The following Fedora 30 Security updates need testing:
Age URL
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-01e86d4832
ansible-2.8.4-1.fc30
11
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c72f5f6361
wavpack-5.1.0-16.fc30
11
https://bodhi.fedoraproject.org/updates/FEDORA-2019-f3ef4d22db cups-2.2.12-1.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-644ef7ebec
graphite2-1.3.13-1.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-f40c49b99e
python-slixmpp-1.4.2-1.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b25dd670a4
python-mitogen-0.2.8-1.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c106e46a95
community-mysql-8.0.17-2.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-5d2420030c
chromium-76.0.3809.132-1.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-55d101a740
golang-1.12.9-1.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-7f7489dc8c
seamonkey-2.49.5-1.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-2baa1f7b19 lxc-3.0.4-1.fc30
lxcfs-3.0.4-1.fc30 python3-lxc-3.0.4-1.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-baff775841
rdesktop-1.8.6-1.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e01bc28777
pdfresurrect-0.18-1.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4c91a2f76e
kernel-5.2.11-200.fc30 kernel-headers-5.2.11-200.fc30 kernel-tools-5.2.11-200.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-0bb6b876da
grafana-6.3.4-1.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-446ca9f695 SDL-1.2.15-41.fc30
The following Fedora 30 Critical Path updates have yet to be approved:
Age URL
51
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c05e4425d1
dash-0.5.10.2-3.fc30
42
https://bodhi.fedoraproject.org/updates/FEDORA-2019-45ce99686a
pungi-4.1.38-2.fc30
29
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c6ef0c53d5
iproute-5.2.0-1.fc30
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ee3442fd65
libevent-2.1.8-7.fc30
11
https://bodhi.fedoraproject.org/updates/FEDORA-2019-f3ef4d22db cups-2.2.12-1.fc30
11
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c72f5f6361
wavpack-5.1.0-16.fc30
11
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e11df00d17 kmod-26-3.fc30
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-35a7bc6244
perl-5.28.2-439.fc30
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-56744fc88a
perl-Pod-Perldoc-3.28.01-420.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-760282d4aa
telepathy-glib-0.24.1-13.fc30.1
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3a3b518302
ostree-2019.3-3.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-644ef7ebec
graphite2-1.3.13-1.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-96821c57f9
libinput-1.14.1-1.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4c91a2f76e
kernel-5.2.11-200.fc30 kernel-headers-5.2.11-200.fc30 kernel-tools-5.2.11-200.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8278841292
libselinux-2.9-3.1.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-aec5fc4920
libcacard-2.7.0-3.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e800418aac
rpm-4.14.2.1-5.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-f75c1a1b26
policycoreutils-2.9-4.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8984905bca bind-9.11.10-1.fc30
bind-dyndb-ldap-11.1-19.fc30 dhcp-4.3.6-37.fc30 dnsperf-2.3.2-1.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-7f297cb49a
dnsmasq-2.80-10.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d0179eb247
xfce4-settings-4.14.1-2.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-40235845dc dnf-4.2.8-1.fc30
dnf-plugins-core-4.0.9-1.fc30 libdnf-0.35.2-1.fc30 swid-tools-0.8.6-1.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ae52a20ff6 curl-7.65.3-3.fc30
The following builds have been pushed to Fedora 30 updates-testing
erlang-rpm-macros-0.3.1-1.fc30
file-5.36-4.fc30
git-lfs-2.8.0-2.fc30
igt-gpu-tools-1.24-1.20190830gite62ea30.fc30
kea-1.5.0-9.fc30
logrotate-3.15.1-1.fc30
normaliz-3.7.4-3.fc30
nsd-4.2.2-1.fc30
polymake-3.5-3.fc30
python-operator-courier-2.1.7-1.fc30
python-ruamel-yaml-clib-0.1.2-1.fc30
python-timeout-decorator-0.4.1-1.fc30
sslsplit-0.5.5-1.fc30
urh-2.7.5-1.fc30
Details about builds:
================================================================================
erlang-rpm-macros-0.3.1-1.fc30 (FEDORA-2019-354452ca73)
Macros for simplifying building of Erlang packages
--------------------------------------------------------------------------------
Update Information:
* Ver. 0.3.1
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 30 2019 Peter Lemenkov <lemenkov(a)gmail.com> - 0.3.1-1
- Ver. 0.3.1
* Fri Aug 30 2019 Peter Lemenkov <lemenkov(a)gmail.com> - 0.3.0-1
- Ver. 0.3.0
* Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.9-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1735190 - erlang-rpm-macros: FTBFS in Fedora rawhide/f31
https://bugzilla.redhat.com/show_bug.cgi?id=1735190
[ 2 ] Bug #1693771 - erlang-rpm-macros: Switch to a string for RPM calls (oncoming rpm
API fix change)
https://bugzilla.redhat.com/show_bug.cgi?id=1693771
