The following Fedora 30 Security updates need testing:
Age URL
21
https://bodhi.fedoraproject.org/updates/FEDORA-2019-71b2273a9f
libarchive-3.3.3-7.fc30
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e45019c690
libtiff-4.0.10-7.fc30
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c703d2304a bind-9.11.13-2.fc30
bind-dyndb-ldap-11.1-20.fc30 dhcp-4.3.6-38.fc30 dnsperf-2.3.2-2.fc30
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3d7105bd2a xen-4.11.2-4.fc30
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-44ccfa9b29
knot-resolver-4.3.0-1.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-69da274284 grub2-2.02-87.fc30
The following Fedora 30 Critical Path updates have yet to be approved:
Age URL
152
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c05e4425d1
dash-0.5.10.2-3.fc30
21
https://bodhi.fedoraproject.org/updates/FEDORA-2019-71b2273a9f
libarchive-3.3.3-7.fc30
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e45019c690
libtiff-4.0.10-7.fc30
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-1271432c51 quota-4.04-13.fc30
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ed226e6112
xorg-x11-server-1.20.6-1.fc30
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-39c4c1c01a
corosync-3.0.3-1.fc30
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6a323db5c2
osinfo-db-20191125-1.fc30
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3d7105bd2a xen-4.11.2-4.fc30
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c703d2304a bind-9.11.13-2.fc30
bind-dyndb-ldap-11.1-20.fc30 dhcp-4.3.6-38.fc30 dnsperf-2.3.2-2.fc30
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-cc0cfdccbf exo-0.12.10-1.fc30
11
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9487833604 psmisc-23.3-1.fc30
11
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9b8ee35164
python-pip-19.0.3-5.fc30 python-setuptools-40.8.0-2.fc30 python39-3.9.0~a1-2.fc30
11
https://bodhi.fedoraproject.org/updates/FEDORA-2019-345de23c18
librsvg2-2.46.4-1.fc30
11
https://bodhi.fedoraproject.org/updates/FEDORA-2019-f4bf176b5c
supermin-5.1.20-10.fc30
11
https://bodhi.fedoraproject.org/updates/FEDORA-2019-51cef937e8
vim-8.1.2352-1.fc30
10
https://bodhi.fedoraproject.org/updates/FEDORA-2019-f91a134bcb
libgdata-0.17.11-1.fc30
10
https://bodhi.fedoraproject.org/updates/FEDORA-2019-2090dcde58
perl-5.28.2-441.fc30
10
https://bodhi.fedoraproject.org/updates/FEDORA-2019-5508b7e36d
json-c-0.13.1-8.fc30
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-5444d14308
hwdata-0.330-1.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-388010ce63
alsa-firmware-1.2.1-2.fc30 alsa-lib-1.2.1.2-3.fc30 alsa-plugins-1.2.1-1.fc30
alsa-utils-1.2.1-3.fc30
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-1c4b3119a7 passwd-0.80-7.fc30
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-0d122cc67a dnf-4.2.17-1.fc30
dnf-plugins-core-4.0.12-1.fc30 libcomps-0.1.14-1.fc30 libdnf-0.39.1-1.fc30
microdnf-3.3.0-1.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-32a8da0e3a bash-5.0.11-1.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-69da274284 grub2-2.02-87.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b436a3156c
gnupg2-2.2.18-2.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-df017ddeb7
pungi-4.1.41-3.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-decb570505
python-jsonschema-3.2.0-1.fc30
The following builds have been pushed to Fedora 30 updates-testing
389-ds-base-1.4.1.12-2.fc30
GoldenCheetah-3.5-0.14.rc2git5df46ee.fc30
ansible-2.9.2-1.fc30
calcium-calculator-7.9.5-3.fc30
elementary-sideload-1.0.0-1.fc30
glib-networking-2.60.4-1.fc30
golang-1.12.14-1.fc30
gscan2pdf-2.6.2-1.fc30
gst-entrans-1.4.0-1.fc30
librepo-1.11.1-1.fc30
libyang-1.0.101-1.fc30
nemo-4.4.1-3.fc30
nethack-3.6.3-1.fc30
netpbm-10.88.00-1.fc30
openslp-2.0.0-22.fc30
php-league-flysystem-1.0.61-1.fc30
python-cypy-0.2.0-1.fc30
python-dbusmock-0.18.3-2.fc30
python-fastavro-0.22.7-1.fc30
sasutils-0.3.10-1.fc30
srmio-0.1.1.1-1.fc30
tor-0.4.2.5-1.fc30
Details about builds:
================================================================================
389-ds-base-1.4.1.12-2.fc30 (FEDORA-2019-2c754dc5d2)
389 Directory Server (base)
--------------------------------------------------------------------------------
Update Information:
Bump version to 1.4.1.12-2 ---- Bump version to 1.4.1.12
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 9 2019 Mark Reynolds <mreynolds(a)redhat.com> - 1.4.1.12-2
- Bump version to 1.4.1.12-2
- Fix python-argcomplete tinkering
* Fri Dec 6 2019 Mark Reynolds <mreynolds(a)redhat.com> - 1.4.1.12-1
- Bump version to 1.4.1.12
- Issue 50586 - lib389 - Fix DSEldif long line processing
* Fri Dec 6 2019 Mark Reynolds <mreynolds(a)redhat.com> - 1.4.1.11-1
- Bump version to 1.4.1.11
- Issue 50499 - Fix npm audit issues
- Issue 50753 - Dumping the changelog to a file doesn't work
- Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
- Issue 50736 - RetroCL trimming may crash at shutdown if trimming configuration is
invalid
- Issue 50439 - Update docker integration for Fedora
- Issue 50747 - Port readnsstate to dsctl
- Issue 50745 - ns-slapd hangs during CleanAllRUV tests
- Issue 50758 - Enable CLI arg completion
- Issue 50701 - Fix type in lint report
- Issue 50701 - Add additional healthchecks to dsconf
- Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation
attribute
- Issue 50499 - Fix npm audit issues
