The following Fedora 30 Security updates need testing:
Age URL
14
https://bodhi.fedoraproject.org/updates/FEDORA-2020-2b53cff132
thunderbird-68.7.0-1.fc30
7
https://bodhi.fedoraproject.org/updates/FEDORA-2020-4e093619bb git-2.21.3-1.fc30
7
https://bodhi.fedoraproject.org/updates/FEDORA-2020-5a4da65166 cups-2.2.12-8.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-c9eb911737
pxz-4.999.9-19.beta.20200421git.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-d171bf636d
rubygem-json-2.2.0-202.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-0e7f1b663b
chromium-81.0.4044.122-1.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-969414e05b
openvpn-2.4.9-1.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-bd170e803f
webkit2gtk3-2.28.2-1.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-cbc3149753 xen-4.11.4-1.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-92ed6d99e4
java-latest-openjdk-14.0.1.7-2.rolling.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-73341c894c
java-11-openjdk-11.0.7.10-0.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2020-e244c98af5 libldb-1.5.7-1.fc30
samba-4.10.15-0.fc30
The following Fedora 30 Critical Path updates have yet to be approved:
Age URL
294
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c05e4425d1
dash-0.5.10.2-3.fc30
14
https://bodhi.fedoraproject.org/updates/FEDORA-2020-2b53cff132
thunderbird-68.7.0-1.fc30
12
https://bodhi.fedoraproject.org/updates/FEDORA-2020-1208e2a2b8 vim-8.2.587-1.fc30
7
https://bodhi.fedoraproject.org/updates/FEDORA-2020-44d12740d8 ceph-14.2.9-1.fc30
7
https://bodhi.fedoraproject.org/updates/FEDORA-2020-5a4da65166 cups-2.2.12-8.fc30
7
https://bodhi.fedoraproject.org/updates/FEDORA-2020-fd4d0014e1
python2-2.7.18-1.fc30 python2-docs-2.7.18-1.fc30
7
https://bodhi.fedoraproject.org/updates/FEDORA-2020-c1dd22ce63 koji-1.21.0-1.fc30
7
https://bodhi.fedoraproject.org/updates/FEDORA-2020-9b3da9c8e7
linux-firmware-20200421-107.fc30
7
https://bodhi.fedoraproject.org/updates/FEDORA-2020-4e093619bb git-2.21.3-1.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-0f078e7280
pyproject-rpm-macros-0-14.fc30 python-pip-19.0.3-7.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-a615847091
cairo-1.16.0-6.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-184ff81bcd
glusterfs-6.9-1.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-cbc3149753 xen-4.11.4-1.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-0afe424fbd
corosync-3.0.4-1.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2020-e244c98af5 libldb-1.5.7-1.fc30
samba-4.10.15-0.fc30
The following builds have been pushed to Fedora 30 updates-testing
cmake-3.17.2-1.fc30
davix-0.7.6-1.fc30
dnstwist-20200429-1.fc30
drbd-9.12.2-1.fc30
ephemeral-6.3.4-1.fc30
kernel-5.6.8-100.fc30
knot-resolver-5.1.0-1.fc30
odcs-0.2.46-1.fc30
perl-CPAN-Perl-Releases-5.20200428-1.fc30
perl-Module-CoreList-5.20200428-1.fc30
perl-RT-Client-REST-0.57-1.fc30
python-h5io-0.1.2-2.fc30
salt-3000.2-1.fc30
teeworlds-0.7.5-1.fc30
twa-1.9.2-1.fc30
video-downloader-0.2.6-1.fc30
vokoscreenNG-3.0.4-1.fc30
wlr-randr-0-4.20200408git5ff601a.fc30
Details about builds:
================================================================================
cmake-3.17.2-1.fc30 (FEDORA-2020-55bdd11498)
Cross-platform make system
--------------------------------------------------------------------------------
Update Information:
- Update to cmake-3.17.2.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 28 2020 Bj��rn Esser <besser82(a)fedoraproject.org> - 3.17.2-1
- Update to cmake-3.17.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1829038 - cmake-3.17.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1829038
--------------------------------------------------------------------------------
================================================================================
davix-0.7.6-1.fc30 (FEDORA-2020-93ccc3dd5a)
Toolkit for Http-based file management
--------------------------------------------------------------------------------
Update Information:
New upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 29 2020 Georgios Bitzes <georgios.bitzes at cern.ch> - 0.7.6-1
- New upstream release
--------------------------------------------------------------------------------
