The following Fedora 30 Security updates need testing:
Age URL
104
https://bodhi.fedoraproject.org/updates/FEDORA-2019-71b2273a9f
libarchive-3.3.3-7.fc30
37
https://bodhi.fedoraproject.org/updates/FEDORA-2020-cc26574961
chromium-79.0.3945.130-1.fc30
13
https://bodhi.fedoraproject.org/updates/FEDORA-2020-2211f3adde
thunderbird-68.5.0-1.fc30
12
https://bodhi.fedoraproject.org/updates/FEDORA-2020-6f1209bb45
libtiff-4.0.10-8.fc30
9
https://bodhi.fedoraproject.org/updates/FEDORA-2020-571091c70b ppp-2.4.7-34.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2020-9009363f0f zsh-5.7.1-5.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2020-31216ab928
opensmtpd-6.6.4p1-1.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-42eb8821db
openfortivpn-1.12.0-1.fc30
The following Fedora 30 Critical Path updates have yet to be approved:
Age URL
235
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c05e4425d1
dash-0.5.10.2-3.fc30
104
https://bodhi.fedoraproject.org/updates/FEDORA-2019-71b2273a9f
libarchive-3.3.3-7.fc30
41
https://bodhi.fedoraproject.org/updates/FEDORA-2020-aa758fe515 koji-1.20.0-1.fc30
13
https://bodhi.fedoraproject.org/updates/FEDORA-2020-d588eaa6e2
net-snmp-5.8-16.fc30
13
https://bodhi.fedoraproject.org/updates/FEDORA-2020-2211f3adde
thunderbird-68.5.0-1.fc30
12
https://bodhi.fedoraproject.org/updates/FEDORA-2020-6f1209bb45
libtiff-4.0.10-8.fc30
11
https://bodhi.fedoraproject.org/updates/FEDORA-2020-765f45cd37
libtirpc-1.2.5-1.rc2.fc30
10
https://bodhi.fedoraproject.org/updates/FEDORA-2020-366bc158c9 pcre2-10.34-7.fc30
9
https://bodhi.fedoraproject.org/updates/FEDORA-2020-571091c70b ppp-2.4.7-34.fc30
7
https://bodhi.fedoraproject.org/updates/FEDORA-2020-5d27f4c3f9
wireless-tools-29-25.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-b257bf174c
shadow-utils-4.6-9.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-46d974c05c
epiphany-3.32.6-1.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-43a673534c sssd-2.2.3-13.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-1f7f07fc0b
libpcap-1.9.1-2.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-3c0dd5e756 pcre-8.44-1.fc30
The following builds have been pushed to Fedora 30 updates-testing
PyYAML-5.3-3.fc30
R-forcats-0.5.0-1.fc30
R-rlang-0.4.5-1.fc30~bootstrap
TurboGears2-2.4.3-1.fc30
cacti-1.2.10-1.fc30
cacti-spine-1.2.10-1.fc30
cups-filters-1.27.2-1.fc30
enchant2-2.2.8-1.fc30
glusterfs-6.8-1.fc30
golang-github-pebbe-zmq4-1.2.0-1.fc30
gpxsee-7.24-1.fc30
hwdata-0.333-1.fc30
mingw-enchant2-2.2.8-1.fc30
perl-CPAN-Perl-Releases-5.20200229-1.fc30
perl-Encode-3.03-12.fc30
perl-List-AllUtils-0.16-1.fc30
perl-String-Print-0.94-1.fc30
php-composer-xdebug-handler-1.4.1-1.fc30
podman-1.8.0-4.fc30
python39-3.9.0~a4-1.fc30
swing-layout-1.0.4-18.fc30
Details about builds:
================================================================================
PyYAML-5.3-3.fc30 (FEDORA-2020-c1b46572de)
YAML parser and emitter for Python
--------------------------------------------------------------------------------
Update Information:
Fix python2 on Fedora < 32 (rhbz#1808812)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 2 2020 John Eckersberg <eck(a)redhat.com> - 5.3-3
- Fix python2 on Fedora < 32 (rhbz#1808812)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1808812 - PyYAML-5.3-2.fc30/fc31 pushed, removed python2-pyyaml, breaking pip
and 70 other packages
https://bugzilla.redhat.com/show_bug.cgi?id=1808812
--------------------------------------------------------------------------------
================================================================================
R-forcats-0.5.0-1.fc30 (FEDORA-2020-b13e2d4683)
Tools for Working with Categorical Variables (Factors)
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 2 2020 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.5.0-1
- Update to latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1808884 - R-forcats-0.5.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1808884
--------------------------------------------------------------------------------
================================================================================
R-rlang-0.4.5-1.fc30~bootstrap (FEDORA-2020-7104b69631)
Functions for Base Types and Core R and 'Tidyverse' Features
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 2 2020 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.4.5-1
- Update to latest version
* Mon Feb 24 2020 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.4.4-1
- Update to latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1794783 - R-rlang-0.4.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1794783
[ 2 ] Bug #1808869 - R-rlang-0.4.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1808869
--------------------------------------------------------------------------------
================================================================================
TurboGears2-2.4.3-1.fc30 (FEDORA-2020-be9998c41d)
Next generation front-to-back web development megaframework
--------------------------------------------------------------------------------
Update Information:
Update to 2.4.3 (#1763576)
