The following Fedora 30 Security updates need testing:
Age URL
24
https://bodhi.fedoraproject.org/updates/FEDORA-2019-71b2273a9f
libarchive-3.3.3-7.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-69da274284 grub2-2.02-87.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9d83929ffa
libyang-1.0.101-1.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-86bceb61b3
openslp-2.0.0-22.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-11dddb785b
samba-4.10.11-0.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-1cec196e20 git-2.21.1-1.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-533a72fec5
fribidi-1.0.5-5.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-46b6bd2459
libssh-0.9.3-1.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6bf27b45b3 cacti-1.2.8-1.fc30
cacti-spine-1.2.8-1.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8f27a14efa
chromium-79.0.3945.79-1.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-2e12bd3a9a xen-4.11.3-2.fc30
The following Fedora 30 Critical Path updates have yet to be approved:
Age URL
155
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c05e4425d1
dash-0.5.10.2-3.fc30
24
https://bodhi.fedoraproject.org/updates/FEDORA-2019-71b2273a9f
libarchive-3.3.3-7.fc30
16
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ed226e6112
xorg-x11-server-1.20.6-1.fc30
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-f91a134bcb
libgdata-0.17.11-1.fc30
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-2090dcde58
perl-5.28.2-441.fc30
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-5508b7e36d
json-c-0.13.1-8.fc30
10
https://bodhi.fedoraproject.org/updates/FEDORA-2019-5444d14308
hwdata-0.330-1.fc30
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-388010ce63
alsa-firmware-1.2.1-2.fc30 alsa-lib-1.2.1.2-3.fc30 alsa-plugins-1.2.1-1.fc30
alsa-utils-1.2.1-3.fc30
8
https://bodhi.fedoraproject.org/updates/FEDORA-2019-1c4b3119a7 passwd-0.80-7.fc30
8
https://bodhi.fedoraproject.org/updates/FEDORA-2019-0d122cc67a dnf-4.2.17-1.fc30
dnf-plugins-core-4.0.12-1.fc30 libcomps-0.1.14-1.fc30 libdnf-0.39.1-1.fc30
microdnf-3.3.0-1.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-32a8da0e3a bash-5.0.11-1.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-69da274284 grub2-2.02-87.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b436a3156c
gnupg2-2.2.18-2.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-df017ddeb7
pungi-4.1.41-3.fc30
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-decb570505
python-jsonschema-3.2.0-1.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-395944db07
glib-networking-2.60.4-1.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-11d1e41933
librepo-1.11.1-1.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-bd81ed62bf make-4.2.1-14.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-1cec196e20 git-2.21.1-1.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3454e38e8c
supermin-5.1.20-11.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-212afebfaf emacs-26.3-1.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-11dddb785b
samba-4.10.11-0.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8bcab526a8
tigervnc-1.10.0-2.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6a84b238e6
libedit-3.1-30.20191211cvs.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-46b6bd2459
libssh-0.9.3-1.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-2e12bd3a9a xen-4.11.3-2.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-daed517e5f
vim-8.1.2424-1.fc30
The following builds have been pushed to Fedora 30 updates-testing
R-3.6.2-1.fc30
cockpit-209-1.fc30
cppcheck-1.89-2.fc30
gcompris-qt-0.97-1.fc30
gfal2-2.17.1-1.fc30
gnome-monitor-config-0-0.1.20190520.gitbc2f76c.fc30
http_ping-20160309-1.fc30
ibm-plex-fonts-4.0.2-1.fc30
igt-gpu-tools-1.24-1.20191213git048f585.fc30
knot-2.9.2-1.fc30
mate-session-manager-1.22.3-1.fc30
nemo-extensions-4.4.0-3.fc30
php-maxminddb-1.5.1-1.fc30
python-dictdiffer-0.8.1-1.fc30
python-google-auth-1.8.2-1.fc30
rkward-0.7.0-10.fc30
rpy-3.0.5-4.fc30
spamassassin-3.4.3-1.fc30
suricata-4.1.6-1.fc30
unbound-1.9.6-1.fc30
wordpress-5.3.1-1.fc30
Details about builds:
================================================================================
R-3.6.2-1.fc30 (FEDORA-2019-61a9f9dee3)
A language for data analysis and graphics
--------------------------------------------------------------------------------
Update Information:
Update R to 3.6.2. Rebuild rpy and rkward to reflect the update. No official
update is planned for EPEL7. Packages were built, but because devtoolset is
necessary to compile R with support for C++11, and R assumes the presence of a
compiler with proper C++11 support, the R EPEL7 packages have a Requires:
devtoolset-7-toolchain, which is not permitted for EPEL7. Removing the Requires
would result in people filing bugs when R modules fail to compile because it
assumes the system toolchain supports C++11. My advice to anyone caught in this
catch-22: Either upgrade to EL-8 or retrieve and manually install the R EL7
packages from here:
https://koji.fedoraproject.org/koji/buildinfo?buildID=1421894
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 12 2019 Tom Callaway <spot(a)fedoraproject.org> - 3.6.2-1
- update to 3.6.2
- disable tests on all non-intel arches
- fix powerpc64
* Fri Nov 1 2019 Pete Walter <pwalter(a)fedoraproject.org> - 3.6.1-3
- Rebuild for ICU 65
