The following Fedora 30 Security updates need testing:
Age URL
11
https://bodhi.fedoraproject.org/updates/FEDORA-2019-cb031c7845
cutter-re-1.8.0-4.fc30 radare2-3.6.0-1.fc30
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-7723d4774a
python36-3.6.9-1.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d9aa58d863
python-django-2.1.10-1.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-f350634b40 fossil-2.8-1.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-50ee491d76
calamares-3.2.11-1.fc30
The following Fedora 30 Critical Path updates have yet to be approved:
Age URL
33
https://bodhi.fedoraproject.org/updates/FEDORA-2019-128d522632
libevdev-1.7.0-1.fc30
27
https://bodhi.fedoraproject.org/updates/FEDORA-2019-599e026ca8
osinfo-db-20190611-1.fc30
25
https://bodhi.fedoraproject.org/updates/FEDORA-2019-db12c4b65c
fcoe-utils-1.0.32-8.git9834b34.fc30
22
https://bodhi.fedoraproject.org/updates/FEDORA-2019-dd1633d7cb
switcheroo-control-1.3.1-1.fc30
22
https://bodhi.fedoraproject.org/updates/FEDORA-2019-926e24f840
libbluray-1.1.2-1.fc30
19
https://bodhi.fedoraproject.org/updates/FEDORA-2019-a632bc0f37
libXi-1.7.10-1.fc30
17
https://bodhi.fedoraproject.org/updates/FEDORA-2019-df50a7eda6
grubby-8.40-31.fc30
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d16a494ec4 gupnp-1.0.4-1.fc30
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-0d990c9ab0
squashfs-tools-4.3-21.fc30
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-096da9f649
ebtables-2.0.10-36.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-f9240f0b2a
pungi-4.1.38-1.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-40d8126737 xen-4.11.2-1.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c98ce2fc3a
anaconda-30.25.6-4.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-053574258e
net-snmp-5.8-10.fc30
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-1454e3114e
libreport-2.10.1-1.fc30
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-40c51ddce0
libbytesize-2.1-1.fc30
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-1581dc8822 pcre2-10.33-6.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-cbe8c0f8ff
libssh-0.9.0-2.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8ee97b1afc
tumbler-0.2.5-1.fc30 xfce4-appfinder-4.13.4-1.fc30 xfce4-screensaver-0.1.6-2.fc30
xfce4-settings-4.13.7-1.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-f43b43a12d
xfce4-session-4.13.3-1.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b93e18a080
garcon-0.6.3-2.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-1c6416a77c exo-0.12.6-2.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-7c0abb361e
xfconf-4.13.8-1.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-dda0c0899e
libxfce4ui-4.13.6-3.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-cbcf0fe60b
libxfce4util-4.13.4-3.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-bc337e43c1 sssd-2.2.0-3.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3328147b59
highlight-3.52-1.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-645cab930b
xorg-x11-server-1.20.5-4.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3cbfa218c4
gtk3-3.24.10-1.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8e2664fccc
librsvg2-2.45.7-1.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-0be4af9621
libgdata-0.17.10-1.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-da53789024
libgweather-3.32.2-1.fc30
The following builds have been pushed to Fedora 30 updates-testing
ansible-freeipa-0.1.5-2.fc30
cros-guest-tools-1.0-0.14.20190703gita30bd3e.fc30
eureka-1.24-1.fc30
fedfind-4.2.6-1.fc30
flatpak-1.4.2-2.fc30
freetds-1.1.11-1.fc30
gammaray-2.11.0-1.fc30
glib2-2.60.5-1.fc30
golang-github-jacobsa-ogletest-0-0.1.20190622git80d50a7.fc30
gsequencer-2.2.17-0.fc30
josm-0-0.97.15237svn.fc30
perl-Crypt-Rijndael-1.14-1.fc30
perl-Mojo-RabbitMQ-Client-0.2.2-4.fc30
php-netresearch-jsonmapper-1.5.1-1.fc30
podman-1.4.4-3.fc30
python-urllib3-1.24.3-2.fc30
python3-3.7.4-1.fc30
python3-docs-3.7.4-1.fc30
snownews-1.5.12-21.fc30
vim-latex-1.10.0-3.fc30
virt-bootstrap-1.1.1-1.fc30
xe-guest-utilities-7.12.0-1.fc30
Details about builds:
================================================================================
ansible-freeipa-0.1.5-2.fc30 (FEDORA-2019-e2e36dbeab)
Roles and playbooks to deploy FreeIPA servers, replicas and clients
--------------------------------------------------------------------------------
Update Information:
Update to ansible-freeipa 0.1.5 with lots of enhancements and fixes.