--------------------------------------------------------------------------------
ChangeLog:
* Sun Mar 1 2020 Fedora Release Monitoring <release-monitoring(a)fedoraproject.org> -
2.4.3-1
- Update to 2.4.3 (#1763576)
* Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.4.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1763576 - TurboGears2-2.4.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1763576
--------------------------------------------------------------------------------
================================================================================
cacti-1.2.10-1.fc30 (FEDORA-2020-552e4e7879)
An rrd based graphing tool
--------------------------------------------------------------------------------
Update Information:
- Update to 1.2.10 - CVE-2020-8813 Release notes:
https://www.cacti.net/release_notes.php?version=1.2.10
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 2 2020 Morten Stevens <mstevens(a)fedoraproject.org> - 1.2.10-1
- Update to 1.2.10
- CVE-2020-8813
--------------------------------------------------------------------------------
================================================================================
cacti-spine-1.2.10-1.fc30 (FEDORA-2020-552e4e7879)
Threaded poller for Cacti written in C
--------------------------------------------------------------------------------
Update Information:
- Update to 1.2.10 - CVE-2020-8813 Release notes:
https://www.cacti.net/release_notes.php?version=1.2.10
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 2 2020 Morten Stevens <mstevens(a)fedoraproject.org> - 1.2.10-1
- Update to 1.2.10
--------------------------------------------------------------------------------
================================================================================
cups-filters-1.27.2-1.fc30 (FEDORA-2020-d5c336ffa0)
OpenPrinting CUPS filters and backends
--------------------------------------------------------------------------------
Update Information:
1.27.2
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 2 2020 Zdenek Dohnal <zdohnal(a)redhat.com> - 1.27.2-1
- 1.27.2
* Tue Feb 25 2020 Zdenek Dohnal <zdohnal(a)redhat.com> - 1.27.1-2
- 1806862 - foomatic-rip handles empty files in bad way
--------------------------------------------------------------------------------
================================================================================
enchant2-2.2.8-1.fc30 (FEDORA-2020-46169d6812)
An Enchanting Spell Checking Library
--------------------------------------------------------------------------------
Update Information:
Update to enchant-2.2.8, see
https://github.com/AbiWord/enchant/blob/master/NEWS
for details.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 2 2020 Sandro Mani <manisandro(a)gmail.com> - 2.2.8-1
- Update to 2.2.8
* Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.2.7-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
glusterfs-6.8-1.fc30 (FEDORA-2020-4f4ab30209)
Distributed File System
--------------------------------------------------------------------------------
Update Information:
GlusterFS 6.8 GA
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 2 2020 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 6.8-1
- 6.8 GA
--------------------------------------------------------------------------------
================================================================================
golang-github-pebbe-zmq4-1.2.0-1.fc30 (FEDORA-2020-30c956e56b)
Go interface to ZeroMQ version 4
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 2 2020 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 1.2.0-1
- Update to latest version
* Fri Feb 28 2020 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 1.1.1-1
- Update to latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1808566 - golang-github-pebbe-zmq4-1.1.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1808566
[ 2 ] Bug #1808880 - golang-github-pebbe-zmq4-1.2.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1808880
--------------------------------------------------------------------------------
================================================================================
gpxsee-7.24-1.fc30 (FEDORA-2020-06d5f79172)
GPS log file viewer and analyzer
--------------------------------------------------------------------------------
Update Information:
**News in version 7.24:** - Multiple WMS maps fixes
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 2 2020 Nikola Forr�� <nforro(a)redhat.com> - 7.24-1
- Update to version 7.24
resolves: #1808914
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1808914 - gpxsee-7.24 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1808914
--------------------------------------------------------------------------------
================================================================================
hwdata-0.333-1.fc30 (FEDORA-2020-c47f499c3b)
Hardware identification and configuration data
--------------------------------------------------------------------------------
Update Information:
Updated pci, usb and vendor ids.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 2 2020 Vitezslav Crhonek <vcrhonek(a)redhat.com> - 0.333-1
- Updated pci, usb and vendor ids.
