The following Fedora 30 Security updates need testing:
Age URL
19
https://bodhi.fedoraproject.org/updates/FEDORA-2020-2b53cff132
thunderbird-68.7.0-1.fc30
9
https://bodhi.fedoraproject.org/updates/FEDORA-2020-cbc3149753 xen-4.11.4-1.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2020-e244c98af5 libldb-1.5.7-1.fc30
samba-4.10.15-0.fc30
5
https://bodhi.fedoraproject.org/updates/FEDORA-2020-0d6b80678a
teeworlds-0.7.5-1.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-fa71ca92f8
wordpress-5.4.1-1.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-57f2df7424
roundcubemail-1.4.4-1.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-20ac7c92a1
community-mysql-8.0.20-1.fc30
The following Fedora 30 Critical Path updates have yet to be approved:
Age URL
299
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c05e4425d1
dash-0.5.10.2-3.fc30
19
https://bodhi.fedoraproject.org/updates/FEDORA-2020-2b53cff132
thunderbird-68.7.0-1.fc30
12
https://bodhi.fedoraproject.org/updates/FEDORA-2020-44d12740d8 ceph-14.2.9-1.fc30
12
https://bodhi.fedoraproject.org/updates/FEDORA-2020-fd4d0014e1
python2-2.7.18-1.fc30 python2-docs-2.7.18-1.fc30
10
https://bodhi.fedoraproject.org/updates/FEDORA-2020-0f078e7280
pyproject-rpm-macros-0-14.fc30 python-pip-19.0.3-7.fc30
10
https://bodhi.fedoraproject.org/updates/FEDORA-2020-184ff81bcd
glusterfs-6.9-1.fc30
9
https://bodhi.fedoraproject.org/updates/FEDORA-2020-cbc3149753 xen-4.11.4-1.fc30
7
https://bodhi.fedoraproject.org/updates/FEDORA-2020-0afe424fbd
corosync-3.0.4-1.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2020-e244c98af5 libldb-1.5.7-1.fc30
samba-4.10.15-0.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-5088f068f4 koji-1.21.0-2.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-4d7243aae8
gpgme-1.13.1-7.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-3a3d3c95ff
gnupg2-2.2.20-2.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-ca9a886202 pungi-4.2.2-1.fc30
The following builds have been pushed to Fedora 30 updates-testing
erlang-21.3.8.15-1.fc30
gsi-openssh-8.0p1-6.fc30
hwdata-0.335-1.fc30
java-1.8.0-openjdk-1.8.0.252.b09-0.fc30
nohang-0.1-28.20200504gita794396.fc30
openscap-1.3.3-2.fc30
perl-Encode-3.06-15.fc30
perl-Gtk3-SimpleList-0.20-1.fc30
python-click-7.1.1-1.fc30.1
python-django-haystack-3.0-0.1.b2.fc30
seamonkey-2.53.2-1.fc30
Details about builds:
================================================================================
erlang-21.3.8.15-1.fc30 (FEDORA-2020-674c0763d6)
General-purpose programming language and runtime environment
--------------------------------------------------------------------------------
Update Information:
Erlang ver. 21.3.8.15
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 4 2020 Peter Lemenkov <lemenkov(a)gmail.com> - 21.3.8.15-1
- Ver. 21.3.8.15
--------------------------------------------------------------------------------
================================================================================
gsi-openssh-8.0p1-6.fc30 (FEDORA-2020-09eae2a007)
An implementation of the SSH protocol with GSI authentication
--------------------------------------------------------------------------------
Update Information:
Fix a missing buffer allocation in the gsissh patch.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 4 2020 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 8.0p1-6
- Add missing buffer initialization in gsissh patch
--------------------------------------------------------------------------------
================================================================================
hwdata-0.335-1.fc30 (FEDORA-2020-ccdb66af9b)
Hardware identification and configuration data
--------------------------------------------------------------------------------
Update Information:
Update pci and vendor ids
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 4 2020 Vitezslav Crhonek <vcrhonek(a)redhat.com> - 0.335-1
- Update pci and vendor ids
--------------------------------------------------------------------------------
================================================================================
java-1.8.0-openjdk-1.8.0.252.b09-0.fc30 (FEDORA-2020-21ca991b3b)
OpenJDK Runtime Environment 8
--------------------------------------------------------------------------------
Update Information:
Update to OpenJDK 8u252 (April Critical Patch Update) - JDK-8223898,
CVE-2020-2754: Forward references to Nashorn - JDK-8223904, CVE-2020-2755:
Improve Nashorn matching - JDK-8224541, CVE-2020-2756: Better mapping of serial
ENUMs - JDK-8224549, CVE-2020-2757: Less Blocking Array Queues - JDK-8225603:
Enhancement for big integers - JDK-8227542: Manifest improved jar headers -
JDK-8231415, CVE-2020-2773: Better signatures in XML - JDK-8233250: Better X11
rendering - JDK-8233410: Better Build Scripting - JDK-8234027: Better JCEKS
key support - JDK-8234408, CVE-2020-2781: Improve TLS session handling -
JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers - JDK-8234841,
CVE-2020-2803: Enhance buffering of byte buffers - JDK-8235274, CVE-2020-2805:
Enhance typing of methods - JDK-8236201, CVE-2020-2830: Better Scanner
conversions - JDK-8238960: linux-i586 builds are inconsistent as the newly
build jdk is not able to reserve enough space for object heap Full release
notes:
https://bitly.com/oj8u252
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 3 2020 Andrew John Hughes <gnu.andrew(a)redhat.com> - 1:1.8.0.252.b09-0
- Update to aarch64-shenandoah-jdk8u242-b09.