--------------------------------------------------------------------------------
================================================================================
cockpit-209-1.fc30 (FEDORA-2019-53834396c7)
Web Console for Linux servers
--------------------------------------------------------------------------------
Update Information:
- New overview design - Session timeouts - Banners on login screen - Client
certificate authentication - Support for Fedora CoreOS - Dropped support for
pam_rhost
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 13 2019 Marius Vollmer <mvollmer(a)redhat.com> - 209-1
- New overview design
- Session timeouts
- Banners on login screen
- Client certificate authentication
- Support for Fedora CoreOS
- Dropped support for pam_rhost
--------------------------------------------------------------------------------
================================================================================
cppcheck-1.89-2.fc30 (FEDORA-2019-e1e95ee29e)
Tool for static C/C++ code analysis
--------------------------------------------------------------------------------
Update Information:
This release has many new and improved checks. Output format changed. To get the
old format, add --template=cppcheck1.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 12 2019 Steve Grubb <sgrubb(a)redhat.com> - 1.89-2
- Add "-fsigned-char" to CXXFLAGS, to make tests pass
-
https://trac.cppcheck.net/ticket/9359
* Sat Dec 7 2019 Steve Grubb <sgrubb(a)redhat.com> - 1.89-1
- New upstream release 1.89
* Fri Aug 16 2019 Susi Lehtola <susi.lehtola(a)iki.fi> - 1.88-5
- rebuilt
* Wed Aug 14 2019 Susi Lehtola <jussilehtola(a)redhat.com> - 1.88-5
- Switch to python3 in htmlreport (BZ #1737972).
* Mon Jul 29 2019 Susi Lehtola <jussilehtola(a)redhat.com> - 1.88-4
- Second patch for another issue in BZ #1733663.
--------------------------------------------------------------------------------
================================================================================
gcompris-qt-0.97-1.fc30 (FEDORA-2019-b55ed79892)
Educational software suite for children aged 2 to 10
--------------------------------------------------------------------------------
Update Information:
This new version contains 2 new activities: * A programming maze: to learn the
basics of programming with a few instructions * Baby tangram: to learn the
basics of tangram (this activity corresponds to the lowest levels of previous
tangram activity) And a lot of new features: * new sub-categories to organize
activities * new background music feature and audio tracks * new volume settings
for audio effects * new speed setting in several activities (gletters, algebra,
readingh, note_names) * new feature in chess activities to display captured
pieces * new option to go to next level manually in drawletters and drawnumbers
* new voices for en_US * new images for colors activity * new images for
advanced_colors activity * new images for target activity * improve settings
layout * improve share activity layout * improve categorisation activity layout
* resource files are now stored in KDE server (
https://cdn.kde.org/) * add a
tutorial to even/odd numbers * add intro to piano_composition * add malayalam
dataset to gletters * add breton dataset to wordsgame * fix voices not playing
in geography * fix sounds not playing in mining * fix portrait mode in
binary_bulb * fix high cpu load in menu * fix hint image size in photo_hunter *
fix layout in color_mix * and lots of other small fixes...
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 13 2019 Andrea Musuruane <musuruan(a)gmail.com> - 0.97-1
- Updated to new upstream release
* Sat Aug 17 2019 Andrea Musuruane <musuruan(a)gmail.com> - 0.96-3
- Obsoletes gcompris package (BZ #1740801)
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.96-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
gfal2-2.17.1-1.fc30 (FEDORA-2019-31c98ca31e)
Grid file access library 2.0
--------------------------------------------------------------------------------
Update Information:
Upgraded to upstream release 2.17.1
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 13 2019 Georgios Bitzes <georgios.bitzes at cern.ch> - 2.17.1-1
- Upgraded to upstream release 2.17.1
--------------------------------------------------------------------------------
================================================================================
gnome-monitor-config-0-0.1.20190520.gitbc2f76c.fc30 (FEDORA-2019-8ef9cebfe0)
GNOME Monitor Configuration Tool
--------------------------------------------------------------------------------
Update Information:
New package
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 31 2019 Jeremy Newton <alexjnewt AT hotmail DOT com>
0-0.1.20190520.gitbc2f76c
- Intial Package
--------------------------------------------------------------------------------
================================================================================
http_ping-20160309-1.fc30 (FEDORA-2019-cc3267e653)
HTTP latency measuring utility
--------------------------------------------------------------------------------
Update Information:
Update to the latest available version
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 13 2019 alciregi <alciregi(a)fedoraproject.org> - 20160309-1
- Changed wrong version in spec file
* Wed Dec 11 2019 alciregi <alciregi(a)fedoraproject.org> - 09Mar2016-0
- Update to 09Mar2016.