================================================================================
dnstwist-20200429-1.fc30 (FEDORA-2020-257b88edcf)
Domain name permutation engine
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release (v.20200429)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 29 2020 Artur Iwicki <fedora(a)svgames.pl> - 20200429-1
- Update to latest upstream release
- Drop Source101 (man page - merged upstream)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1827587 - dnstwist 20200429 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1827587
--------------------------------------------------------------------------------
================================================================================
drbd-9.12.2-1.fc30 (FEDORA-2020-3749d1e531)
DRBD user-land tools and scripts
--------------------------------------------------------------------------------
Update Information:
Usual update from the upstream, with a patch to fix compilation of v84
utilities.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 29 2020 Peter Hanecak <hany(a)hany.sk> - 9.12.2-1
- Upstream release of 9.12.2
- Small spec tweaks
- Updated xsltproc network read patch
- Added patch for setup_option in v84
- Build now requires also po4a
* Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 9.5.0-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 9.5.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
ephemeral-6.3.4-1.fc30 (FEDORA-2020-5bf037cfe4)
Private-by-default, always-incognito browser
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 29 2020 Artem Polishchuk <ego.cordatus(a)gmail.com> - 6.3.4-1
- Update to 6.3.4
--------------------------------------------------------------------------------
================================================================================
kernel-5.6.8-100.fc30 (FEDORA-2020-64d46a6e29)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 5.6.8 stable kernel update contains a number of important fixes across the
tree.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 29 2020 Justin M. Forbes <jforbes(a)fedoraproject.org> - 5.6.8-100
- Linux v5.6.8
- Fixes CVE-2020-11884 (rhbz 1828149 1829181)
* Tue Apr 28 2020 Justin M. Forbes <jforbes(a)fedoraproject.org>
- MST Fix from Lyude Paul
- drm/i915/gem: Hold obj->vma.lock over for_each_ggtt_vma() (airlied request)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1828149 - CVE-2020-11884 Kernel: s390: page table upgrade in secondary
address mode may lead to privilege escalation
https://bugzilla.redhat.com/show_bug.cgi?id=1828149
--------------------------------------------------------------------------------
================================================================================
knot-resolver-5.1.0-1.fc30 (FEDORA-2020-282647d066)
Caching full DNS Resolver
--------------------------------------------------------------------------------
Update Information:
new upstream release
https://www.knot-resolver.cz/2020-04-29-knot-
resolver-5.1.0.html ---- - bugfix for 5.0.0 release --- - see
https://knot-
resolver.readthedocs.io/en/stable/upgrading.html - version 5.0 no longer support
network interface configuration via systemd sockets and manual upgrade of
configuration file is required for upgrades
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 29 2020 Tomas Krizek <tomas.krizek(a)nic.cz> - 5.1.0-1
- update to upstream version 5.1.0
- make spec compatible with EPEL 8 (rhbz#1783252)
- support documentation build with Sphinx v3.0.0+ (rhbz#1823534)
* Thu Apr 2 2020 Tomas Krizek <tomas.krizek(a)nic.cz> - 5.0.1-2
- add patch to fix strict aliasing (!971) until next release
* Wed Feb 5 2020 Tomas Krizek <tomas.krizek(a)nic.cz> - 5.0.1-1
- update to upstream version 5.0.1
- ensure kres-cache-gc.service is restarted on upgrade
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.0.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Mon Jan 27 2020 Tomas Krizek <tomas.krizek(a)nic.cz> - 5.0.0-1
- update to new upstream version 5.0.0
- removed systemd socket files (no longer supported)
- add upgrade scriptlets for 5.x
- remove lua-sec, lua-socket, lua-filesystem dependencies
- create tmpfiles dirs with macro
--------------------------------------------------------------------------------
================================================================================