--------------------------------------------------------------------------------
================================================================================
file-5.36-4.fc30 (FEDORA-2019-83fa1cfd0f)
A utility for determining file types
--------------------------------------------------------------------------------
Update Information:
- avoid running librpm's exit handler in a forked process (#1705320)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 30 2019 Kamil Dudka <kdudka(a)redhat.com> - 5.36-4
- avoid running librpm's exit handler in a forked process (#1705320)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1705320 - libmagic uses exit() instead of _exit() after failed exec()
https://bugzilla.redhat.com/show_bug.cgi?id=1705320
--------------------------------------------------------------------------------
================================================================================
git-lfs-2.8.0-2.fc30 (FEDORA-2019-065d85a8b9)
Git extension for versioning large files
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 30 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 2.8.0-2
- Customize vendor information in version
* Fri Aug 30 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 2.8.0-1
- Update to latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1742266 - git-lfs-2.8.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1742266
--------------------------------------------------------------------------------
================================================================================
igt-gpu-tools-1.24-1.20190830gite62ea30.fc30 (FEDORA-2019-c593d24401)
Test suite and tools for DRM drivers
--------------------------------------------------------------------------------
Update Information:
New git snapshot
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 30 2019 Lyude Paul <lyude(a)redhat.com> - 1.24-1.20190830gite62ea30
- New git snapshot
* Thu Aug 29 2019 Lyude Paul <lyude(a)redhat.com> - 1.24-1.20190829gitd38950f
- New git snapshot
--------------------------------------------------------------------------------
================================================================================
kea-1.5.0-9.fc30 (FEDORA-2019-0811a88d77)
DHCPv4, DHCPv6 and DDNS server from ISC
--------------------------------------------------------------------------------
Update Information:
Fixes for CVE-2019-6472, CVE-2019-6473 and CVE-2019-6474
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 29 2019 Pavel Zhukov <pzhukov(a)redhat.com> - 1.5.0-9
- Fixes for CVE-2019-6472, CVE-2019-6473 and CVE-2019-6474
--------------------------------------------------------------------------------
================================================================================
logrotate-3.15.1-1.fc30 (FEDORA-2019-88f966235d)
Rotates, compresses, removes and mails system log files
--------------------------------------------------------------------------------
Update Information:
- use correct `create` mode in `examples/btmp` - fix several bugs found by
fuzzing - do not abort globbing on a broken symlink - rearrange `logrotate.8`
man page to improve readability - encourage admins to use the `su` directive in
`logrotate.8` man page
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 30 2019 Kamil Dudka <kdudka(a)redhat.com> - 3.15.1-1
- new upstream version 3.15.1
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.15.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1745330 - Logrotate fails to start on F30 (possibly others)
https://bugzilla.redhat.com/show_bug.cgi?id=1745330
--------------------------------------------------------------------------------
================================================================================
normaliz-3.7.4-3.fc30 (FEDORA-2019-93c285cc08)
A tool for mathematical computations
--------------------------------------------------------------------------------
Update Information:
Changes in normaliz 3.7.4: - Bug fix for face lattice and f-vector; see
https://github.com/Normaliz/Normaliz/issues/238 See
https://polymake.org/doku.php/news/release_3_5 for changes in polymake 3.5.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Aug 24 2019 Jerry James <loganjerry(a)gmail.com> - 3.7.4-3
- Add output.h to -devel package, accidentally omitted by upstream
* Wed Aug 21 2019 Jerry James <loganjerry(a)gmail.com> - 3.7.4-2
- Add missing Requires to the -devel subpackage
--------------------------------------------------------------------------------
================================================================================
nsd-4.2.2-1.fc30 (FEDORA-2019-96fe76e02b)
Fast and lean authoritative DNS Name Server
--------------------------------------------------------------------------------
Update Information:
Resolves: rhbz#1609774 nsd-4.2.2 is available
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 30 2019 Paul Wouters <pwouters(a)redhat.com> - 4.2.2-1
- Resolves: rhbz#1609774 nsd-4.2.2 is available
- Resolves: rhbz#1727689 CVE-2019-13207 nsd: stack-based overflow
- Update rundir to /run/
- Updated nsd.conf for new features