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> -
20050629-27
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
ibm-plex-fonts-4.0.2-1.fc30 (FEDORA-2019-9b8186ca5d)
IBM's Plex fonts
--------------------------------------------------------------------------------
Update Information:
Update to 4.0.2 ---- Update to 4.0.1
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 13 2019 Michael Kuhn <suraia(a)fedoraproject.org> - 4.0.2-1
- Update to 4.0.2
* Fri Dec 6 2019 Michael Kuhn <suraia(a)fedoraproject.org> - 4.0.1-1
- Update to 4.0.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1782401 - ibm-plex-fonts-4.0.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1782401
--------------------------------------------------------------------------------
================================================================================
igt-gpu-tools-1.24-1.20191213git048f585.fc30 (FEDORA-2019-1b3c8d46ae)
Test suite and tools for DRM drivers
--------------------------------------------------------------------------------
Update Information:
New git snapshot
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 13 2019 Lyude Paul <lyude(a)redhat.com> - 1.24-1.20191213git048f585
- New git snapshot
--------------------------------------------------------------------------------
================================================================================
knot-2.9.2-1.fc30 (FEDORA-2019-70ec1e9e47)
High-performance authoritative DNS server
--------------------------------------------------------------------------------
Update Information:
- update to latest upstream version
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 13 2019 Tomas Krizek <tomas.krizek(a)nic.cz> - 2.9.2-1
- new upstream release 2.9.2
--------------------------------------------------------------------------------
================================================================================
mate-session-manager-1.22.3-1.fc30 (FEDORA-2019-5342e67a99)
MATE Desktop session manager
--------------------------------------------------------------------------------
Update Information:
- update to 1.22.3
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 13 2019 Wolfgang Ulbrich <fedora(a)raveit.de> - 1.22.3-1
- update to 1.22.3
--------------------------------------------------------------------------------
================================================================================
nemo-extensions-4.4.0-3.fc30 (FEDORA-2019-27194eecd9)
Extensions for Nemo
--------------------------------------------------------------------------------
Update Information:
- Add nemo-audio-tab
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 13 2019 Leigh Scott <leigh123linux(a)googlemail.com> - 4.4.0-3
- Add nemo-audio-tab
--------------------------------------------------------------------------------
================================================================================
php-maxminddb-1.5.1-1.fc30 (FEDORA-2019-422db85e3d)
MaxMind DB Reader extension
--------------------------------------------------------------------------------
Update Information:
**Version 1.5.1** (2019-12-12) * Minor performance improvements. * Make tests
pass with older versions of libmaxminddb. PR by Remi Collet. GitHub #90. *
Test enhancements. PR by Chun-Sheng, Li. GitHub #91.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 13 2019 Remi Collet <remi(a)remirepo.net> - 1.5.1-1
- update to 1.5.1
--------------------------------------------------------------------------------
================================================================================
python-dictdiffer-0.8.1-1.fc30 (FEDORA-2019-e5b3bb3e34)
Dictdiffer is a module that helps you to diff and patch dictionaries
--------------------------------------------------------------------------------
Update Information:
Update to upstream 0.8.1
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 13 2019 Jaosn Montleon <jmontleo(a)redhat.com> 0.8.1-1
- Update to upstream 0.8.1
--------------------------------------------------------------------------------
================================================================================
python-google-auth-1.8.2-1.fc30 (FEDORA-2019-3e5c194476)
Google Auth Python Library
--------------------------------------------------------------------------------
Update Information:
Update to upstream 1.8.2
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 11 2019 Fedora Release Monitoring <release-monitoring(a)fedoraproject.org> -
1:1.8.2-1
- Update to 1.8.2 (#1779733)
--------------------------------------------------------------------------------
================================================================================
rkward-0.7.0-10.fc30 (FEDORA-2019-61a9f9dee3)
Graphical frontend for R language
--------------------------------------------------------------------------------
Update Information:
Update R to 3.6.2. Rebuild rpy and rkward to reflect the update. No official
update is planned for EPEL7. Packages were built, but because devtoolset is
necessary to compile R with support for C++11, and R assumes the presence of a
compiler with proper C++11 support, the R EPEL7 packages have a Requires:
devtoolset-7-toolchain, which is not permitted for EPEL7. Removing the Requires
would result in people filing bugs when R modules fail to compile because it
assumes the system toolchain supports C++11. My advice to anyone caught in this
catch-22: Either upgrade to EL-8 or retrieve and manually install the R EL7
