The following Fedora 30 Security updates need testing:
Age URL
28
https://bodhi.fedoraproject.org/updates/FEDORA-2019-fe6d1fbffa
libu2f-host-1.1.8-1.fc30
28
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b0c7f0d94a
ntp-4.2.8p13-1.fc30
23
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ea0f30909a
tcpflow-1.5.0-4.fc30
21
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9effd63191
WALinuxAgent-2.2.38-1.fc30
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-2d8ee47f61
mod_auth_mellon-0.14.2-1.fc30
11
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c3627a0e7a
python-yara-3.9.0-2.fc30 yara-3.9.0-1.fc30
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-248ad990b4
aria2-1.34.0-4.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-a6e1287e76
python-notebook-5.7.8-1.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-1d78e14cfd php-7.3.4-1.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c9cbbbb5c0
mingw-exiv2-0.27-3.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2019-bce274cbf6
nodejs-simple-markdown-0.4.4-1.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-961cda41f0
kernel-headers-5.0.6-300.fc30 kernel-tools-5.0.6-300.fc30 kernel-5.0.6-300.fc30
The following Fedora 30 Critical Path updates have yet to be approved:
Age URL
24
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6b2e124a4a koji-1.17.0-5.fc30
23
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b4561ea075
fedfind-4.2.2-1.fc30 python-productmd-1.20-1.fc30
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-f54d1fa595
libguestfs-1.40.2-4.fc30
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-5af30da0ed pcre2-10.32-9.fc30
8
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3bbb39b976
python3-3.7.3-1.fc30
8
https://bodhi.fedoraproject.org/updates/FEDORA-2019-569903e0f5 clang-8.0.0-1.fc30
compiler-rt-8.0.0-1.fc30 libcxx-8.0.0-1.fc30 libcxxabi-8.0.0-1.fc30 libomp-8.0.0-1.fc30
lld-8.0.0-1.fc30 lldb-8.0.0-1.fc30 llvm-8.0.0-1.fc30 llvm-test-suite-8.0.0-1.fc30
python-lit-0.8.0-1.fc30
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-f6716411ab sddm-0.18.0-4.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-55d7a8120c
highlight-3.50-1.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ecdfd445d4
libvirt-5.1.0-4.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-15640aaa6f quota-4.04-12.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-fb4683a2ee
pungi-4.1.35-1.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-961cda41f0
kernel-headers-5.0.6-300.fc30 kernel-tools-5.0.6-300.fc30 kernel-5.0.6-300.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ade3788aac
initial-setup-0.3.69-1.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-05ac7b2ca6
cryptsetup-2.1.0-3.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-385e8ec9d7 fuse-2.9.9-2.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c6499f243b
kexec-tools-2.0.19-1.fc30
The following builds have been pushed to Fedora 30 updates-testing
ansible-2.7.10-1.fc30
fedora-messaging-1.6.0-1.fc30
fedora-obsolete-packages-30-32
feh-3.1.3-1.fc30
freeipa-healthcheck-0.1-2.fc30
gerbera-1.3.1-1.fc30
glibc-2.29-9.fc30
module-build-service-2.19.0-1.fc30
mozldap-6.0.5-24.fc30
nodejs-pg-types-2.0.1-1.fc30
nodejs-postgres-date-1.0.4-1.fc30
python-ipdb-0.12-1.fc30
scorep-5.0-1.fc30
sos-collector-1.7-2.fc30
Details about builds:
================================================================================
ansible-2.7.10-1.fc30 (FEDORA-2019-9cd526d3ae)
SSH-based configuration management, deployment, and task execution system
--------------------------------------------------------------------------------
Update Information:
Update to 2.7.10 bugfix release. See
https://github.com/ansible/ansible/blob/stable-2.7/changelogs/CHANGELOG-v...
