The following Fedora 30 Security updates need testing:
Age URL
131
https://bodhi.fedoraproject.org/updates/FEDORA-2019-71b2273a9f
libarchive-3.3.3-7.fc30
15
https://bodhi.fedoraproject.org/updates/FEDORA-2020-c870aa8378
tomcat-9.0.31-2.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2020-e35573f7df
okular-19.12.3-2.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-25f3aea389
phpMyAdmin-4.9.5-1.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-51637cf853
drupal8-8.8.4-1.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-f3fcb1608a
coturn-4.5.1.1-3.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-ab8e7463ab squid-4.10-3.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-7f625c5ea8 glibc-2.29-29.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-9c05b223cf
kernel-5.5.13-100.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-6b07ff2526
telnet-0.17-77.fc30
The following Fedora 30 Critical Path updates have yet to be approved:
Age URL
262
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c05e4425d1
dash-0.5.10.2-3.fc30
131
https://bodhi.fedoraproject.org/updates/FEDORA-2019-71b2273a9f
libarchive-3.3.3-7.fc30
25
https://bodhi.fedoraproject.org/updates/FEDORA-2020-f13060e7a5 vim-8.2.348-1.fc30
24
https://bodhi.fedoraproject.org/updates/FEDORA-2020-36282d2a6d cups-2.2.12-6.fc30
15
https://bodhi.fedoraproject.org/updates/FEDORA-2020-fffba1c2dd
python3-3.7.7-1.fc30 python3-docs-3.7.7-1.fc30
12
https://bodhi.fedoraproject.org/updates/FEDORA-2020-ed8d4d492b pcre2-10.34-8.fc30
12
https://bodhi.fedoraproject.org/updates/FEDORA-2020-9360ad9872
perl-Pod-Usage-1.70-1.fc30
12
https://bodhi.fedoraproject.org/updates/FEDORA-2020-1070052d10
linux-firmware-20200316-106.fc30
12
https://bodhi.fedoraproject.org/updates/FEDORA-2020-fa2df48609 pungi-4.2.1-2.fc30
9
https://bodhi.fedoraproject.org/updates/FEDORA-2020-036fae08b5 gcc-9.3.1-1.fc30
8
https://bodhi.fedoraproject.org/updates/FEDORA-2020-cde9529d3d
selinux-policy-3.14.3-57.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2020-c345af20c3 gdisk-1.0.5-1.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-057d9bbb8a fedora-repos-30-3
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-6c16509e84
python-productmd-1.25-1.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-b6287eafe3
dnsmasq-2.80-13.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-7f625c5ea8 glibc-2.29-29.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-e0b52ac07d
osinfo-db-20200325-1.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-b35b5c6e48
breeze-icon-theme-5.68.0-1.fc30 extra-cmake-modules-5.68.0-1.fc30 kf5-5.68.0-1.fc30
kf5-attica-5.68.0-1.fc30 kf5-baloo-5.68.0-1.fc30 kf5-bluez-qt-5.68.0-1.fc30
kf5-frameworkintegration-5.68.0-1.fc30 kf5-kactivities-5.68.0-1.fc30
kf5-kactivities-stats-5.68.0-1.fc30 kf5-kapidox-5.68.0-1.fc30 kf5-karchive-5.68.0-1.fc30
kf5-kauth-5.68.0-1.fc30 kf5-kbookmarks-5.68.0-1.fc30 kf5-kcmutils-5.68.0-1.fc30
kf5-kcodecs-5.68.0-1.fc30 kf5-kcompletion-5.68.0-1.fc30 kf5-kconfig-5.68.0-1.fc30
kf5-kconfigwidgets-5.68.0-1.fc30 kf5-kcoreaddons-5.68.0-1.fc30 kf5-kcrash-5.68.0-1.fc30
kf5-kdbusaddons-5.68.0-1.fc30 kf5-kdeclarative-5.68.0-1.fc30 kf5-kded-5.68.0-1.fc30
kf5-kdelibs4support-5.68.0-1.fc30 kf5-kdesignerplugin-5.68.0-1.fc30
kf5-kdesu-5.68.0-1.fc30 kf5-kdewebkit-5.68.0-1.fc30 kf5-kdnssd-5.68.0-1.fc30
kf5-kdoctools-5.68.0-1.fc30 kf5-kemoticons-5.68.0-1.fc30 kf5-kfilemetadata-5.68.0-1.fc30
kf5-kglobalaccel-5.68.0-1.fc30 kf5-kguiad
