The following Fedora 30 Security updates need testing:
Age URL
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6404181bf9
phpMyAdmin-4.9.1-1.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8916b4e890
zeromq-4.3.2-1.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-68333329e0
memcached-1.5.14-2.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-a1636592a3 glpi-9.4.4-1.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8b83c261dd
mosquitto-1.6.7-1.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-feec5e0afd
varnish-6.3.0-1.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-a00b4760a0 yara-3.10.0-2.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-47946eb312 scapy-2.4.3-1.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-07940971b2
mbedtls-2.16.3-1.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-0e70ef9cbb znc-1.7.5-1.fc30
The following Fedora 30 Critical Path updates have yet to be approved:
Age URL
81
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c05e4425d1
dash-0.5.10.2-3.fc30
11
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3d111723a5
lldpad-1.0.1-15.git036e314.fc30
11
https://bodhi.fedoraproject.org/updates/FEDORA-2019-7cac16652c
harfbuzz-2.6.1-2.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-48c225e982
gnome-software-3.32.4-3.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6f79c53e44 ceph-14.2.4-1.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-685cc69f25
pungi-4.1.39-3.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e7d54106ce
ostree-2019.4-2.fc30 rpm-ostree-2019.6-1.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-1ab1d59320
mutter-3.32.2-4.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-fd464c6ab0
geoclue2-2.5.4-1.fc30
The following builds have been pushed to Fedora 30 updates-testing
evince-3.32.1-1.fc30
fwupd-1.2.11-1.fc30
iipsrv-1.1.0-1.0.fc30
mozilla-ublock-origin-1.22.4-1.fc30
ngspice-31-2.fc30.respin1
qutebrowser-1.8.1-1.fc30
stellarium-0.19.2-1.fc30
wine-4.17-2.fc30
wine-mono-4.9.3-1.fc30
wpewebkit-2.26.1-1.fc30
Details about builds:
================================================================================
evince-3.32.1-1.fc30 (FEDORA-2019-f07f703c95)
Document viewer
--------------------------------------------------------------------------------
Update Information:
evince 3.32.1 release. For details, see
https://mail.gnome.org/archives/ftp-
release-list/2019-September/msg00217.html
--------------------------------------------------------------------------------
ChangeLog:
* Sun Sep 29 2019 Kalev Lember <klember(a)redhat.com> - 3.32.1-1
- Update to 3.32.1
--------------------------------------------------------------------------------
================================================================================
fwupd-1.2.11-1.fc30 (FEDORA-2019-c37c463ddc)
Firmware update daemon
--------------------------------------------------------------------------------
Update Information:
New upstream release - Actually write the new device path if different than
before - Add a SynapticsMSTBoardID for a few Lenovo docks - Add support for
tpm2-tools 4.X - Add the counterpart GUID for the DW5821e - Allow specifying a
firmware GUID to check any version exists - Be more accepting when trying to
recover a failed database migration - Do not ask the user to upload a report if
ReportURI is not set - Do not segfault when trying to quit the downgrade
selection - Fix a crash when stopping the fwupd service - Never show AppStream
markup on the console - Relax the certificate time checks in the self tests for
the legacy cert - Remove replug flag after the device comes back from reboot -
Update device_modified in sql database during updates - Work properly with ICL
thunderbolt controller
--------------------------------------------------------------------------------
ChangeLog:
* Sat Sep 28 2019 Richard Hughes <richard(a)hughsie.com> 1.2.11-1
- New upstream release
- Actually write the new device path if different than before
- Add a SynapticsMSTBoardID for a few Lenovo docks
- Add support for tpm2-tools 4.X
- Add the counterpart GUID for the DW5821e
- Allow specifying a firmware GUID to check any version exists
- Be more accepting when trying to recover a failed database migration
- Do not ask the user to upload a report if ReportURI is not set
- Do not segfault when trying to quit the downgrade selection
- Fix a crash when stopping the fwupd service
- Never show AppStream markup on the console
- Relax the certificate time checks in the self tests for the legacy cert
- Remove replug flag after the device comes back from reboot
- Update device_modified in sql database during updates
- Work properly with ICL thunderbolt controller
--------------------------------------------------------------------------------
================================================================================
iipsrv-1.1.0-1.0.fc30 (FEDORA-2019-6c616756c6)
Light-weight streaming for viewing and zooming of ultra high-resolution images
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Sat Sep 28 2019 Johan Cwiklinski <johan AT x-tnd DOT be> - 1.1-1.0
- Update to 1.1, add openjpeg2 support
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1592359 - [iipsrv] Drop requirements for 'initscripts' from specfile
https://bugzilla.redhat.com/show_bug.cgi?id=1592359
--------------------------------------------------------------------------------
================================================================================
mozilla-ublock-origin-1.22.4-1.fc30 (FEDORA-2019-054974d92a)
An efficient blocker for Firefox
--------------------------------------------------------------------------------
Update Information:
This is an emergency fix. The issue was [fixed in dev build days ago](https://g
ithub.com/gorhill/uBlock/commit/97d6d5028b948a6d4e0cbf40cdb21486f64d39b1), and
it was originally deemed to not be a serious regression. However as [reported
by a user on
Reddit](https://www.reddit.com/r/uBlockOrigin/comments/d8jyy9/nthan
cestor_blocking_completely_broken_on/), the issue was affecting more than just
the logging of cosmetic filters, it was completely breaking cosmetic filtering