https://github.com/freeipa/ansible-freeipa/ Release information:
https://github.com/freeipa/ansible-freeipa/releases ---- New ansible-freeipa
package providing roles and playbooks to deploy FreeIPA servers, replicas and
clients
--------------------------------------------------------------------------------
================================================================================
cros-guest-tools-1.0-0.14.20190703gita30bd3e.fc30 (FEDORA-2019-90ba147226)
Chromium OS integration meta package
--------------------------------------------------------------------------------
Update Information:
Update to master a30bd3e.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 9 2019 Jason Montleon jmontleo(a)redhat.com 1.0-0.14.20190703gita30bd3e
- Removed cros-gpu and workaround services.
- Added an Environment setting to sommelier-x service to get it working instead
* Sun Jul 7 2019 Jason Montleon jmontleo(a)redhat.com 1.0-0.13.20190703gita30bd3e
- Added cros-gpu package with service to work around 3d acceleration issues.
* Wed Jul 3 2019 Jason Montleon jmontleo(a)redhat.com 1.0-0.12.20190703gita30bd3e
- Updated to master a30bd3e
- Removed tsched=0 fix. This is now default upstream
--------------------------------------------------------------------------------
================================================================================
eureka-1.24-1.fc30 (FEDORA-2019-a43685a53a)
A cross-platform map editor for the classic DOOM games
--------------------------------------------------------------------------------
Update Information:
1.24, plus icon and desktop file.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 9 2019 Gwyn Ciesla <gwync(a)protonmail.com> - 1.24-1
- 1.24
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1314844 - update 1.24
https://bugzilla.redhat.com/show_bug.cgi?id=1314844
--------------------------------------------------------------------------------
================================================================================
fedfind-4.2.6-1.fc30 (FEDORA-2019-4ab94b54da)
Fedora compose and image finder
--------------------------------------------------------------------------------
Update Information:
This new release of fedfind contains a single change. The regex used to identify
respin release images is updated to match the current name format. This fixes
fedfind so it is once again able to find these "releases". (The author would be
happy if the respin maintainer would stop changing the darn name format on a
whim).