- Issue 50634 - Fix CLI error parsing for non-string values
--------------------------------------------------------------------------------
================================================================================
GoldenCheetah-3.5-0.14.rc2git5df46ee.fc30 (FEDORA-2019-558a1a080d)
Cycling Performance Software
--------------------------------------------------------------------------------
Update Information:
- Update to 3.5-0.14.rc2git5df46ee - Add BR srmio-devel
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 9 2019 Martin Gansser <martinkg(a)fedoraproject.org> -
3.5-0.14.rc2git5df46ee
- Update to 3.5-0.14.rc2git5df46ee
- Add BR srmio-devel
--------------------------------------------------------------------------------
================================================================================
ansible-2.9.2-1.fc30 (FEDORA-2019-deb1f067f2)
SSH-based configuration management, deployment, and task execution system
--------------------------------------------------------------------------------
Update Information:
Update to 2.9.2.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 8 2019 Kevin Fenzi <kevin(a)scrye.com> - 2.9.2-1
- Update to 2.9.2.
* Thu Nov 14 2019 Kevin Fenzi <kevin(a)scrye.com> - 2.9.1-2
- Add Requires for python3-pyyaml
--------------------------------------------------------------------------------
================================================================================
calcium-calculator-7.9.5-3.fc30 (FEDORA-2019-773f2135bd)
The Calcium Calculator
--------------------------------------------------------------------------------
Update Information:
The binary for calcium-calculator has been renamed from calc to calcium-
calculator. This is because the "calc" package already uses the "calc"
binary.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 9 2019 Ankur Sinha <ankursinha AT fedoraproject DOT org> - 7.9.5-3
- Rename binary to prevent conflict with calc: 1781235
* Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 7.9.5-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1781235 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1781235
--------------------------------------------------------------------------------
================================================================================
elementary-sideload-1.0.0-1.fc30 (FEDORA-2019-7a7ed6dc69)
Sideload flatpaks on Pantheon
--------------------------------------------------------------------------------
Update Information:
Initial packaging for fedora.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 1 2019 Fabio Valentini <decathorpe(a)gmail.com> - 1.0.0-1
- Initial packaging.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1768005 - Review Request: elementary-sideload - Sideload flatpaks on
Pantheon
https://bugzilla.redhat.com/show_bug.cgi?id=1768005
--------------------------------------------------------------------------------
================================================================================
glib-networking-2.60.4-1.fc30 (FEDORA-2019-395944db07)
Networking support for GLib
--------------------------------------------------------------------------------
Update Information:
Update to 2.60.4
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 9 2019 Michael Catanzaro <mcatanzaro(a)igalia.com> - 2.60.4-1
- Update to 2.60.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1719987 - [abrt] evolution: verify_certificate_cb(): evolution killed by
SIGABRT
https://bugzilla.redhat.com/show_bug.cgi?id=1719987
--------------------------------------------------------------------------------
================================================================================
golang-1.12.14-1.fc30 (FEDORA-2019-8f338ab57f)
The Go Programming Language
--------------------------------------------------------------------------------
Update Information:
* Rebase to 1.12.14
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 9 2019 Jakub ��ajka <jcajka(a)redhat.com> - 1.12.14-1
- Rebase to 1.12.14
--------------------------------------------------------------------------------
================================================================================
gscan2pdf-2.6.2-1.fc30 (FEDORA-2019-3f36ad986e)
GUI for producing a multipage PDF from a scan
--------------------------------------------------------------------------------
Update Information:
This release fixes a recursion on a reload and a crash when closing multiple
dialogs with a window manager. This release also enables incrementing and
decrementing a date in the save dialog, importing metadata from DjVu and PDF
files, rotating an image by 180 degrees, and importing all pages form a file
with a new --import-all command-line option. It also updates Czech, French,
German, and Ukrainian translations.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1761107 - gscan2pdf-2.6.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1761107
--------------------------------------------------------------------------------
================================================================================
gst-entrans-1.4.0-1.fc30 (FEDORA-2019-ebe8a8efd9)
Plug-ins and tools for transcoding and recording with GStreamer
--------------------------------------------------------------------------------
Update Information:
This update brings the Python 3 port for GEntrans and its utilities, in
preparation for the coming Python 2 EOL. There should be no user facing changes.