- Switch to GA mode for final release.
- Add release notes.
- Adjust PR2974/RH1337583 & PR3083/RH1346460 following context changes in JDK-8230978
* Sun May 3 2020 Andrew Hughes <gnu.andrew(a)redhat.com> - 1:1.8.0.252.b01-0.1.ea
- Update to aarch64-shenandoah-jdk8u252-b01.
- Switch to EA mode.
- Adjust JDK-8199936/PR3533 patch following JDK-8227397 configure change
- Make use of --with-extra-asflags introduced in jdk8u252-b01.
- Drop obsolete local patch, JDK-8219772, now that ASFLAGS are properly handled.
* Fri Mar 13 2020 Andrew John Hughes <gnu.andrew(a)redhat.com> - 1:1.8.0.242.b08-1
- Sync SystemTap & desktop files with upstream IcedTea release 3.15.0, removing
previous workarounds
--------------------------------------------------------------------------------
================================================================================
nohang-0.1-28.20200504gita794396.fc30 (FEDORA-2020-c4747f47a2)
Sophisticated low memory handler for Linux
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 4 2020 Artem Polishchuk <ego.cordatus(a)gmail.com> -
0.1-28.20200504gita794396
- Update to latest git snapshot
--------------------------------------------------------------------------------
================================================================================
openscap-1.3.3-2.fc30 (FEDORA-2020-dea4710501)
Set of open source libraries enabling integration of the SCAP line of standards
--------------------------------------------------------------------------------
Update Information:
Upgrade to the latest upstream release - New features - Added a Python
script that can be used for CLI tailoring (autotailor) - Added timezone to
XCCDF TestResult start/end time - Added yamlfilecontent independent probe
(proposal/draft implementation), see
https://github.com/OVAL-
Community/OVAL/issues/91 for more information - Introduced
`urn:xccdf:fix:script:kubernetes` fix type in XCCDF - Added ability to
generate `machineconfig` fix - Maintenance, bug fixes - utils/oscap-
podman: Detect ambiguous scan target - Fixed #170: The rpmverifyfile probe
can't verify files from '/bin' directory - The data system_info probe
return
for offline and online modes is consistent and actual - Prevent crashes when
complicated regexes are executed in textfilecontent58 probe - Fixed #1512:
Severity refinement lost in generated guide - Fixed #1453: Pointer lost in
Swig API - Evaluation Characteristics of the XCCDF report are now consistent
with OVAL entities from system_info probe - Fixed filepath pattern
matching in offline mode in textfilecontent58 probe - Fixed infinite
recursion in systemdunitdependency probe - Fixed the case when CMake
couldn't find libacl or xattr.h ---- Update to the latest upstream version
- New features - Added a Python script that can be used for CLI tailoring
(autotailor) - Added timezone to XCCDF TestResult start/end time -
Added yamlfilecontent independent probe (proposal/draft implementation),
see
https://github.com/OVAL-Community/OVAL/issues/91 for more information -
Introduced `urn:xccdf:fix:script:kubernetes` fix type in XCCDF - Added
ability to generate `machineconfig` fix - Maintenance, bug fixes -
utils/oscap-podman: Detect ambiguous scan target - Fixed #170: The
rpmverifyfile probe can't verify files from '/bin' directory - The data
system_info probe return for offline and online modes is consistent and actual
- Prevent crashes when complicated regexes are executed in textfilecontent58
probe - Fixed #1512: Severity refinement lost in generated guide - Fixed
#1453: Pointer lost in Swig API - Evaluation Characteristics of the XCCDF
report are now consistent with OVAL entities from system_info probe -
Fixed filepath pattern matching in offline mode in textfilecontent58 probe -
Fixed infinite recursion in systemdunitdependency probe - Fixed the case
when CMake couldn't find libacl or xattr.h
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 4 2020 Jan ��ern�� <jcerny(a)redhat.com> - 1:1.3.3-2
- Add libyaml-devel as a dependency to enable yamlfilecontent probe
* Thu Apr 30 2020 Jan ��ern�� <jcerny(a)redhat.com> - 1:1.3.3-1
- Upgrade to the latest upstream release
--------------------------------------------------------------------------------
================================================================================
perl-Encode-3.06-15.fc30 (FEDORA-2020-e71a1d34cb)
Character encodings in Perl
