The following Fedora 30 Security updates need testing: Age URL 116 https://bodhi.fedoraproject.org/updates/FEDORA-2019-71b2273a9f libarchive-3.3.3-7.fc30 6 https://bodhi.fedoraproject.org/updates/FEDORA-2020-0cab7041f7 ansible-2.9.6-1.fc30 5 https://bodhi.fedoraproject.org/updates/FEDORA-2020-4d232b48b8 weechat-2.7.1-1.fc30 4 https://bodhi.fedoraproject.org/updates/FEDORA-2020-a69f99bc67 php-horde-Horde-Form-2.0.20-1.fc30 2 https://bodhi.fedoraproject.org/updates/FEDORA-2020-40fa1ae94b libxslt-1.1.34-1.fc30 2 https://bodhi.fedoraproject.org/updates/FEDORA-2020-4c3d74204a nethack-3.6.6-1.fc30 1 https://bodhi.fedoraproject.org/updates/FEDORA-2020-79f233b15e chromium-80.0.3987.132-1.fc30 1 https://bodhi.fedoraproject.org/updates/FEDORA-2020-f3fa778924 webkit2gtk3-2.28.0-5.fc30
The following Fedora 30 Critical Path updates have yet to be approved: Age URL 247 https://bodhi.fedoraproject.org/updates/FEDORA-2019-c05e4425d1 dash-0.5.10.2-3.fc30 116 https://bodhi.fedoraproject.org/updates/FEDORA-2019-71b2273a9f libarchive-3.3.3-7.fc30 13 https://bodhi.fedoraproject.org/updates/FEDORA-2020-3c0dd5e756 pcre-8.44-1.fc30 11 https://bodhi.fedoraproject.org/updates/FEDORA-2020-4f4ab30209 glusterfs-6.8-1.fc30 11 https://bodhi.fedoraproject.org/updates/FEDORA-2020-c47f499c3b hwdata-0.333-1.fc30 10 https://bodhi.fedoraproject.org/updates/FEDORA-2020-f13060e7a5 vim-8.2.348-1.fc30 9 https://bodhi.fedoraproject.org/updates/FEDORA-2020-36282d2a6d cups-2.2.12-6.fc30 7 https://bodhi.fedoraproject.org/updates/FEDORA-2020-6ff1ecb240 gnome-software-3.32.4-7.fc30 7 https://bodhi.fedoraproject.org/updates/FEDORA-2020-6f6589f3ef ceph-14.2.8-1.fc30 6 https://bodhi.fedoraproject.org/updates/FEDORA-2020-09e7d027b6 koji-1.20.1-1.fc30 python-pycdio-2.0.0-8.fc30 2 https://bodhi.fedoraproject.org/updates/FEDORA-2020-40fa1ae94b libxslt-1.1.34-1.fc30 1 https://bodhi.fedoraproject.org/updates/FEDORA-2020-7eb53be2a5 perl-Encode-3.04-13.fc30 1 https://bodhi.fedoraproject.org/updates/FEDORA-2020-b6287eafe3 dnsmasq-2.80-12.fc30
The following builds have been pushed to Fedora 30 updates-testing
PackageKit-1.1.12-8.fc30 cros-guest-tools-1.0-0.29.20200313git1d204a4.fc30 dnf-plugins-extras-4.0.8-4.fc30 gsequencer-3.2.0-0.fc30 kernel-5.5.9-100.fc30 kernel-headers-5.5.9-100.fc30 kernel-tools-5.5.9-100.fc30 latexmk-4.69-1.fc30 libdnf-0.43.1-5.fc30 nss-3.50.0-2.fc30 perl-YAML-1.29-5.fc30 php-horde-Horde-Image-2.6.1-1.fc30 php-horde-Horde-Socket-Client-2.1.3-1.fc30 postfix-3.4.10-1.fc30 pungi-4.2.1-1.fc30 python-openshift-0.10.3-1.fc30 python3-3.7.7-1.fc30 python3-docs-3.7.7-1.fc30 rust-1.42.0-1.fc30 tomcat-9.0.31-2.fc30 tpm2-tss-engine-1.0.1-2.fc30 vdr-epg2vdr-1.1.112-1.fc30 whipper-0.9.0-6.fc30
Details about builds:
================================================================================ PackageKit-1.1.12-8.fc30 (FEDORA-2020-02ee4b1a1c) Package management service -------------------------------------------------------------------------------- Update Information:
libdnf: - Backport patch to reset active modules when no module enabled or default (RhBug:1767351), backport patch to allow PackageKit to do the same thing (RhBug:1804564) dnf-plugins-extras: - Reset all modules on system-upgrade (RhBug:1767351) PackageKit: - Reset all modules on upgrade to Fedora 32 (RhBug:1804564) -------------------------------------------------------------------------------- ChangeLog:
* Fri Mar 13 2020 Stephen Gallagher sgallagh@redhat.com - 1.1.12-8 - Fix issue where transaction simulations were resetting all module streams (#1813237) * Thu Mar 12 2020 Stephen Gallagher sgallagh@redhat.com - 1.1.12-7 - Reset all module streams when upgrading to Fedora 32 (#1804564) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1767351 - Cannot upgrade to Fedora 32: Modules blocking the upgrade path https://bugzilla.redhat.com/show_bug.cgi?id=1767351 --------------------------------------------------------------------------------