for detailed information.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 4 2019 Kevin Fenzi <kevin(a)scrye.com> - 2.7.10-1
- Update to 2.7.10. Fixes bug #1696379
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1696379 - ansible-2.7.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1696379
--------------------------------------------------------------------------------
================================================================================
fedora-messaging-1.6.0-1.fc30 (FEDORA-2019-7268c907df)
Set of tools for using Fedora's messaging infrastructure
--------------------------------------------------------------------------------
Update Information:
Update to fedora-messaging v1.6.0
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 4 2019 Jeremy Cline <jcline(a)redhat.com> - 1.6.0-1
- Update to v1.6.0
--------------------------------------------------------------------------------
================================================================================
fedora-obsolete-packages-30-32 (FEDORA-2019-b7fa2ed928)
A package to obsolete retired packages
--------------------------------------------------------------------------------
Update Information:
Obsolete another batch of problematic mass retired python2 packages ---- Add
obsoletes for PyXB that was retired in F30.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 4 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 30-32
- Obsolete another batch of problematic mass retired python2 packages
https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal
- Obsolete python2-pylint (#1686848)
- Obsolete python2 subpackages of ceph (#1687998)
* Thu Apr 4 2019 Kalev Lember <klember(a)redhat.com> - 30-31
- Obsolete PyXB (#1696209)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1686848 - Obsolete python2-pylint
https://bugzilla.redhat.com/show_bug.cgi?id=1686848
[ 2 ] Bug #1687998 - Please add python-ceph obsolete to f-o-p
https://bugzilla.redhat.com/show_bug.cgi?id=1687998
[ 3 ] Bug #1696209 - Obsolete PyXB
https://bugzilla.redhat.com/show_bug.cgi?id=1696209
--------------------------------------------------------------------------------
================================================================================
feh-3.1.3-1.fc30 (FEDORA-2019-88c1b7e731)
Fast command line image viewer using Imlib2
--------------------------------------------------------------------------------
Update Information:
- update to 3.1.3 fixes rhbz #1674926
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 4 2019 Filipe Rosset <rosset.filipe(a)gmail.com> - 3.1.3-1
- update to 3.1.3 fixes rhbz #1674926
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1674926 - feh-3.1.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1674926
--------------------------------------------------------------------------------
================================================================================
freeipa-healthcheck-0.1-2.fc30 (FEDORA-2019-69e28900cc)
Health check tool for FreeIPA
--------------------------------------------------------------------------------
Update Information:
First build of freeipa-healthcheck for f30
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1695323 - Review Request: freeipa-healthcheck - Health check tool for
FreeIPA
https://bugzilla.redhat.com/show_bug.cgi?id=1695323
--------------------------------------------------------------------------------
================================================================================
gerbera-1.3.1-1.fc30 (FEDORA-2019-f0b0754c3c)
UPnP Media Server
--------------------------------------------------------------------------------
Update Information:
1.3.1
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 4 2019 Gwyn Ciesla <gwync(a)protonmail.com> - 1.3.1-1
- 1.3.1
* Thu Feb 21 2019 Gwyn Ciesla <gwync(a)protonmail.com> - 1.3.0-4
- Drop lastlibfm, liblastfm not working yet.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1696424 - gerbera-1.3.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1696424
--------------------------------------------------------------------------------
================================================================================
glibc-2.29-9.fc30 (FEDORA-2019-8a43421994)
The GNU libc libraries
--------------------------------------------------------------------------------
Update Information:
This glibc update adds support for the new Japanese era, Reiwa, which will begin
on May 1st. It also includes several other upstream bugfixes via upstream sync:
* Fix output of LD_SHOW_AUXV=1 * regex: fix read overrun [BZ #24114] * Record
CVE-2019-9169 in NEWS and ChangeLog [BZ #24114] * S390: Mark vx and vxe as
important hwcap * ja_JP: Change the offset for Taisho gan-nen from 2 to 1 [BZ
#24162] * ja_JP locale: Add entry for the new Japanese era [BZ #22964]
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 3 2019 Arjun Shankar <arjun(a)redhat.com> - 2.29-9
- Auto-sync with upstream branch release/2.29/master,
commit 0941350c20a52447e53c5169354408e3db591f73:
- Fix output of LD_SHOW_AUXV=1
- regex: fix read overrun [BZ #24114]
- Record CVE-2019-9169 in NEWS and ChangeLog [BZ #24114]
- S390: Mark vx and vxe as important hwcap
- ja_JP: Change the offset for Taisho gan-nen from 2 to 1 [BZ #24162]
- ja_JP locale: Add entry for the new Japanese era [BZ #22964]
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1696395 - glibc: The Japanese Era name will be changed on May 1, 2019 [f30]
https://bugzilla.redhat.com/show_bug.cgi?id=1696395
--------------------------------------------------------------------------------
================================================================================
module-build-service-2.19.0-1.fc30 (FEDORA-2019-4ead5fba6d)