odcs-0.2.46-1.fc30 (FEDORA-2020-a656edad4c)
The On Demand Compose Service
--------------------------------------------------------------------------------
Update Information:
New version. ---- New version.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 29 2020 Jan Kaluza <jkaluza(a)redhat.com> - 0.2.46-1
- new version
* Tue Apr 21 2020 Jan Kaluza <jkaluza(a)redhat.com> - 0.2.45-1
- new version
* Mon Apr 20 2020 Jan Kaluza <jkaluza(a)redhat.com> - 0.2.44-1
- new version
* Wed Apr 1 2020 Jan Kaluza <jkaluza(a)redhat.com> - 0.2.42-1
- new version
* Fri Mar 20 2020 Jan Kaluza <jkaluza(a)redhat.com> - 0.2.41-1
- new version
* Mon Mar 16 2020 Jan Kaluza <jkaluza(a)redhat.com> - 0.2.40-1
- new version
* Wed Mar 4 2020 Jan Kaluza <jkaluza(a)redhat.com> - 0.2.39-1
- new version
* Tue Feb 25 2020 Jan Kaluza <jkaluza(a)redhat.com> - 0.2.38-1
- new version
* Thu Oct 24 2019 Jan Kaluza <jkaluza(a)redhat.com> - 0.2.36-4
- add fedora-messaging requirement.
* Wed Oct 23 2019 Jan Kaluza <jkaluza(a)redhat.com> - 0.2.36-3
- backport patch to support fedora-messaging.
--------------------------------------------------------------------------------
================================================================================
perl-CPAN-Perl-Releases-5.20200428-1.fc30 (FEDORA-2020-2330b48960)
Mapping Perl releases on CPAN to the location of the tarballs
--------------------------------------------------------------------------------
Update Information:
Update to the latest release
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 29 2020 Jitka Plesnikova <jplesnik(a)redhat.com> - 5.20200428-1
- 5.20200428 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1829102 - perl-CPAN-Perl-Releases-5.20200428 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1829102
--------------------------------------------------------------------------------
================================================================================
perl-Module-CoreList-5.20200428-1.fc30 (FEDORA-2020-ead5206668)
What modules are shipped with versions of perl
--------------------------------------------------------------------------------
Update Information:
This release provides data about Perl 5.31.11.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 29 2020 Petr Pisar <ppisar(a)redhat.com> - 1:5.20200428-1
- 5.20200428 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1829089 - perl-Module-CoreList-5.20200428 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1829089
--------------------------------------------------------------------------------
================================================================================
perl-RT-Client-REST-0.57-1.fc30 (FEDORA-2020-0ee23e1a1d)
Talk to RT using REST protocol
--------------------------------------------------------------------------------
Update Information:
This release adds sla_disabled attribute to RT::Client::REST::Queue class and
sla attribute to RT::Client::REST::Ticket class to support new features in RT
4.4.3.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 29 2020 Petr Pisar <ppisar(a)redhat.com> - 0.57-1
- 0.57 bump
* Tue Mar 17 2020 Jitka Plesnikova <jplesnik(a)redhat.com> - 0.56-3
- Add perl(blib) for tests
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1829119 - perl-RT-Client-REST-0.57 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1829119
--------------------------------------------------------------------------------
================================================================================
python-h5io-0.1.2-2.fc30 (FEDORA-2020-573d2de242)
Read and write simple Python objects using HDF5
--------------------------------------------------------------------------------
Update Information:
python-h5io update to 0.1.2 changes: * Added support for numpy 1.1.8+ * Added
support for datetime
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 29 2020 Aniket Pradhan <major AT fedoraproject DOT org> - 0.1.2-2
- Added dist to release tag
* Wed Apr 29 2020 Aniket Pradhan <major AT fedoraproject DOT org> - 0.1.2-1
- Version update to v0.1.2
- Use pytest instead of nose
* Thu Jan 30 2020 Fedora Release Engineering <releng(a)fedoraproject.org> -
0.1.0-8.git1a1849d
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Thu Oct 3 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 0.1.0-7.git1a1849d
