602 - granite-5.3.0-debian is available
https://bugzilla.redhat.com/show_bug.cgi?id=1783602
--------------------------------------------------------------------------------
================================================================================
icecat-68.3.0-2.gnu1.fc30 (FEDORA-2019-7991c48496)
GNU version of Firefox browser
--------------------------------------------------------------------------------
Update Information:
- Update desktop files
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 5 2019 Antonio Trande <sagitterATfedoraproject.org> - 68.3.0-2.gnu1
- Appdata file updated
- Description updated
--------------------------------------------------------------------------------
================================================================================
kernel-5.3.18-200.fc30 (FEDORA-2019-b433b5c4c3)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 5.3.18 update contains a number of important fixes across the tree
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 18 2019 Laura Abbott <labbott(a)redhat.com> - 5.3.18-200
- Linux v5.3.18
* Tue Dec 17 2019 Laura Abbott <labbott(a)redhat.com> - 5.3.17-200
- Linux v5.3.17
--------------------------------------------------------------------------------
================================================================================
libnitrokey-3.5-1.fc30 (FEDORA-2019-0da922411a)
Communicate with Nitrokey stick devices in a clean and easy manner
--------------------------------------------------------------------------------
Update Information:
Update libnitrokey to 3.5 and nitrokey-app to 1.4
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 19 2019 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 3.5-1
- Update to 3.5
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.4.1-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1723519 - libnitrokey-3.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1723519
[ 2 ] Bug #1690357 - nitrokey-app-1.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1690357
--------------------------------------------------------------------------------
================================================================================
libwebsockets-3.2.1-1.fc30 (FEDORA-2019-3216f32314)
A lightweight C library for Websockets
--------------------------------------------------------------------------------
Update Information:
Update to 3.2.1
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 19 2019 Peter Robinson <pbrobinson(a)fedoraproject.org> 3.2.1-1
- Update to 3.2.1
* Mon Sep 2 2019 Peter Robinson <pbrobinson(a)fedoraproject.org> 3.2.0-1
- Update to 3.2.0
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.1.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
magic-8.2.174-1.fc30 (FEDORA-2019-b1fc83620c)
A very capable VLSI layout tool
--------------------------------------------------------------------------------
Update Information:
New version 8.2.174 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 19 2019 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 8.2.174-1
- 8.2.174
--------------------------------------------------------------------------------
================================================================================
module-build-service-2.31.0-1.fc30 (FEDORA-2019-af8b072d9d)
The Module Build Service for Modularity
--------------------------------------------------------------------------------
Update Information:
## Changes * Use jinja templates to provide 'full-jobs' * Only allow cancelling
module builds in the init, wait, and build states * Remove the
koji.ClientSession backport * Gracefully handle builds without a koji tag *
Allow koji tags to be created with a configurable permission
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 19 2019 Mike McLean <mikem(a)redhat.com> - 2.31.0-1
- new version
--------------------------------------------------------------------------------
================================================================================
nethack-3.6.4-1.fc30 (FEDORA-2019-79b80b66d9)
A rogue-like single player dungeon exploration game
--------------------------------------------------------------------------------
Update Information:
Update to NetHack 3.6.4 - fixes security issue with privilege escalation:
http://nethack.org/security/index.html
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 19 2019 Ron Olson <tachoknight(a)gmail.com> - 3.6.4-1
- Update to NetHack 3.6.4
* Mon Dec 9 2019 Ron Olson <tachoknight(a)gmail.com> - 3.6.3-1
- Update to NetHack 3.6.3
--------------------------------------------------------------------------------
================================================================================
nfs-utils-2.4.2-3.rc3.fc30 (FEDORA-2019-d87446c53d)
NFS utilities and supporting clients and daemons for the kernel NFS server
--------------------------------------------------------------------------------
Update Information:
- Updated to the latest upstream RC release: nfs-utils-2-4-3-rc3 (bz 1782349) -
Remove rpc-svcgssd from auth-rpcgss-module (bz 1662737) - libnfsidmap: Turn off