packages from here:
https://koji.fedoraproject.org/koji/buildinfo?buildID=1421894
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 13 2019 Tom Callaway <spot(a)fedoraproject.org> - 0.7.0-10
- rebuild for R 3.6.2
--------------------------------------------------------------------------------
================================================================================
rpy-3.0.5-4.fc30 (FEDORA-2019-61a9f9dee3)
Python interface to the R language
--------------------------------------------------------------------------------
Update Information:
Update R to 3.6.2. Rebuild rpy and rkward to reflect the update. No official
update is planned for EPEL7. Packages were built, but because devtoolset is
necessary to compile R with support for C++11, and R assumes the presence of a
compiler with proper C++11 support, the R EPEL7 packages have a Requires:
devtoolset-7-toolchain, which is not permitted for EPEL7. Removing the Requires
would result in people filing bugs when R modules fail to compile because it
assumes the system toolchain supports C++11. My advice to anyone caught in this
catch-22: Either upgrade to EL-8 or retrieve and manually install the R EL7
packages from here:
https://koji.fedoraproject.org/koji/buildinfo?buildID=1421894
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 13 2019 Tom Callaway <spot(a)fedoraproject.org> - 3.0.5-4
- rebuild for R 3.6.2
--------------------------------------------------------------------------------
================================================================================
spamassassin-3.4.3-1.fc30 (FEDORA-2019-3230b2aae9)
Spam filter for email which can be invoked from mail delivery agents
--------------------------------------------------------------------------------
Update Information:
Update to 3.4.3, with bugfixes and several security fixes. See
https://svn.apa
che.org/repos/asf/spamassassin/branches/3.4/build/announcements/3.4.3.txt for
the full announcement.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 12 2019 Kevin Fenzi <kevin(a)scrye.com> - 3.4.3-1
- Update to 3.4.3. Fixes bug #1782611
* Tue Oct 1 2019 Ond��ej Lyson��k <olysonek(a)redhat.com> - 3.4.2-8
- Fix issues found by Coverity Scan
* Tue Oct 1 2019 Ond��ej Lyson��k <olysonek(a)redhat.com> - 3.4.2-7
- Fix rawbody rules documentation
* Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.4.2-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Fri May 31 2019 Jitka Plesnikova <jplesnik(a)redhat.com> - 3.4.2-5
- Perl 5.30 rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1782611 - spamassassin-3.4.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1782611
--------------------------------------------------------------------------------
================================================================================
suricata-4.1.6-1.fc30 (FEDORA-2019-8ad277ba84)
Intrusion Detection System
--------------------------------------------------------------------------------
Update Information:
This is a bugfix release fixing various issues throughout the application. Of
note is that this fixes a number of IPv4 and TCP evasion issues.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 13 2019 Steve Grubb <sgrubb(a)redhat.com> 4.1.6-1
- New upstream bug and security release.
--------------------------------------------------------------------------------
================================================================================
unbound-1.9.6-1.fc30 (FEDORA-2019-c7b5103d2a)
Validating, recursive, and caching DNS(SEC) resolver
--------------------------------------------------------------------------------
Update Information:
Fix for CVE-2019-18934 and misc other security items
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 13 2019 Paul Wouters <pwouters(a)redhat.com> - 1.9.6-1
- Resolves: rhbz#1758107 unbound-1.9.5 is available
- Resolves: CVE-2019-18934
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1758107 - unbound-1.9.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1758107
--------------------------------------------------------------------------------
================================================================================
wordpress-5.3.1-1.fc30 (FEDORA-2019-1051e10c1e)
Blog tool and publishing platform
--------------------------------------------------------------------------------
Update Information:
See: [WordPress 5.3.1 Security and Maintenance
Release](https://wordpress.org/news/2019/12/wordpress-5-3-1-security-and-
maintenance-release/) **Four security issues** affect WordPress versions 5.3
and earlier; version 5.3.1 fixes them, so you���ll want to upgrade. If you haven���t
yet updated to 5.3, there are also updated versions of 5.2 and earlier that fix
the security issues. * Props to Daniel Bachhuber for finding an issue where
an unprivileged user could make a post sticky via the REST API. * Props to
Simon Scannell of RIPS Technologies for finding and disclosing an issue where
cross-site scripting (XSS) could be stored in well-crafted links. * Props to
the
WordPress.org Security Team for hardening wp_kses_bad_protocol() to ensure
that it is aware of the named colon attribute. * Props to Nguyen The Duc for
discovering a stored XSS vulnerability using block editor content.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 13 2019 Remi Collet <remi(a)remirepo.net> - 5.3.1-1
- WordPress 5.3.1 Security and Maintenance Release
--------------------------------------------------------------------------------