dons-5.68.0-1.fc30 kf5-kholidays-5.68.0-1.fc30 kf5-khtml-5.68.0-1.fc30
kf5-ki18n-5.68.0-1.fc30 kf5-kiconthemes-5.68.0-1.fc30 kf5-kidletime-5.68.0-1.fc30
kf5-kimageformats-5.68.0-1.fc30 kf5-kinit-5.68.0-1.fc30 kf5-kio-5.68.0-1.fc30
kf5-kirigami2-5.68.0-1.fc30 kf5-kitemmodels-5.68.0-1.fc30 kf5-kitemviews-5.68.0-1.fc30
kf5-kjobwidgets-5.68.0-1.fc30 kf5-kjs-5.68.0-1.fc30 kf5-kjsembed-5.68.0-1.fc30
kf5-kmediaplayer-5.68.0-1.fc30 kf5-knewstuff-5.68.0-1.fc30
kf5-knotifications-5.68.0-1.fc30 kf5-knotifyconfig-5.68.0-1.fc30
kf5-kpackage-5.68.0-1.fc30 kf5-kparts-5.68.0-1.fc30 kf5-kpeople-5.68.0-1.fc30
kf5-kplotting-5.68.0-1.fc30 kf5-kpty-5.68.0-2.fc30 kf5-kquickcharts-5.68.0-1.fc30
kf5-kross-5.68.0-1.fc30 kf5-krunner-5.68.0-1.fc30 kf5-kservice-5.68.0-1.fc30
kf5-ktexteditor-5.68.0-1.fc30 kf5-ktextwidgets-5.68.0-1.fc30
kf5-kunitconversion-5.68.0-1.fc30 kf5-kwallet-5.68.0-1.fc30 kf5-kwayland-5.68.0-1.fc30
kf5-kwidgetsaddons-5.68.0-1.fc30 kf5-kwindowsystem-5.68.0-1.fc30 kf5-kxmlgui-5.68.0-1.fc30
kf5-kxmlrpcclient-5.68.0-1.fc30 kf5-modemmanager-qt-5.68.0-1.fc30
kf5-networkmanager-qt-5.68.0-1.fc30 kf5-plasma-5.68.0-1.fc30 kf5-prison-5.68.0-1.fc30
kf5-purpose-5.68.0-1.fc30 kf5-solid-5.68.0-1.fc30 kf5-sonnet-5.68.0-1.fc30
kf5-syndication-5.68.0-1.fc30 kf5-syntax-highlighting-5.68.0-1.fc30
kf5-threadweaver-5.68.0-1.fc30 oxygen-icon-theme-5.68.0-1.fc30
qqc2-desktop-style-5.68.0-1.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-81515be78b
mtools-4.0.24-1.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-9c05b223cf
kernel-5.5.13-100.fc30
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-a1eacf6355
samba-4.10.14-0.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2020-1a094b4f91
perl-Encode-3.05-14.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2020-b3edb41afd
sudo-1.8.31p1-1.fc30
The following builds have been pushed to Fedora 30 updates-testing
libwnck3-3.36.0-1.fc30
light-1.2.2-2.fc30
lollypop-1.2.32-1.fc30
mksh-58-1.fc30
python-scramp-1.1.0-1.fc30
python-sqlalchemy-1.3.15-1.fc30
qownnotes-20.3.7-1.20200328git7fe3aa6.fc30
texworks-0.6.5-1.fc30
vim-gitgutter-0-3.20200328git7c48aa1.fc30
vim-gv-0-4.20200328git72dc64d.fc30
wingpanel-indicator-network-2.2.3-1.fc30
Details about builds:
================================================================================
libwnck3-3.36.0-1.fc30 (FEDORA-2020-973e09dbd4)
Window Navigator Construction Kit
--------------------------------------------------------------------------------
Update Information:
- update to 3.36.0
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 28 2020 Wolfgang Ulbrich <fedora(a)raveit.de> - 3.36.0-1
- update to 3.36.0
--------------------------------------------------------------------------------
================================================================================
light-1.2.2-2.fc30 (FEDORA-2020-5f93872592)
Control backlight controllers
--------------------------------------------------------------------------------
Update Information:
- Fix post hook for fresh installations where `/etc/light` does not exist yet
---- Upgrade to new upstream version light-1.2.2
https://github.com/haikarainen/light/releases/tag/v1.2.2 ---- - Fix RHBZ
1792875 - Escalation of Privileges via "light" SUID Binary
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 28 2020 Jakub Kadl����k <jkadlcik(a)redhat.com> - 1.2.2-2
- Fix post hook for fresh installations where /etc/light
does not exist yet
* Fri Mar 20 2020 Jakub Kadl����k <jkadlcik(a)redhat.com> - 1.2.2-1