--------------------------------------------------------------------------------
Update Information:
This release fixes building with perl 5.32 and makes a version of the encoding
module higher than the core one. We deliver this version mainly to provide an
up-to-date version string.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 4 2020 Petr Pisar <ppisar(a)redhat.com> - 4:3.06-15
- 3.06 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1830464 - perl-Encode-3.06 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1830464
--------------------------------------------------------------------------------
================================================================================
perl-Gtk3-SimpleList-0.20-1.fc30 (FEDORA-2020-30f9f8dd86)
Simple interface to Gtk3's complex MVC list widget
--------------------------------------------------------------------------------
Update Information:
This release removes a debugging warning.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 4 2020 Petr Pisar <ppisar(a)redhat.com> - 0.20-1
- 0.20 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1830924 - perl-Gtk3-SimpleList-0.20 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1830924
--------------------------------------------------------------------------------
================================================================================
python-click-7.1.1-1.fc30.1 (FEDORA-2020-378e2a64cd)
Simple wrapper around optparse for powerful command line utilities
--------------------------------------------------------------------------------
Update Information:
Re-add Python 2
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 27 2020 Fabian Affolter <mail(a)fabian-affolter.ch> - 7.1.1-1.1
- Re-add Python 2 (rhbz#1828167)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1828167 - python2-click got removed without notice from Fedora 31 and 30
https://bugzilla.redhat.com/show_bug.cgi?id=1828167
--------------------------------------------------------------------------------
================================================================================
python-django-haystack-3.0-0.1.b2.fc30 (FEDORA-2020-d9f4ed1fdb)
Pluggable search for Django
--------------------------------------------------------------------------------
Update Information:
Fix installation with Django 2.x, 3.x.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 4 2020 Nils Philippsen <nils(a)redhat.com> - 3.0-0.1.b2
- Update to version 3.0b2
* Thu Jan 30 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.5.0-12
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Thu Oct 3 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 2.5.0-11
- Rebuilt for Python 3.8.0rc1 (#1748018)
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 2.5.0-10
- Rebuilt for Python 3.8
* Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.5.0-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1697418 - python-django-haystack-3.0b2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1697418
[ 2 ] Bug #1770824 - python3-django-haystack fails to install in Fedora rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1770824
[ 3 ] Bug #1830665 - FTI: python-django-haystack: python3-django-haystack
https://bugzilla.redhat.com/show_bug.cgi?id=1830665
--------------------------------------------------------------------------------
================================================================================
seamonkey-2.53.2-1.fc30 (FEDORA-2020-36b36afea6)
Web browser, e-mail, news, IRC client, HTML editor
--------------------------------------------------------------------------------
Update Information:
Update to 2.53.2 If you have Lightning and/or Chatzilla extensions previously
disabled, they are enabled after the update. Disable it again if needed (in
about:addons), or remove completely (which can improve startup time).
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 4 2020 Dmitry Butskoy <Dmitry(a)Butskoy.name> 2.53.2-1
- update to 2.53.2
- drop startup shell script (no more needed)
* Thu Apr 9 2020 Dmitry Butskoy <Dmitry(a)Butskoy.name> 2.53.1-5
- rebuild with rust-1.42
* Wed Mar 25 2020 Dmitry Butskoy <Dmitry(a)Butskoy.name> 2.53.1-4
- drop system-bookmarks dependencies
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1830651 - seamonkey-2.53.2.source is available
https://bugzilla.redhat.com/show_bug.cgi?id=1830651
--------------------------------------------------------------------------------