The full changelog for GEntrans is available
[
here](http://gentrans.sourceforge.net/docs/head/manual/html/package.html#...
history).
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 18 2019 Theodore Lee <theo148(a)gmail.com> - 1.4.0-1
- Update to upstream 1.4.0 release (Python 3 port), resolving BZ 1737989
- Drop python2 BuildRequires
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.2-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1737989 - gst-entrans depends on Python 2
https://bugzilla.redhat.com/show_bug.cgi?id=1737989
--------------------------------------------------------------------------------
================================================================================
librepo-1.11.1-1.fc30 (FEDORA-2019-11d1e41933)
Repodata downloading library
--------------------------------------------------------------------------------
Update Information:
- Update to 1.11.1 - Create a directory for gpg sockets in /run/user/
(RhBug:1769831,1771012)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 9 2019 Pavla Kratochvilova <pkratoch(a)redhat.com> - 1.11.1-1
- Update to 1.11.1
- Create a directory for gpg sockets in /run/user/ (RhBug:1769831,1771012)
--------------------------------------------------------------------------------
================================================================================
libyang-1.0.101-1.fc30 (FEDORA-2019-9d83929ffa)
YANG data modeling language library
--------------------------------------------------------------------------------
Update Information:
Rebase to version 1.0.101
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 9 2019 Tomas Korbar <tkorbar(a)redhat.com> - 1.0.101-1
- Rebase to version 1.0.101
- Fix CVE-2019-19333 (#1780495)
- Fix CVE-2019-19334 (#1780494)
* Fri Oct 25 2019 Tomas Korbar <tkorbar(a)redhat.com> - 1.0.73-1
- Rebase to version 1.0.73 (#1758512)
* Thu Oct 3 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 0.16.105-4
- Rebuilt for Python 3.8.0rc1 (#1748018)
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 0.16.105-3
- Rebuilt for Python 3.8
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> -
0.16.105-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1780495 - CVE-2019-19333 libyang: stack-based buffer overflow in
make_canonical when bits leaf type is used [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1780495
[ 2 ] Bug #1780494 - CVE-2019-19334 libyang: stack-based buffer overflow in
make_canonical when identityref leaf type is used [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1780494
--------------------------------------------------------------------------------
================================================================================
nemo-4.4.1-3.fc30 (FEDORA-2019-5618f1d3ab)
File manager for Cinnamon
--------------------------------------------------------------------------------
Update Information:
Add fixes for trash and file names
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 9 2019 Leigh Scott <leigh123linux(a)googlemail.com> - 4.4.1-3
- Add patch to fix 'Disable GLib deprecation warnings'
* Mon Dec 9 2019 Leigh Scott <leigh123linux(a)googlemail.com> - 4.4.1-2
- Add patch to fix 'Don't hyphenate long filenames'
- Add patch to fix 'fix copying from the trash'
--------------------------------------------------------------------------------
================================================================================
nethack-3.6.3-1.fc30 (FEDORA-2019-3df347533b)
A rogue-like single player dungeon exploration game
--------------------------------------------------------------------------------
Update Information:
Update to NetHack 3.6.3
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 13 2019 Ron Olson <tachoknight(a)gmail.com> - 3.6.3-1
- Update to NetHack 3.6.3
* Tue Aug 13 2019 Ron Olson <tachoknight(a)gmail.com> - 3.6.2-3
- Removed Group tag and clean section
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.6.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
netpbm-10.88.00-1.fc30 (FEDORA-2019-02ac76d5e4)
A library for handling different graphics file formats
--------------------------------------------------------------------------------
Update Information:
New upstream release 10.88.00
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 9 2019 Josef Ridky <jridky(a)redhat.com> - 10.88.00-1
- New upstream release (#1756647)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1756647 - netpbm-10.88.00 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1756647
--------------------------------------------------------------------------------
================================================================================
openslp-2.0.0-22.fc30 (FEDORA-2019-86bceb61b3)
Open implementation of Service Location Protocol V2
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2019-5544
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 9 2019 Vitezslav Crhonek <vcrhonek(a)redhat.com> - 2.0.0-22
- Fix heap overwrite vulnerability, CVE-2019-5544
Resolves: #1780754
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1777788 - CVE-2019-5544 openslp: a heap-based buffer overflow vulnerability