default verbosity (bz 1774787)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 19 2019 Steve Dickson <steved(a)redhat.com> 2.4.2-3.rc3
- Updated to the latest upstream RC release: nfs-utils-2-4-3-rc3 (bz 1782349)
- Remove rpc-svcgssd from auth-rpcgss-module (bz 1662737)
- libnfsidmap: Turn off default verbosity (bz 1774787)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1782349 - nfs-utils-2-4-3-rc3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1782349
[ 2 ] Bug #1774787 - libnfsidmap is too chatty
https://bugzilla.redhat.com/show_bug.cgi?id=1774787
[ 3 ] Bug #1662737 - SystemD - auth-rpcgss-module wants rpc-svcgssd, which does not
appear to be shipped with Fedora Core 29
https://bugzilla.redhat.com/show_bug.cgi?id=1662737
--------------------------------------------------------------------------------
================================================================================
nitrokey-app-1.4-1.fc30 (FEDORA-2019-0da922411a)
Nitrokey's Application
--------------------------------------------------------------------------------
Update Information:
Update libnitrokey to 3.5 and nitrokey-app to 1.4
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 19 2019 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 1.4-1
- Update to 1.4
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.1-1.3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1723519 - libnitrokey-3.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1723519
[ 2 ] Bug #1690357 - nitrokey-app-1.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1690357
--------------------------------------------------------------------------------
================================================================================
openhantek-3.0.1-1.fc30 (FEDORA-2019-ec19b31e65)
Hantek and compatible USB digital signal oscilloscope
--------------------------------------------------------------------------------
Update Information:
Update to 3.0.1.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 19 2019 Vasiliy N. Glazov <vascom2(a)gmail.com> - 3.0.1-1
- Update to 3.0.1
--------------------------------------------------------------------------------
================================================================================
php-pecl-memcache-4.0.5.1-1.fc30 (FEDORA-2019-f9be5ed76b)
Extension to work with the Memcached caching daemon
--------------------------------------------------------------------------------
Update Information:
**Packaging change** * switch back to sources from
https://pecl.php.net/package/memcache * enable test suite during the build ---
**Version 4.0.5.1** * Fix crash when serialization fails
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 19 2019 Remi Collet <remi(a)remirepo.net> - 4.0.5.1-1
- update to 4.0.5.1 (no change)
- enable test suite
* Thu Dec 19 2019 Remi Collet <remi(a)remirepo.net> - 4.0.5-1
- update to 4.0.5
- switch back to sources from PECL
--------------------------------------------------------------------------------
================================================================================
php-psr-http-server-handler-1.0.1-1.fc30 (FEDORA-2019-aca5ec52fb)
Common interface for HTTP server-side request handler
--------------------------------------------------------------------------------
Update Information:
This repository holds the RequestHandlerInterface related to PSR-15 (HTTP Server
Request Handlers). Please refer to the specification for a description:
https://www.php-fig.org/psr/psr-15/ Autoloader:
/usr/share/php/Psr/Http/Server/autoload.php
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 16 2019 Remi Collet <remi(a)remirepo.net> - 1.0.1-1
- Initial package, version 1.0.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1783998 - Review Request: php-psr-http-server-handler - Common interface for
HTTP server-side request handler
https://bugzilla.redhat.com/show_bug.cgi?id=1783998
--------------------------------------------------------------------------------
================================================================================
php-sabre-vobject4-4.2.1-1.fc30 (FEDORA-2019-e1b9df9c66)
Library to parse and manipulate iCalendar and vCard objects
--------------------------------------------------------------------------------
Update Information:
**Version 4.2.1** (2019-12-18) * fix compat with php 7.4 * prevent running in
indefinte loop * Preventing creating a component for a root document * Fix parse
with option Forgiving with trailing equal * fixed typo in VCalendar which
resulting in usage of the wrong TimeZone * Broker::parseEventForOrganizer copies
DTSTAMP from $eventInfo that causes broken scheduling
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 19 2019 Remi Collet <remi(a)remirepo.net> - 4.2.1-1
- update to 4.2.1
--------------------------------------------------------------------------------
================================================================================
python-hdmf-1.4.0-1.fc30 (FEDORA-2019-a26c56154c)
A package for standardizing hierarchical object data