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 9 2019 Adam Williamson <awilliam(a)redhat.com> - 4.2.6-1
- New release 4.2.6: update the respin image regex, again
--------------------------------------------------------------------------------
================================================================================
flatpak-1.4.2-2.fc30 (FEDORA-2019-be216af17e)
Application deployment framework for desktop apps
--------------------------------------------------------------------------------
Update Information:
Backport a patch that fixes a fairly large memory leak in gnome-software.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 9 2019 Kalev Lember <klember(a)redhat.com> - 1.4.2-2
- Backport a patch that fixes a fairly large memory leak in gnome-software
--------------------------------------------------------------------------------
================================================================================
freetds-1.1.11-1.fc30 (FEDORA-2019-f74072a45d)
Implementation of the TDS (Tabular DataStream) protocol
--------------------------------------------------------------------------------
Update Information:
Upgrade to 1.1.11
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 9 2019 Dmitry Butskoy <Dmitry(a)Butskoy.name> - 1.1.11-1
- Upgrade to 1.1.11 (#1728191)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1728191 - Private bug
https://bugzilla.redhat.com/show_bug.cgi?id=1728191
--------------------------------------------------------------------------------
================================================================================
gammaray-2.11.0-1.fc30 (FEDORA-2019-22407c98bf)
A tool for examining internals of Qt applications
--------------------------------------------------------------------------------
Update Information:
Gammaray 2.11.0 release.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 9 2019 Jan Grulich <jgrulich(a)redhat.com> - 2.11.0-1
- 2.11.0
- drop Qt4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1688050 - gammaray: FTBFS in Fedora rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1688050
--------------------------------------------------------------------------------
================================================================================
glib2-2.60.5-1.fc30 (FEDORA-2019-d0b4a899af)
A library of handy utility functions
--------------------------------------------------------------------------------
Update Information:
glib 2.60.5 release. * Fix implicit use of the `GKeyfileSettingsBackend`
(#1822) * Fix opening a URI using the ���Open URI��� portal (!968) * Bugs fixed:
- !910 Backport !909 ���D-Bus auth mechanism improvements��� to glib-2-60 - !949
Backport !945 ���Avoid overrunning stack at the end of the varargs.��� to glib-2-60
- !956 Backport !954 ���Fix the ISO 15924 code for Manichaean��� to glib-2-60 -
!958 gthread: fix minor errno problem in GCond - !969 Backport !968 ���Fix typo
in request handle��� to glib-2-60 - !977 Backport !974 ���Ensure that the keyfile
settings backend exists��� to glib-2-60
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 9 2019 Kalev Lember <klember(a)redhat.com> - 2.60.5-1
- Update to 2.60.5
--------------------------------------------------------------------------------
================================================================================
golang-github-jacobsa-ogletest-0-0.1.20190622git80d50a7.fc30 (FEDORA-2019-2b46152f27)
Go unit testing framework like Google Test for C++ and JS Test
--------------------------------------------------------------------------------
Update Information:
New package for F30
--------------------------------------------------------------------------------
================================================================================
gsequencer-2.2.17-0.fc30 (FEDORA-2019-f15a79a94d)
Audio processing engine
--------------------------------------------------------------------------------
Update Information:
updated Source to point to new minor version directory ---- updated Source to
point to new minor version directory
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
josm-0-0.97.15237svn.fc30 (FEDORA-2019-9aeef90c65)
An editor for OpenStreetMap (OSM)
--------------------------------------------------------------------------------
Update Information:
New upstream release (#1728083) ---- New upstream release (#1727672)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 9 2019 Jakub Jelen <jjelen(a)redhat.com> - 0-0.97.15237svn
- New upstream release (#1728083)
* Mon Jul 8 2019 Jakub Jelen <jjelen(a)redhat.com> - 0-0.96.15234svn
- New upstream release (#1727672)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1728083 - josm-15237 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1728083
[ 2 ] Bug #1727672 - josm-15234 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1727672
--------------------------------------------------------------------------------
================================================================================
perl-Crypt-Rijndael-1.14-1.fc30 (FEDORA-2019-a5213f4fc5)
Crypt::CBC compliant Rijndael encryption module
--------------------------------------------------------------------------------
Update Information:
Updated to the latest release.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 8 2019 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.14-1
- 1.14 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1720744 - perl-Crypt-Rijndael-1.14 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1720744
--------------------------------------------------------------------------------
================================================================================
perl-Mojo-RabbitMQ-Client-0.2.2-4.fc30 (FEDORA-2019-881122b3d2)
Mojo::IOLoop based RabbitMQ client
--------------------------------------------------------------------------------
Update Information:
This package contains the perl module Mojo::RabbitMQ::Client, a rewrite of
AnyEvent::RabbitMQ to work on top of Mojo::IOLoop.