leading to remote code execution
https://bugzilla.redhat.com/show_bug.cgi?id=1777788
--------------------------------------------------------------------------------
================================================================================
php-league-flysystem-1.0.61-1.fc30 (FEDORA-2019-ff0fe45c59)
Filesystem abstraction: Many filesystems, one API
--------------------------------------------------------------------------------
Update Information:
**Version 1.0.61** - 2019-12-08 * Fixed an array access issue for PHP 7.4
(#1106) ---- **Version 1.0.60** - 2019-12-08 * Fixed a PHP 7.4 issue where
an array key was accessed for a non-array variable (#1105) ---- **Version
1.0.59** - 2019-12-08 * Ensure emulating directories respects a directory named
"0". ---- **Version 1.0.58** - 2019-12-08 * Release lock on directories
before removing them because issue with vagrant mounting.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 9 2019 Remi Collet <remi(a)remirepo.net> - 1.0.61-1
- update to 1.0.61
--------------------------------------------------------------------------------
================================================================================
python-cypy-0.2.0-1.fc30 (FEDORA-2019-e924c2ffa1)
Useful utilities for Python
--------------------------------------------------------------------------------
Update Information:
New package: python-cypy
https://pypi.org/project/cypy/ Useful utilities for
Python
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 7 2019 Ankur Sinha <ankursinha AT fedoraproject DOT org> - 0.2.0-1
- Initial build
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1780822 - Review Request: python-cypy - Useful utilities for Python
https://bugzilla.redhat.com/show_bug.cgi?id=1780822
--------------------------------------------------------------------------------
================================================================================
python-dbusmock-0.18.3-2.fc30 (FEDORA-2019-e830287661)
Mock D-Bus objects
--------------------------------------------------------------------------------
Update Information:
This update fixes a number of bugs and adds support for mocking the new low-
memory-monitor daemon.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 9 2019 Bastien Nocera <bnocera(a)redhat.com> - 0.18.3-2
+ python-dbusmock-0.18.3-2
- Add low-memory-monitor mock
* Fri Dec 6 2019 Bastien Nocera <bnocera(a)redhat.com> - 0.18.3-1
+ python-dbusmock-0.18.3-1
- Update to 0.18.3
- Enable build tests (Python 3 only)
--------------------------------------------------------------------------------
================================================================================
python-fastavro-0.22.7-1.fc30 (FEDORA-2019-3be978a65d)
Fast Avro for Python
--------------------------------------------------------------------------------
Update Information:
Update to 0.22.7
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 9 2019 Aniket Pradhan <major AT fedoraproject DOT org> - 0.22.7-1
- Update to 0.22.7
- Remove Cython version constraint, F29 is no more maintained
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1768267 - python-fastavro-0.22.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1768267
--------------------------------------------------------------------------------
================================================================================
sasutils-0.3.10-1.fc30 (FEDORA-2019-0ec674e574)
Serial Attached SCSI (SAS) utilities
--------------------------------------------------------------------------------
Update Information:
Update to version 0.3.10 (minor bug fixes).
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 8 2019 Stephane Thiell <sthiell(a)stanford.edu> 0.3.10-1
- update version
- update Source to download from GitHub directly
* Thu Oct 3 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 0.3.9-8
- Rebuilt for Python 3.8.0rc1 (#1748018)
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 0.3.9-7
- Rebuilt for Python 3.8
* Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.9-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
srmio-0.1.1.1-1.fc30 (FEDORA-2019-b58c54786e)
Schoberer Radmesstechnik (SRM) PowerControl access
--------------------------------------------------------------------------------
Update Information:
Initial packageing for Fedora.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 6 2019 Vasiliy Glazov <vascom2(a)gmail.com> - 0.1.1.1.1-1
- Initial release
--------------------------------------------------------------------------------
================================================================================
tor-0.4.2.5-1.fc30 (FEDORA-2019-5455ed6c50)
Anonymizing overlay network for TCP
--------------------------------------------------------------------------------
Update Information:
update to latest upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 9 2019 Marcel H��rry <mh+fedora(a)scrit.ch> - 0.4.2.5-1
- update to latest upstream release
--------------------------------------------------------------------------------