================================================================================ cros-guest-tools-1.0-0.29.20200313git1d204a4.fc30 (FEDORA-2020-4ad45f6849) Chromium OS integration meta package -------------------------------------------------------------------------------- Update Information:
Update to latest master commit -------------------------------------------------------------------------------- ChangeLog:
* Fri Mar 13 2020 Jason Montleon jmontleo@redhat.com - 1.0-0.29.20200313git1d204a4 - Update to master 1d204a4 * Wed Mar 4 2020 Jason Montleon jmontleo@redhat.com - 1.0-0.28.20200304gitd2e19d8 - Update to master d2e19d8 --------------------------------------------------------------------------------
================================================================================ dnf-plugins-extras-4.0.8-4.fc30 (FEDORA-2020-02ee4b1a1c) Extras Plugins for DNF -------------------------------------------------------------------------------- Update Information:
libdnf: - Backport patch to reset active modules when no module enabled or default (RhBug:1767351), backport patch to allow PackageKit to do the same thing (RhBug:1804564) dnf-plugins-extras: - Reset all modules on system-upgrade (RhBug:1767351) PackageKit: - Reset all modules on upgrade to Fedora 32 (RhBug:1804564) -------------------------------------------------------------------------------- ChangeLog:
* Fri Mar 6 2020 Adam Williamson awilliam@redhat.com - 4.0.8-4 - Tweak module reset patch to also do reset in `run_upgrade` (RhBug:1767351) * Fri Mar 6 2020 Ales Matej amatej@redhat.com - 4.0.8-3 - Fix patch to fix distribution issues with missing upgrade path between dist versions (RhBug:1767351) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1767351 - Cannot upgrade to Fedora 32: Modules blocking the upgrade path https://bugzilla.redhat.com/show_bug.cgi?id=1767351 --------------------------------------------------------------------------------
================================================================================ gsequencer-3.2.0-0.fc30 (FEDORA-2020-7b48d6fa07) Audio processing engine -------------------------------------------------------------------------------- Update Information:
updated Source to point to new minor version directory -------------------------------------------------------------------------------- ChangeLog:
* Fri Mar 13 2020 Jo��l Kr��hemann jkraehemann@gmail.com 3.2.0-0 - updated Source to point to new minor version directory --------------------------------------------------------------------------------
================================================================================ kernel-5.5.9-100.fc30 (FEDORA-2020-57216f2e13) The Linux kernel -------------------------------------------------------------------------------- Update Information:
The 5.5.9 stable kernel update contains a number of important fixes across the tree. -------------------------------------------------------------------------------- ChangeLog:
* Thu Mar 12 2020 Justin M. Forbes jforbes@fedoraproject.org - 5.5.9-100 - Linux v5.5.9 * Mon Mar 9 2020 Hans de Goede hdegoede@redhat.com - Fix backtraces on various buggy BIOS-es (rhbz 1564895, 1808874) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1564895 - [abrt] dmar_validate_one_drhd: WARNING: CPU: 0 PID: 0 at drivers/iommu/dmar.c:848 warn_invalid_dmar.part.9+0x57/0x60 https://bugzilla.redhat.com/show_bug.cgi?id=1564895 [ 2 ] Bug #1808874 - [abrt] dmar_walk_remapping_entries: WARNING: CPU: 0 PID: 0 at drivers/iommu/intel-iommu.c:4326 dmar_parse_one_rmrr+0x7d/0x12b https://bugzilla.redhat.com/show_bug.cgi?id=1808874 [ 3 ] Bug #1789155 - non-existent devices appeared after 5.4.7 kernel update https://bugzilla.redhat.com/show_bug.cgi?id=1789155 --------------------------------------------------------------------------------
================================================================================ kernel-headers-5.5.9-100.fc30 (FEDORA-2020-57216f2e13) Header files for the Linux kernel for use by glibc -------------------------------------------------------------------------------- Update Information:
The 5.5.9 stable kernel update contains a number of important fixes across the tree. -------------------------------------------------------------------------------- ChangeLog:
* Thu Mar 12 2020 Justin M. Forbes jforbes@fedoraproject.org - 5.5.9-100 - Linux v5.5.9 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1564895 - [abrt] dmar_validate_one_drhd: WARNING: CPU: 0 PID: 0 at drivers/iommu/dmar.c:848 warn_invalid_dmar.part.9+0x57/0x60 https://bugzilla.redhat.com/show_bug.cgi?id=1564895 [ 2 ] Bug #1808874 - [abrt] dmar_walk_remapping_entries: WARNING: CPU: 0 PID: 0 at drivers/iommu/intel-iommu.c:4326 dmar_parse_one_rmrr+0x7d/0x12b https://bugzilla.redhat.com/show_bug.cgi?id=1808874 [ 3 ] Bug #1789155 - non-existent devices appeared after 5.4.7 kernel update https://bugzilla.redhat.com/show_bug.cgi?id=1789155 --------------------------------------------------------------------------------
================================================================================ kernel-tools-5.5.9-100.fc30 (FEDORA-2020-57216f2e13) Assortment of tools for the Linux kernel -------------------------------------------------------------------------------- Update Information:
The 5.5.9 stable kernel update contains a number of important fixes across the tree. -------------------------------------------------------------------------------- ChangeLog:
* Thu Mar 12 2020 Justin M. Forbes jforbes@fedoraproject.org - 5.5.9-200 - Linux v5.5.9 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1564895 - [abrt] dmar_validate_one_drhd: WARNING: CPU: 0 PID: 0 at drivers/iommu/dmar.c:848 warn_invalid_dmar.part.9+0x57/0x60 https://bugzilla.redhat.com/show_bug.cgi?id=1564895 [ 2 ] Bug #1808874 - [abrt] dmar_walk_remapping_entries: WARNING: CPU: 0 PID: 0 at drivers/iommu/intel-iommu.c:4326 dmar_parse_one_rmrr+0x7d/0x12b https://bugzilla.redhat.com/show_bug.cgi?id=1808874 [ 3 ] Bug #1789155 - non-existent devices appeared after 5.4.7 kernel update https://bugzilla.redhat.com/show_bug.cgi?id=1789155 --------------------------------------------------------------------------------
================================================================================ latexmk-4.69-1.fc30 (FEDORA-2020-6d237a26e3) A make-like utility for LaTeX files -------------------------------------------------------------------------------- Update Information:
Changes in version 4.69: - Add -E option to default command for xdvipdfmx, to match call made by xetex. This forces xdvipdfmx to always try to embed fonts. - Add -MSWinBackSlash -MSWinBackSlash- options (and corresponding configuration variable $MSWin_back_slash) to control whether directory separator '' is used for filenames on command line for called programs under MSWin. -MSWinBackSlash- needs to be used when TeXLive is used on MSWin and the TeX filename includes a directory component. - When command-line-specified tex file not found, test for cusdep to make it, then try kpsewhich, and only if all 3 fail report an error. - Remove use of $extension_treatment: Too hard to check. Always use what was called 'unix' method, which all *latex implementations now use. - Improve some warning messages. - Fix bug when -cd and -outdir are used, and outdir is same as document directory. (Bug is caused by problem in perl module Cwd.) - Report rc files read -------------------------------------------------------------------------------- ChangeLog:
* Thu Mar 12 2020 Jerry James loganjerry@gmail.com - 4.69-1 - Update to 4.69 * Wed Jan 29 2020 Fedora Release Engineering releng@fedoraproject.org - 4.67-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ libdnf-0.43.1-5.fc30 (FEDORA-2020-02ee4b1a1c) Library providing simplified C and Python API to libsolv -------------------------------------------------------------------------------- Update Information:
libdnf: - Backport patch to reset active modules when no module enabled or default (RhBug:1767351), backport patch to allow PackageKit to do the same thing (RhBug:1804564) dnf-plugins-extras: - Reset all modules on system-upgrade (RhBug:1767351) PackageKit: - Reset all modules on upgrade to Fedora 32 (RhBug:1804564) -------------------------------------------------------------------------------- ChangeLog:
* Thu Mar 12 2020 Stephen Gallagher sgallagh@redhat.com - 0.43.1-5 - Backport new API for resetting all modules * Fri Mar 6 2020 Ales Matej amatej@redhat.com - 0.43.1-4 - Backport patch to reset active modules when no module enabled or default (1767351) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1767351 - Cannot upgrade to Fedora 32: Modules blocking the upgrade path https://bugzilla.redhat.com/show_bug.cgi?id=1767351 --------------------------------------------------------------------------------
================================================================================ nss-3.50.0-2.fc30 (FEDORA-2020-94049d2962) Network Security Services -------------------------------------------------------------------------------- Update Information:
This fixes issues related to CMAC by backporting the changes from upstream 3.51 release: - https://bugzilla.mozilla.org/show_bug.cgi?id=1611209 - https://bugzilla.mozilla.org/show_bug.cgi?id=1610687 -------------------------------------------------------------------------------- ChangeLog:
* Thu Mar 5 2020 Daiki Ueno dueno@redhat.com - 3.50.0-2 - Apply CMAC fixes from upstream --------------------------------------------------------------------------------
================================================================================ perl-YAML-1.29-5.fc30 (FEDORA-2020-36971e9b57) YAML Ain't Markup Language (tm) -------------------------------------------------------------------------------- Update Information:
This update removes a non-free test file from the source package. -------------------------------------------------------------------------------- ChangeLog:
* Fri Mar 13 2020 Paul Howarth paul@city-fan.org - 1.29-5 - Remove non-free test file t/load-slides.t (#1813197, GH#219) * Fri Jul 26 2019 Fedora Release Engineering releng@fedoraproject.org - 1.29-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Sun Jun 2 2019 Jitka Plesnikova jplesnik@redhat.com - 1.29-3 - Perl 5.30 re-rebuild of bootstrapped packages * Thu May 30 2019 Jitka Plesnikova jplesnik@redhat.com - 1.29-2 - Perl 5.30 rebuild * Sat May 11 2019 Paul Howarth paul@city-fan.org - 1.29-1 - Update to 1.29 - Fix regex for alias to match the one for anchors (GH#214) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1813197 - t/load-slides.t contains a non-free document https://bugzilla.redhat.com/show_bug.cgi?id=1813197 --------------------------------------------------------------------------------
================================================================================ php-horde-Horde-Image-2.6.1-1.fc30 (FEDORA-2020-67a741c6f6) Horde Image API -------------------------------------------------------------------------------- Update Information:
**Horde_Image 2.6.1** * [jan] Fix deprecation warnings with PHP 7.4 (Remi Collet GH PR #3). -------------------------------------------------------------------------------- ChangeLog:
* Fri Mar 13 2020 Remi Collet remi@remirepo.net - 2.6.1-1 - update to 2.6.1 --------------------------------------------------------------------------------
================================================================================ php-horde-Horde-Socket-Client-2.1.3-1.fc30 (FEDORA-2020-d38ecf5474) Horde Socket Client -------------------------------------------------------------------------------- Update Information:
**Horde_Socket_Client 2.1.3** * [jan] Fix setting `verify` context parameters (Christoph Wurst, GH PR #3). -------------------------------------------------------------------------------- ChangeLog:
* Fri Mar 13 2020 Remi Collet remi@remirepo.net - 2.1.3-1 - update to 2.1.3 --------------------------------------------------------------------------------
================================================================================ postfix-3.4.10-1.fc30 (FEDORA-2020-648eaacb14) Postfix Mail Transport Agent -------------------------------------------------------------------------------- Update Information:
This is new version of postfix. -------------------------------------------------------------------------------- ChangeLog:
* Thu Mar 12 2020 Jaroslav ��karvada jskarvad@redhat.com - 2:3.4.10-1 - New version Resolves: rhbz#1812987 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1812987 - postfix-3.4.10 is available https://bugzilla.redhat.com/show_bug.cgi?id=1812987 --------------------------------------------------------------------------------
================================================================================ pungi-4.2.1-1.fc30 (FEDORA-2020-cf70b906fd) Distribution compose tool -------------------------------------------------------------------------------- Update Information:
New upstream release. Performance improvements: * Pkgset phase will reuse entire package set if it was not modified from previous compose. * Gather phase can also reuse results from previous compose. * Better parallelization of small createrepo_c processes. * Extra files phase no longer waits for gathering. Minor fixes: * Options for customizing latest symlink. * Resend message while waiting for ostree ref to be created. * Config validation can accept overrides for schema, making the validation more strict. -------------------------------------------------------------------------------- ChangeLog:
* Fri Mar 13 2020 Lubom��r Sedl���� lsedlar@redhat.com - 4.2.1-1 - New upstream release --------------------------------------------------------------------------------
================================================================================ python-openshift-0.10.3-1.fc30 (FEDORA-2020-fdffd788b1) Python client for the OpenShift API -------------------------------------------------------------------------------- Update Information:
Update to 0.10.3 -------------------------------------------------------------------------------- ChangeLog:
* Fri Mar 13 2020 Jason Montleon jmontleo@redhat.com 1:0.10.3-1 - Update to 0.10.3 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1813157 - python-openshift-0.10.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1813157 --------------------------------------------------------------------------------
================================================================================ python3-3.7.7-1.fc30 (FEDORA-2020-fffba1c2dd) Interpreter of the Python programming language -------------------------------------------------------------------------------- Update Information:
Update to 3.7.7 -------------------------------------------------------------------------------- ChangeLog:
* Wed Mar 11 2020 Marcel Plch mplch@redhat.com - 3.7.7-1 - Update to 3.7.7 - Update the ensurepip module to work with setuptools >= 45 --------------------------------------------------------------------------------
================================================================================ python3-docs-3.7.7-1.fc30 (FEDORA-2020-fffba1c2dd) Documentation for the Python 3 programming language -------------------------------------------------------------------------------- Update Information:
Update to 3.7.7 -------------------------------------------------------------------------------- ChangeLog:
* Fri Mar 13 2020 Marcel Plch mplch@redhat.com - 3.7.7-1 - Update to 3.7.7 --------------------------------------------------------------------------------
================================================================================ rust-1.42.0-1.fc30 (FEDORA-2020-85547c8cb1) The Rust Programming Language -------------------------------------------------------------------------------- Update Information:
Update to Rust 1.42.0: - Useful line numbers in `Option` and `Result` panic messages - Subslice patterns - `matches!` - `use proc_macro::TokenStream;` now works - Libraries and Stabilized APIs See the [blog post](https://blog.rust- lang.org/2020/03/12/Rust-1.42.html) and [release notes](https://github.com/rust- lang/rust/blob/master/RELEASES.md#version-1420-2020-03-12) for more details. -------------------------------------------------------------------------------- ChangeLog:
* Thu Mar 12 2020 Josh Stone jistone@redhat.com - 1.42.0-1 - Update to 1.42.0. --------------------------------------------------------------------------------
================================================================================ tomcat-9.0.31-2.fc30 (FEDORA-2020-c870aa8378) Apache Servlet/JSP Engine, RI for Servlet 4.0/JSP 2.3 API -------------------------------------------------------------------------------- Update Information:
This update includes a rebase from 9.0.30 up to 9.0.31 which resolves one CVE along with various other bugs/features: * rhbz#1806805 CVE-2020-1938 tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability * rhbz#1801729 tomcat-9.0.31 is available **WARNING** - This update does *not* enforce the change in defaults for the AJP Connector like the upstream fix does. This is done to prevent breakage of current installations, but it is highly advised to review your AJP Connector configuration to ensure that it is only accessible by your proxy! For more information see the [Tomcat Security Page](https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.31) and the [Tomcat Security Considerations Document](https://tomcat.apache.org/tomcat-9.0-doc/security- howto.html#Connectors). -------------------------------------------------------------------------------- ChangeLog:
* Thu Mar 12 2020 Coty Sutherland csutherl@redhat.com - 1:9.0.31-2 - Related: rhbz#1806398 Undo changes in defaults for AJP connector (CVE-2020-1938) to prevent breakage, please update your configuration accordingly * Thu Mar 5 2020 Coty Sutherland csutherl@redhat.com - 1:9.0.31-1 - Update to 9.0.31 - Resolves: rhbz#1806398 - CVE-2020-1938 tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability --------------------------------------------------------------------------------
================================================================================ tpm2-tss-engine-1.0.1-2.fc30 (FEDORA-2020-8cf1cf267b) OpenSSL Engine for TPM2 devices using the tpm2-tss software stack -------------------------------------------------------------------------------- Update Information:
Move tpm2-tss.so from -devel to main package to fix missing engine error -------------------------------------------------------------------------------- ChangeLog:
* Sun Mar 1 2020 Mathias Zavala zvl.mathias@gmail.com - 1.0.1-2 - Move tpm2-tss.so from -devel to main package to fix missing engine error --------------------------------------------------------------------------------
================================================================================ vdr-epg2vdr-1.1.112-1.fc30 (FEDORA-2020-237e9c548e) A plugin to retrieve EPG data from a mysql database into VDR -------------------------------------------------------------------------------- Update Information:
Update to 1.1.112-1 -------------------------------------------------------------------------------- ChangeLog:
* Fri Mar 13 2020 Martin Gansser martinkg@fedoraproject.org - 1.1.112-1 - Update to 1.1.112 --------------------------------------------------------------------------------
================================================================================ whipper-0.9.0-6.fc30 (FEDORA-2020-595a93fabb) Python CD-DA ripper preferring accuracy over speed -------------------------------------------------------------------------------- Update Information:
Bump release for rebuild -------------------------------------------------------------------------------- ChangeLog:
* Thu Mar 12 2020 Matthew Ruszczyk mruszczyk17@gmail.com - 0.9.0-6 - Bump release for rebuild * Thu Mar 12 2020 Matthew Ruszczyk mruszczyk17@gmail.com - 0.9.0-5 - Bump release for rebuild * Tue Mar 10 2020 Matthew Ruszczyk mruszczyk17@gmail.com - 0.9.0-4 - Bump release for rebuild due to Koji outage * Tue Mar 10 2020 Matthew Ruszczyk mruszczyk17@gmail.com - 0.9.0-3 - Adjust pycdio to require python3 version * Fri Jan 31 2020 Fedora Release Engineering releng@fedoraproject.org - 0.9.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild --------------------------------------------------------------------------------