--------------------------------------------------------------------------------
================================================================================
php-netresearch-jsonmapper-1.5.1-1.fc30 (FEDORA-2019-5f2e1d3dee)
Map nested JSON structures onto PHP classes
--------------------------------------------------------------------------------
Update Information:
**Version 1.5.1** - 2019-07-08 * Fix support for "mixed" in namespaced classes
---- **Version 1.5.0** - 2019-07-07 * Add support for PHP 7 scalar type hints
(issue #98) by @patrickallaert * Add support for namespaced classes in
classMap keys without backslash (issue #111) * Throw exception when an object
shall be converted into a string (pull request #106) by @m1ke * Throw
exception when an object is passed as value into a string array (pull request
#107) by @m1ke * Correctly support setting private properties defined in
parent classes (issue #109) * Use class map as early as possible (issues #96 and
#122)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 9 2019 Remi Collet <remi(a)remirepo.net> - 1.5.1-1
- update to 1.5.1
* Mon Jul 8 2019 Remi Collet <remi(a)remirepo.net> - 1.5.0-1
- update to 1.5.0
--------------------------------------------------------------------------------
================================================================================
podman-1.4.4-3.fc30 (FEDORA-2019-026b647550)
Manage Pods, Containers and Container Images
--------------------------------------------------------------------------------
Update Information:
correct 1.4.4 commit
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 8 2019 bbaude <bbaude(a)redhat.com> - 2:1.4.4-3
- correct 1.4.4 commit
* Mon Jul 8 2019 bbaude <bbaude(a)redhat.com> - 2:1.4.4-2
- Add runtime depend for libseccomp
--------------------------------------------------------------------------------
================================================================================
python-urllib3-1.24.3-2.fc30 (FEDORA-2019-e6e11be2a6)
Python HTTP library with thread-safe connection pooling and file post
--------------------------------------------------------------------------------
Update Information:
Update the RECENT_DATE for detecting system clock problems in TLS verification.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 8 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 1.24.3-2
- Set RECENT_DATE not to be older than 2 years (#1727796)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1727796 - python-urllib3 fails to build: Too old
urllib3.connection.RECENT_DATE
https://bugzilla.redhat.com/show_bug.cgi?id=1727796
--------------------------------------------------------------------------------
================================================================================
python3-3.7.4-1.fc30 (FEDORA-2019-9bfb4a3e4b)
Interpreter of the Python programming language
--------------------------------------------------------------------------------
Update Information:
[Python
3.7.4](https://www.python.org/downloads/release/python-374/) is the
fourth and most recent maintenance release of Python 3.7. [Changelog for
final](https://docs.python.org/3.7/whatsnew/changelog.html#python-3-7-4-f...,
[3.7.4 release candidate
2](https://docs.python.org/3.7/whatsnew/changelog.html#python-3-7-4-release-
candidate-2) and [3.7.4 release candidate
1](https://docs.python.org/3.7/whatsnew/changelog.html#python-3-7-4-release-
candidate-1). Contains security fixes for CVE-2019-9948 and CVE-2019-10160.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 9 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 3.7.4-1
- Update to 3.7.4
* Tue Jul 2 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 3.7.4~rc2-1
- Update to 3.7.4rc2
* Tue Jun 25 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 3.7.4~rc1-1
- Update to 3.7.4rc1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1695570 - CVE-2019-9948 python: undocumented local_file protocol allows
remote attackers to bypass protection mechanisms
https://bugzilla.redhat.com/show_bug.cgi?id=1695570
[ 2 ] Bug #1718388 - CVE-2019-10160 python: regression of CVE-2019-9636 due to
functional fix to allow port numbers in netloc
https://bugzilla.redhat.com/show_bug.cgi?id=1718388
--------------------------------------------------------------------------------
================================================================================
python3-docs-3.7.4-1.fc30 (FEDORA-2019-9bfb4a3e4b)
Documentation for the Python 3 programming language
--------------------------------------------------------------------------------
Update Information:
[Python