- Upgrade to new upstream version light-1.2.2
* Wed Mar 18 2020 Jakub Kadl����k <jkadlcik(a)redhat.com> - 1.2.1-5
- Add post hook to set correct permissions for /etc/light
* Wed Mar 18 2020 Jakub Kadl����k <jkadlcik(a)redhat.com> - 1.2.1-4
- Fix RHBZ 1792875 - Escalation of Privileges via "light" SUID Binary
* Sun Feb 16 2020 Jakub Kadl����k <jkadlcik(a)redhat.com> - 1.2.1-3
- Explicitly use -fcommon to fix building for F32
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1818481 - light postinstall scriptlet does not properly work for new
installs
https://bugzilla.redhat.com/show_bug.cgi?id=1818481
--------------------------------------------------------------------------------
================================================================================
lollypop-1.2.32-1.fc30 (FEDORA-2020-8a30c5cc07)
Music player for GNOME
--------------------------------------------------------------------------------
Update Information:
Update to 1.2.32-1 ---- Update to 1.2.31-1 ---- Update to 1.2.30-1 ----
Update to 1.2.29-1 ---- Update to 1.2.26-1
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 28 2020 Martin Gansser <martinkg(a)fedoraproject.org> - 1.2.32-1
- Update to 1.2.32
* Fri Mar 27 2020 Martin Gansser <martinkg(a)fedoraproject.org> - 1.2.31-1
- Update to 1.2.31
* Fri Mar 27 2020 Martin Gansser <martinkg(a)fedoraproject.org> - 1.2.30-1
- Update to 1.2.30
* Sun Mar 22 2020 Martin Gansser <martinkg(a)fedoraproject.org> - 1.2.29-1
- Update to 1.2.29
* Fri Mar 20 2020 Martin Gansser <martinkg(a)fedoraproject.org> - 1.2.26-1
- Update to 1.2.26
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1815183 - lollypop-1.2.26 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1815183
[ 2 ] Bug #1815566 - lollypop-1.2.29 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1815566
[ 3 ] Bug #1817964 - lollypop-1.2.30 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1817964
[ 4 ] Bug #1818075 - lollypop-1.2.31 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1818075
[ 5 ] Bug #1818153 - lollypop-1.2.32 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1818153
--------------------------------------------------------------------------------
================================================================================
mksh-58-1.fc30 (FEDORA-2020-89e1d6a4da)
MirBSD enhanced version of the Korn Shell
--------------------------------------------------------------------------------
Update Information:
mksh R58 ======== R58 contains a lot of fixes and improvements: * hyphen-
used-as-minus-sign (on jessie, not later, ���������) * Fix system info gcc
dump{machine,version} shell escaping level * Document
`KSH_VERSIONNAME_VENDOR_EXT` in `Build.sh` * Be more explicit about the LTO
bug exposed by `check.t` * Add `-x` (file locks) and AIX-specific `-r` ulimits
* Handle Midipix as test environment and fix some warnings * Fix some
`Build.sh` issues as Mirtoconf is now used by MirCPIO and MagicPoint * Improve
CRLF to LF conversion * Ensure ECHO mode is enabled at startup so read has
local echo * Let `check.pl` retain the `PERLIO` env variable * Unbreak
`nounset-1` test on systems with drive letters * Make `ulimit-3` test work
without `|&` (that is, incomplete ports, i.e. those with
`-DMKSH_NOPROSPECTOFWORK`) * Disable `xxx-stat-1` test for now, fails when run
as root * Drop `Build.sh` flags `-c` combine, `-c lto` * Exit 126 on
`execve(2)` failure, not 1 (e.g. E2BIG) * Behave set and export/readonly-on-