--------------------------------------------------------------------------------
================================================================================
mingw-enchant2-2.2.8-1.fc30 (FEDORA-2020-46169d6812)
MinGW Windows enchant2 library
--------------------------------------------------------------------------------
Update Information:
Update to enchant-2.2.8, see
https://github.com/AbiWord/enchant/blob/master/NEWS
for details.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 2 2020 Sandro Mani <manisandro(a)gmail.com> - 2.2.8-1
- Update to 2.2.8
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.2.7-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Tue Oct 8 2019 Sandro Mani <manisandro(a)gmail.com> - 2.2.7-2
- Rebuild (Changes/Mingw32GccDwarf2)
--------------------------------------------------------------------------------
================================================================================
perl-CPAN-Perl-Releases-5.20200229-1.fc30 (FEDORA-2020-81dde32327)
Mapping Perl releases on CPAN to the location of the tarballs
--------------------------------------------------------------------------------
Update Information:
Updated to the latest release ---- This release provides data about Perl
5.31.9.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 2 2020 Jitka Plesnikova <jplesnik(a)redhat.com> - 5.20200229-1
- 5.20200229 bump
* Fri Feb 21 2020 Petr Pisar <ppisar(a)redhat.com> - 5.20200220-1
- 5.20200220 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1808744 - perl-CPAN-Perl-Releases-5.20200229 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1808744
[ 2 ] Bug #1805545 - perl-CPAN-Perl-Releases-5.20200220 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1805545
--------------------------------------------------------------------------------
================================================================================
perl-Encode-3.03-12.fc30 (FEDORA-2020-c4f2c2c7ab)
Character encodings in Perl
--------------------------------------------------------------------------------
Update Information:
This release fixes a compiler warning. It also stops using a deprecated Perl
function.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 2 2020 Petr Pisar <ppisar(a)redhat.com> - 4:3.03-12
- 3.03 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1808956 - perl-Encode-3.03 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1808956
--------------------------------------------------------------------------------
================================================================================
perl-List-AllUtils-0.16-1.fc30 (FEDORA-2020-25768a1a3a)
Combines List::Util and List::SomeUtils
--------------------------------------------------------------------------------
Update Information:
This release updates a documentation.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 2 2020 Petr Pisar <ppisar(a)redhat.com> - 0.16-1
- 0.16 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1808774 - perl-List-AllUtils-0.16 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1808774
--------------------------------------------------------------------------------
================================================================================
perl-String-Print-0.94-1.fc30 (FEDORA-2020-a75aef5b6a)
Alternative for Perl printf
--------------------------------------------------------------------------------
Update Information:
This release fixes parsing a year value surrounded with spaces.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 2 2020 Petr Pisar <ppisar(a)redhat.com> - 0.94-1
- 0.94 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1808816 - perl-String-Print-0.94 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1808816
--------------------------------------------------------------------------------
================================================================================
php-composer-xdebug-handler-1.4.1-1.fc30 (FEDORA-2020-3d9b3db3a2)
Restarts a process without Xdebug
--------------------------------------------------------------------------------
Update Information:
**Version 1.4.1** - 2020-03-01 * Fixed: restart fails if an ini file is empty.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 2 2020 Remi Collet <remi(a)remirepo.net> - 1.4.1-1
- update to 1.4.1
--------------------------------------------------------------------------------
================================================================================
podman-1.8.0-4.fc30 (FEDORA-2020-ccc3e64ea5)
Manage Pods, Containers and Container Images
--------------------------------------------------------------------------------
Update Information:
use crun only for f31+ ---- Suggests: crun for f30 ---- bump to v1.8.0,
Security fix for CVE-2020-8945
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 2 2020 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 2:1.8.0-4
- use crun only for f31+
* Fri Feb 28 2020 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 2:1.8.0-3
- Suggests: crun for f30
* Sat Feb 8 2020 RH Container Bot <rhcontainerbot(a)fedoraproject.org> - 2:1.8.0-2
- bump to v1.8.0
- autobuilt 2ced909
- Resolves: #1795838, #1802903 - Security fix for CVE-2020-8945
* Thu Feb 6 2020 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 2:1.8.0-0.2
- bump crun dependency
* Mon Feb 3 2020 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 2:1.8.0-0.1
- built v1.8.0-rc1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1795838 - CVE-2020-8945 proglottis/gpgme: Use-after-free in GPGME bindings
during container image pull
https://bugzilla.redhat.com/show_bug.cgi?id=1795838
--------------------------------------------------------------------------------
================================================================================
python39-3.9.0~a4-1.fc30 (FEDORA-2020-f83045062e)
Version 3.9 of the Python interpreter
--------------------------------------------------------------------------------
Update Information:
Update to [Python
3.9.0a4](https://www.python.org/downloads/release/python-390a4/)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 27 2020 Marcel Plch <mplch(a)redhat.com> - 3.9.0~a4-1
- Update to Python 3.9.0a4
* Tue Feb 11 2020 Miro Hron��ok <mhroncok(a)redhat.com> - 3.9.0~a3-2
- Update the ensurepip module to work with setuptools >= 45
--------------------------------------------------------------------------------
================================================================================
swing-layout-1.0.4-18.fc30 (FEDORA-2020-f804b85c69)
Natural layout for Swing panels
--------------------------------------------------------------------------------
Update Information:
updated to the newest version
--------------------------------------------------------------------------------
ChangeLog:
* Tue Feb 18 2020 Jiri Andrlik <jandrlik(a)redhat.com> - 1.0.4-18
- Migrated from deprecated add_maven_depmap macro
https://docs.fedoraproject.org/en-US/java-packaging-howto/migration/
- renamed pom.xml to swing_layout.pom in sake of some coherence
- deleted commented javadoc chunks of code and unsatisfiable if statements
- tried to find new url of sources, but with no luck, upstream is non-existent
* Sun Feb 3 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.4-17
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.4-16
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1804257 - Review Request: swing-layout - Swing Extensions
https://bugzilla.redhat.com/show_bug.cgi?id=1804257
--------------------------------------------------------------------------------