when the two following conditions were met: * uBO's own logger was opened; AND
* Procedural cosmetic filters were injected on the page.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Sep 28 2019 Dominik Mierzejewski <rpm(a)greysector.net> - 1.22.4-1
- update to 1.22.4 (#1756060)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1756060 - mozilla-ublock-origin-1.22.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1756060
--------------------------------------------------------------------------------
================================================================================
ngspice-31-2.fc30.respin1 (FEDORA-2019-68d81fcc85)
A mixed level/signal circuit simulator
--------------------------------------------------------------------------------
Update Information:
ngspice 31 tarball is respun and so new build is done. ---- New version 31 is
released.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Sep 29 2019 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 31-2.respin1
- 31 tarball respun
* Wed Sep 25 2019 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 31-1
- Update to 31
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 30-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
qutebrowser-1.8.1-1.fc30 (FEDORA-2019-3138ad88d0)
A keyboard-driven, vim-like browser based on PyQt5 and QtWebEngine
--------------------------------------------------------------------------------
Update Information:
No major change in 1.8.x.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Sep 28 2019 Timoth��e Floure <fnux(a)fedoraproject.org> - 1.8.1-1
- New upstream release
* Tue Aug 20 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 1.7.0-4
- Rebuilt for Python 3.8
* Tue Aug 20 2019 Timoth��e Floure <fnux(a)fedoraproject.org> - 1.7.0-3
- Fix desktop file installation (broken due to changes in upstream 1.7.x)
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 1.7.0-2
- Rebuilt for Python 3.8
* Fri Aug 16 2019 Timoth��e Floure <fnux(a)fedoraproject.org> - 1.7.0-1
- New upstream release
* Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6.3-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1742104 - qutebrowser-1.8.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1742104
--------------------------------------------------------------------------------
================================================================================
stellarium-0.19.2-1.fc30 (FEDORA-2019-35e61b2763)
Photo-realistic nightsky renderer
--------------------------------------------------------------------------------
Update Information:
stellarium 0.19.2 release. For details, see
https://stellarium.org/release/2019/09/29/stellarium-0.19.2.html
--------------------------------------------------------------------------------
ChangeLog:
* Sun Sep 29 2019 Kalev Lember <klember(a)redhat.com> - 0.19.2-1
- 0.19.2
* Sat Jul 27 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.19.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1756730 - stellarium-0.19.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1756730
--------------------------------------------------------------------------------
================================================================================
wine-4.17-2.fc30 (FEDORA-2019-f5d6a80f08)
A compatibility layer for windows applications
--------------------------------------------------------------------------------
Update Information:
- New version of the Mono engine with upstream fixes. - Support for DXTn
compressed textures. - Initial version of the Windows Script runtime library.
- Support for XRandR device change notifications. - Support for generating RSA
keys. - Stubless proxies support on ARM64. - Various bug fixes.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Sep 29 2019 Michael Cronenworth <mike(a)cchtml.com> 4.17-2
- sync wine-mono version
* Sat Sep 28 2019 Michael Cronenworth <mike(a)cchtml.com> 4.17-1
- version update
* Thu Sep 26 2019 Michael Cronenworth <mike(a)cchtml.com> 4.16-2
- Drop isdn4k-utils BR (RHBZ#1756118)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1734794 - Segmentation fault and exceptions using ManagementClass
https://bugzilla.redhat.com/show_bug.cgi?id=1734794
--------------------------------------------------------------------------------
================================================================================
wine-mono-4.9.3-1.fc30 (FEDORA-2019-f5d6a80f08)
Mono library required for Wine
--------------------------------------------------------------------------------
Update Information:
- New version of the Mono engine with upstream fixes. - Support for DXTn
compressed textures. - Initial version of the Windows Script runtime library.
- Support for XRandR device change notifications. - Support for generating RSA
keys. - Stubless proxies support on ARM64. - Various bug fixes.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Sep 29 2019 Michael Cronenworth <mike(a)cchtml.com> - 4.9.3-1
- version upgrade
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1734794 - Segmentation fault and exceptions using ManagementClass
https://bugzilla.redhat.com/show_bug.cgi?id=1734794
--------------------------------------------------------------------------------
================================================================================
wpewebkit-2.26.1-1.fc30 (FEDORA-2019-17c9dd11c3)
A WebKit port optimized for low-end devices
--------------------------------------------------------------------------------
Update Information:
New version, added atk/bubblewrap libs for build, removed crypto patch as its
--------------------------------------------------------------------------------
ChangeLog:
* Sat Sep 28 2019 Chris King <bunnyapocalypse(a)protonmail.org> - 2.26.1-1
- New version, added atk/bubblewrap libs for build, removed crypto patch as its
no longer needed. Also, sobump.
* Sat Jul 27 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.24.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1754116 - wpewebkit-2.26.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1754116
--------------------------------------------------------------------------------