The Module Build Service for Modularity
--------------------------------------------------------------------------------
Update Information:
Update to v2.19.0 * Fix an issue in MMDResolver when a transitive dependency
cannot be satisfied * Add support for offline local builds that use local
repositories for dependency resolution * Add initial support for gating of
modules using Greenwave * Fix a bug that caused successful local builds to not
regenerate the repo with module metadata * Allow resubmitting the same NSV for
scratch module builds * Allow importing modules without a Koji tag * Add extra
user input validation * Allow whitelisted buildrequires with
xmd.mbs.disttag_marking set to influnece the disttag * Allow buildrequiring
virtual streams to always get the latest
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 4 2019 mprahl <mprahl(a)redhat.com> - 2.19.0-1
- new version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1692485 - module-build-service-2.18.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1692485
--------------------------------------------------------------------------------
================================================================================
mozldap-6.0.5-24.fc30 (FEDORA-2019-8aec9fc1dc)
Mozilla LDAP C SDK
--------------------------------------------------------------------------------
Update Information:
Bump version to 6.0.5-24
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 4 2019 Mark Reynolds <mreynolds(a)redhat.com> - 6.0.5-24
- Bump version to 6.0.5-24
- Add perl build requirement and stop building i686 because of no srvcore
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.0.5-23
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.0.5-22
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.0.5-21
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Thu Aug 3 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.0.5-20
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.0.5-19
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
nodejs-pg-types-2.0.1-1.fc30 (FEDORA-2019-5ae47ecb9b)
Query result type converters for node-postgres
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream versions
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 4 2019 Tom Hughes <tom(a)compton.nu> - 2.0.1-1
- Update to 2.0.1 upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1695623 - nodejs-postgres-date-1.0.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1695623
[ 2 ] Bug #1696343 - nodejs-pg-types-2.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1696343
--------------------------------------------------------------------------------
================================================================================
nodejs-postgres-date-1.0.4-1.fc30 (FEDORA-2019-5ae47ecb9b)
Postgres date column parser
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream versions
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 3 2019 Tom Hughes <tom(a)compton.nu> - 1.0.4-1
- Update to 1.0.4 upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1695623 - nodejs-postgres-date-1.0.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1695623
[ 2 ] Bug #1696343 - nodejs-pg-types-2.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1696343
--------------------------------------------------------------------------------
================================================================================
python-ipdb-0.12-1.fc30 (FEDORA-2019-6bf4cd3b7c)
IPython enabled Python debugger
--------------------------------------------------------------------------------
Update Information:
Update to [
0.12](https://github.com/gotcha/ipdb/blob/0.12/HISTORY.txt)
(rhbz#1690864).
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 4 2019 Randy Barlow <bowlofeggs(a)fedoraproject.org> - 0.12-1
- Update to 0.12 (#1690864).
-
https://github.com/gotcha/ipdb/blob/0.12/HISTORY.txt
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1690864 - python-ipdb-0.12 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1690864
--------------------------------------------------------------------------------
================================================================================
scorep-5.0-1.fc30 (FEDORA-2019-6d729fe981)
Scalable Performance Measurement Infrastructure for Parallel Codes
--------------------------------------------------------------------------------
Update Information:
New version with support for orphan threads and Cartesian topologies.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 25 2019 Dave Love <loveshack(a)fedoraproject.org> - 5.0-1
- New version
- Update source URL
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1692310 - scorep-5.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1692310
--------------------------------------------------------------------------------
================================================================================
sos-collector-1.7-2.fc30 (FEDORA-2019-08cdf3728a)
Capture sosreports from multiple nodes simultaneously
--------------------------------------------------------------------------------
Update Information:
Update to the latest upstream 1.7 release. Major changes to how execution
inside a container or on containerized hosts is handled. New 'none' cluster to
avoid any cluster-level checks at all, allowing users to just provide a list of
--nodes.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 4 2019 Jake Hunsaker <jhunsake(a)redhat.com> - 1.7-2
- Fix 'none' cluster type enablement
* Mon Apr 1 2019 Jake Hunsaker <jhunsake(a)redhat.com> - 1.7-1
- New upstream release
--------------------------------------------------------------------------------