read-only-variables when run with `command` and `command dot` * `dot.mkshrc`:
simplify; enhance (un)setting locale example * Catch build errors earlier *
Add `-fno-lto` (if GCC is detected) to `CFLAGS` and `LDFLAGS` * Limit
`HISTSIZE` to 65535, as long pre-announced * Unbreak testsuite `selftest-tty-
absent` for `lksh` * Begin work on support for neatcc (needs neatcc to evolve
first) * Fix possibly not enough aligned access in struct job * Support
going full setugid by running `set -p` once interactive * Document another
(arcane, almost nowhere needed) definition * Improve code legibility and
testsuite reliability and maintenance * Speed up trivial `+=` cases
(LP#1855167) * Some further code and memory optimisation and test coverage *
Document that `+=` is always string append (LP#1857702) * Fix ���set -e appears
active within eval but isn���t��� and another bug related to using set ��e inside
eval * Handle parameter assignment in front of invocations of POSIX-style
functions like ksh-style ones and external utilities; cf. Debian #935115 * Fix
bad memory access for invalid syntax (LP#1857828, LP#1857826) * Update
MALLOC_OPTIONS-using testcase for newer OpenBSD * Support `lacc` as compiler
(just detecting, no change) * Share `__IDSTRING` with `jupp` * Update string
comparison/pattern documentation * Document `vi` command line editing mode
state better * Add `FAQ2HTML.sh` to convert `mksh.faq` to local valid
XHTML+CSS * Correct backslash expansion documentation; caveat re. 16-bit UCS
* Fix extra empty field on IFS-NWS trim expansion * Improve code performance,
quality, robustness and correctness * Allow `${x:n}` where n is an identifier
* Permit `+` in alias names, but not leading * Fix here strings for `$@`
(LP#1857195) * Add `vi` mode PgDn, similar to PgUp doing history search *
`Build.sh` fixup unreliable `test -n`/`-z` * Correct documentation of `vi`
mode `@c` * Update to UCD 13.0.0 * Use nanoseconds in `test -nt` / `-ot`
(LP#1855325)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 27 2020 Robert Scheck <robert(a)fedoraproject.org> 58-1
- Upgrade to 58 (#1817981)
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 57-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 57-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1817981 - mksh-58 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1817981
--------------------------------------------------------------------------------
================================================================================
python-scramp-1.1.0-1.fc30 (FEDORA-2020-5abe9def21)
An implementation of the SCRAM protocol
--------------------------------------------------------------------------------
Update Information:
Initial package for Fedora
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1817811 - Review Request: python-scramp - An implementation of the SCRAM
protocol
https://bugzilla.redhat.com/show_bug.cgi?id=1817811
--------------------------------------------------------------------------------
================================================================================
python-sqlalchemy-1.3.15-1.fc30 (FEDORA-2020-eff13ee824)
Modular and flexible ORM library for python
--------------------------------------------------------------------------------
Update Information:
This is a bugfix and enhancement release. The upstream announcements for
version
[
1.3.14](https://www.sqlalchemy.org/blog/2020/03/10/sqlalchemy-1.3.14-rele...