--------------------------------------------------------------------------------
Update Information:
python-hdmf update to v1.4.0 * Using an updated source * Using Legal.txt
separately as it is not included in the source
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 19 2019 Aniket Pradhan <major AT fedoraproject DOT org> - 1.4.0-1
- Update to v1.4.0
- Use bundled source along with the schema files
-
https://github.com/hdmf-dev/hdmf/issues/195
- Use Legal.txt as a separate source as it is not included in the source tar
- Remove unnecessary requirements
--------------------------------------------------------------------------------
================================================================================
python-tinydb-3.15.2-1.fc30 (FEDORA-2019-7bd5de4cbf)
TinyDB is a tiny, document oriented database
--------------------------------------------------------------------------------
Update Information:
Update to latest version 3.15.2 (bz1784964)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 19 2019 Sundeep Anand <suanand(a)redhat.com> - 3.15.2-1
- Update to latest version 3.15.2 (bz1784964)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1784964 - python-tinydb-3.15.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1784964
--------------------------------------------------------------------------------
================================================================================
rubygem-rouge-3.14.0-1.fc30 (FEDORA-2019-40e85962e4)
Pure-ruby colorizer based on pygments
--------------------------------------------------------------------------------
Update Information:
Update to version 3.14.0. Release notes:
https://github.com/rouge-
ruby/rouge/blob/v3.14.0/CHANGELOG.md
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 19 2019 Fabio Valentini <decathorpe(a)gmail.com> - 3.14.0-1
- Update to version 3.14.0.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1782383 - rubygem-rouge-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1782383
--------------------------------------------------------------------------------
================================================================================
wireshark-3.2.0-1.fc30 (FEDORA-2019-3ff073ec80)
Network traffic analyzer
--------------------------------------------------------------------------------
Update Information:
New version 3.2.0
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 19 2019 Michal Ruprich <mruprich(a)redhat.com> - 1:3.2.0-1
- New version 3.2.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1773805 - wireshark-3.2.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1773805
--------------------------------------------------------------------------------
================================================================================
wordpress-5.3.2-1.fc30 (FEDORA-2019-da7b49a4b1)
Blog tool and publishing platform
--------------------------------------------------------------------------------
Update Information:
**WordPress 5.3.2 Maintenance Release** Shortly after WordPress 5.3.1 was
released, a couple of high severity Trac tickets were opened. The Core team
scheduled this quick maintenance release to resolve these issues. Main issues
addressed in 5.3.2: * Date/Time: Ensure that get_feed_build_date() correctly
handles a modified post object with invalid date. * Uploads: Fix file name
collision in wp_unique_filename() when uploading a file with upper case
extension on non case-sensitive file systems. * Media: Fix PHP warnings in
wp_unique_filename() when the destination directory is unreadable. *
Administration: Fix the colors in all color schemes for buttons with the .active
class. * Posts, Post Types: In wp_insert_post(), when checking the post date
to set future or publish status, use a proper delta comparison. ---- See:
[WordPress 5.3.1 Security and Maintenance
Release](https://wordpress.org/news/2019/12/wordpress-5-3-1-security-and-
maintenance-release/) **Four security issues** affect WordPress versions 5.3
and earlier; version 5.3.1 fixes them, so you���ll want to upgrade. If you haven���t
yet updated to 5.3, there are also updated versions of 5.2 and earlier that fix
the security issues. * Props to Daniel Bachhuber for finding an issue where
an unprivileged user could make a post sticky via the REST API. * Props to
Simon Scannell of RIPS Technologies for finding and disclosing an issue where
cross-site scripting (XSS) could be stored in well-crafted links. * Props to
the
WordPress.org Security Team for hardening wp_kses_bad_protocol() to ensure
that it is aware of the named colon attribute. * Props to Nguyen The Duc for
discovering a stored XSS vulnerability using block editor content.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 19 2019 Remi Collet <remi(a)remirepo.net> - 5.3.2-1
- WordPress 5.3.2 Maintenance Release
* Fri Dec 13 2019 Remi Collet <remi(a)remirepo.net> - 5.3.1-1
- WordPress 5.3.1 Security and Maintenance Release
--------------------------------------------------------------------------------