- Rebuilt for Python 3.8.0rc1 (#1748018)
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 0.1.0-6.git1a1849d
- Rebuilt for Python 3.8
* Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> -
0.1.0-5.git1a1849d
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
salt-3000.2-1.fc30 (FEDORA-2020-0ce0c2ad1c)
A parallel remote execution system
--------------------------------------------------------------------------------
Update Information:
Update to feature release 3000.2-1 for Python 3
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 29 2020 SaltStack Packaging Team <packaging(a)saltstack.com> - 3000.2-1
- Update to feature release 3000.2-1 for Python 3
--------------------------------------------------------------------------------
================================================================================
teeworlds-0.7.5-1.fc30 (FEDORA-2020-0d6b80678a)
Online multi-player platform 2D shooter
--------------------------------------------------------------------------------
Update Information:
0.7.5
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 20 2020 Gwyn Ciesla <gwync(a)protonmail.com> - 0.7.5-1
- 0.7.5
* Fri Jan 31 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.7.4-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Mon Dec 30 2019 Gwyn Ciesla <gwync(a)protonmail.com> - 0.7.4-2
- bump EVR for koji error
* Mon Dec 30 2019 Gwyn Ciesla <gwync(a)protonmail.com> - 0.7.4-1
- 0.7.4
* Fri Aug 9 2019 Gwyn Ciesla <gwync(a)protonmail.com> - 0.7.3.1-5
- Path fix.
* Fri Aug 9 2019 Gwyn Ciesla <gwync(a)protonmail.com> - 0.7.3.1-4
- Put a copy of icon in a place flatpak will use.
* Sat Jul 27 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.7.3.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1829193 - CVE-2019-20787 teeworlds: there's an integer overflow when
computing a tilemap size [fedora-30]
https://bugzilla.redhat.com/show_bug.cgi?id=1829193
[ 2 ] Bug #1829537 - CVE-2020-12066 teeworlds: allows an attacker force the server to
repetitively shut down [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1829537
--------------------------------------------------------------------------------
================================================================================
twa-1.9.2-1.fc30 (FEDORA-2020-da5c9f683d)
Tiny web auditor with strong opinions
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release (v.1.9.2) ---- Update to latest upstream
release (v.1.9.1)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 29 2020 Artur Iwicki <fedora(a)svgames.pl> - 1.9.1-2
- Update to latest upstream release
- Add a weak dependency on testssl
* Fri Apr 24 2020 Artur Iwicki <fedora(a)svgames.pl> - 1.9.1-1
- Update to latest upstream release
--------------------------------------------------------------------------------
================================================================================
video-downloader-0.2.6-1.fc30 (FEDORA-2020-5e7ecac0d2)
Download videos from websites like YouTube and many others
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 29 2020 Artem Polishchuk <ego.cordatus(a)gmail.com> - 0.2.6-1
- Update to 0.2.6
--------------------------------------------------------------------------------
================================================================================
vokoscreenNG-3.0.4-1.fc30 (FEDORA-2020-ff609109e1)
User friendly Open Source screencaster
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 29 2020 Artem Polishchuk <ego.cordatus(a)gmail.com> - 3.0.4-1
- Update to 3.0.4
* Tue Mar 31 2020 Artem Polishchuk <ego.cordatus(a)gmail.com> - 3.0.3-1
- Update to 3.0.3
--------------------------------------------------------------------------------
================================================================================
wlr-randr-0-4.20200408git5ff601a.fc30 (FEDORA-2020-eb7a6e160b)
An xrandr clone for wlroots compositors
--------------------------------------------------------------------------------
Update Information:
Remove unnecessary BuildRequires
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1775443 - Review Request: wlr-randr - An xrandr clone for wlroots
compositors
https://bugzilla.redhat.com/show_bug.cgi?id=1775443
--------------------------------------------------------------------------------