and
[
1.3.15](https://www.sqlalchemy.org/blog/2020/03/11/sqlalchemy-1.3.15-rele...
summarize and the [
changelog](https://docs.sqlalchemy.org/en/13/changelog/change
log_13.html#change-1.3.15) contains a detailed list of changes in version
1.3.15.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 26 2020 Nils Philippsen <nils(a)tiptoe.de> - 1.3.15-1
- version 1.3.15
- quieten %setup
* Thu Jan 30 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.13-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1812146 - python-sqlalchemy-1.3.15 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1812146
--------------------------------------------------------------------------------
================================================================================
qownnotes-20.3.7-1.20200328git7fe3aa6.fc30 (FEDORA-2020-e4953d744d)
Plain-text file markdown note taking with Nextcloud integration
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 28 2020 Artem Polishchuk <ego.cordatus(a)gmail.com> -
20.3.7-1.20200328git7fe3aa6
- Update to 20.3.7
* Thu Jan 30 2020 Fedora Release Engineering <releng(a)fedoraproject.org> -
20.1.11-2.20200119gitadec18b
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
texworks-0.6.5-1.fc30 (FEDORA-2020-d72c6c9e19)
A simple IDE for authoring TeX documents
--------------------------------------------------------------------------------
Update Information:
Refer to
https://github.com/TeXworks/texworks/releases/tag/release-0.6.5
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 27 2020 Robin Lee <cheeselee(a)fedoraproject.org> - 0.6.5-1
- Update to 0.6.5
* Wed Mar 18 2020 Robin Lee <cheeselee(a)fedoraproject.org> - 0.6.4-1
- Update to 0.6.4
- Drop switches for Qt4 and Python2
* Tue Feb 25 2020 Robin Lee <cheeselee(a)fedoraproject.org> - 0.6.3-6
- Filter private shared libraries
* Fri Jan 31 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.3-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Fri Jan 17 2020 Marek Kasik <mkasik(a)redhat.com> - 0.6.3-4
- Rebuild for poppler-0.84.0
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 0.6.3-3
- Rebuilt for Python 3.8
* Sat Jul 27 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.3-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1813709 - texworks-0.6.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1813709
[ 2 ] Bug #1817254 - texworks-0.6.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1817254
--------------------------------------------------------------------------------
================================================================================
vim-gitgutter-0-3.20200328git7c48aa1.fc30 (FEDORA-2020-d3fdeb0e15)
Shows a git diff in the gutter and stages/undoes hunks and partial hunks
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 28 2020 Artem Polishchuk <ego.cordatus(a)gmail.com> -
0-3.20200328git7c48aa1
- Update to latest git snapshot
* Fri Jan 31 2020 Fedora Release Engineering <releng(a)fedoraproject.org> -
0-3.20191207git1c53af9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
vim-gv-0-4.20200328git72dc64d.fc30 (FEDORA-2020-7570e971ad)
Git commit browser in Vim
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 28 2020 Artem Polishchuk <ego.cordatus(a)gmail.com> -
0-4.20200328git72dc64d
- Update to latest git snapshot
* Fri Jan 31 2020 Fedora Release Engineering <releng(a)fedoraproject.org> -
0-4.20191207gitf12b8b8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
wingpanel-indicator-network-2.2.3-1.fc30 (FEDORA-2020-726fa1780f)
Network Indicator for wingpanel
--------------------------------------------------------------------------------
Update Information:
Update to version 2.2.3. Release notes:
https://github.com/elementary/wingpanel-indicator-network/releases/tag/2.2.3
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 28 2020 Fabio Valentini <decathorpe(a)gmail.com> - 2.2.3-1
- Update to version 2.2.3.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1818423 - wingpanel-indicator-network-2.2.3-debian is available
https://bugzilla.redhat.com/show_bug.cgi?id=1818423
--------------------------------------------------------------------------------