3.7.4](https://www.python.org/downloads/release/python-374/) is the
fourth and most recent maintenance release of Python 3.7. [Changelog for
final](https://docs.python.org/3.7/whatsnew/changelog.html#python-3-7-4-f...,
[3.7.4 release candidate
2](https://docs.python.org/3.7/whatsnew/changelog.html#python-3-7-4-release-
candidate-2) and [3.7.4 release candidate
1](https://docs.python.org/3.7/whatsnew/changelog.html#python-3-7-4-release-
candidate-1). Contains security fixes for CVE-2019-9948 and CVE-2019-10160.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 9 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 3.7.4-1
- Update to 3.7.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1695570 - CVE-2019-9948 python: undocumented local_file protocol allows
remote attackers to bypass protection mechanisms
https://bugzilla.redhat.com/show_bug.cgi?id=1695570
[ 2 ] Bug #1718388 - CVE-2019-10160 python: regression of CVE-2019-9636 due to
functional fix to allow port numbers in netloc
https://bugzilla.redhat.com/show_bug.cgi?id=1718388
--------------------------------------------------------------------------------
================================================================================
snownews-1.5.12-21.fc30 (FEDORA-2019-575260aad9)
A text mode RSS/RDF newsreader
--------------------------------------------------------------------------------
Update Information:
This release fixes building this package.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 9 2019 Petr Pisar <ppisar(a)redhat.com> - 1.5.12-21
- Build with openssl-1.0.2 (bug #1606839)
* Sun Feb 3 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5.12-20
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5.12-19
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5.12-18
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Thu Aug 3 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5.12-17
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Thu Jul 27 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5.12-16
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1606839 - snownews: FTBFS in Fedora ��� 29: conversions.c:621:13: error:
storage size of 'mdctx' isn't known
https://bugzilla.redhat.com/show_bug.cgi?id=1606839
--------------------------------------------------------------------------------
================================================================================
vim-latex-1.10.0-3.fc30 (FEDORA-2019-cd833dc698)
Tools to view, edit and compile LaTeX documents in Vim
--------------------------------------------------------------------------------
Update Information:
This release fixes building by using Python 3 instead of a deprecated
unversioned Python.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 9 2019 Petr Pisar <ppisar(a)redhat.com> - 1.10.0-3
- Use Python 3 (bug #1676189)
* Sun Feb 3 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.10.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1676189 - vim-latex: FTBFS in Fedora rawhide/f30: ambiguous python shebang in
/usr/share/vim/vimfiles/ftplugin/latex-suite/outline.py: #!/usr/bin/env python
https://bugzilla.redhat.com/show_bug.cgi?id=1676189
--------------------------------------------------------------------------------
================================================================================
virt-bootstrap-1.1.1-1.fc30 (FEDORA-2019-2084f9e721)
System container rootfs creation tool
--------------------------------------------------------------------------------
Update Information:
Update to new upstream release: 1.1.1 Security fix for CVE-2019-13314
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 9 2019 Fabiano Fid��ncio <fabiano(a)fidencio.org> - 1.1.1-1
- Update to new upstream release: 1.1.1
- Resolves: rhbz#1727771
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1727770 - CVE-2019-13314 virt-bootstrap: allows local users to discover root
password via process listing
https://bugzilla.redhat.com/show_bug.cgi?id=1727770
--------------------------------------------------------------------------------
================================================================================
xe-guest-utilities-7.12.0-1.fc30 (FEDORA-2019-fd39f12229)
XAPI Virtual Machine Monitoring Scripts
--------------------------------------------------------------------------------
Update Information:
Scripts for monitoring XAPI project virtual machine.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1707711 - Review Request: xe-guest-utilities - XAPI Virtual Machine
Monitoring Scripts
https://bugzilla.redhat.com/show_bug.cgi?id=1707711
--------------------------------------------------------------------------------