- Added --enable-recvmmsg --enable-packed --enable-memclean --enable-zone-stats
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.1.24-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1609774 - nsd-4.2.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1609774
[ 2 ] Bug #1727689 - CVE-2019-13207 nsd: stack-based overflow in function
dname_concatenate() in dname.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1727689
--------------------------------------------------------------------------------
================================================================================
polymake-3.5-3.fc30 (FEDORA-2019-93c285cc08)
Algorithms on convex polytopes and polyhedra
--------------------------------------------------------------------------------
Update Information:
Changes in normaliz 3.7.4: - Bug fix for face lattice and f-vector; see
https://github.com/Normaliz/Normaliz/issues/238 See
https://polymake.org/doku.php/news/release_3_5 for changes in polymake 3.5.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 28 2019 Jerry James <loganjerry(a)gmail.com> - 3.5-3
- Bump all of the release numbers and rebuild
* Tue Aug 27 2019 Jerry James <loganjerry(a)gmail.com> - 3.5-2
- Fix permlib-devel R; it is noarch
* Mon Aug 26 2019 Jerry James <loganjerry(a)gmail.com> - 3.5-1
- New upstream version
- Drop upstreamed -tempref patch
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 3.4-7
- Rebuilt for Python 3.8
--------------------------------------------------------------------------------
================================================================================
python-operator-courier-2.1.7-1.fc30 (FEDORA-2019-2e844c5089)
Library and CLI tool to build, verify and push operator metadata
--------------------------------------------------------------------------------
Update Information:
update to upstream version 2.1.7
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 30 2019 Martin Ba��ti <mbasti(a)redhat.com> - 2.1.7-1
- update to upstream version 2.1.7
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 2.1.5-2
- Rebuilt for Python 3.8
--------------------------------------------------------------------------------
================================================================================
python-ruamel-yaml-clib-0.1.2-1.fc30 (FEDORA-2019-8df57149c4)
C version of reader, parser and emitter for ruamel.yaml derived from libyaml
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1747361 - Review Request: python-ruamel-yaml-clib - C version of reader,
parser and emitter for ruamel.yaml derived from libyaml
https://bugzilla.redhat.com/show_bug.cgi?id=1747361
--------------------------------------------------------------------------------
================================================================================
python-timeout-decorator-0.4.1-1.fc30 (FEDORA-2019-c1dbd12ebf)
Timeout decorator for Python
--------------------------------------------------------------------------------
Update Information:
Initial packaging
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1746017 - Review Request: python-timeout-decorator - a timeout decorator for
Python
https://bugzilla.redhat.com/show_bug.cgi?id=1746017
--------------------------------------------------------------------------------
================================================================================
sslsplit-0.5.5-1.fc30 (FEDORA-2019-5f4615bc37)
Transparent and scalable SSL/TLS interception
--------------------------------------------------------------------------------
Update Information:
Resolves: rhbz#1534305 sslsplit-0.5.5 is available ---- Resolves: rhbz#1744466
Please update it to 0.5.4
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 30 2019 Paul Wouters <pwouters(a)redhat.com> - 0.5.5-1
- Resolves: rhbz#1534305 sslsplit-0.5.5 is available
- Enables ecc test
* Thu Aug 22 2019 Paul Wouters <pwouters(a)redhat.com> - 0.5.4-1
- Resolves: rhbz#1744466 Please update it to 0.5.4
* Sat Jul 27 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.2-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1534305 - sslsplit-0.5.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1534305
[ 2 ] Bug #1744466 - Please update it it 0.5.4
https://bugzilla.redhat.com/show_bug.cgi?id=1744466
--------------------------------------------------------------------------------
================================================================================
urh-2.7.5-1.fc30 (FEDORA-2019-c0d27bb3d0)
Universal Radio Hacker: investigate wireless protocols like a boss
--------------------------------------------------------------------------------
Update Information:
This is new version of urh.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 30 2019 Jaroslav ��karvada <jskarvad(a)redhat.com> - 2.7.5-1
- New version
Resolves: rhbz#1747017
* Wed Aug 21 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 2.7.4-2
- Rebuilt for Python 3.8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1747017 - urh-2.7.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747017
--------------------------------------------------------------------------------