The following Fedora 30 Security updates need testing:
Age URL
15
https://bodhi.fedoraproject.org/updates/FEDORA-2019-01e86d4832
ansible-2.8.4-1.fc30
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c72f5f6361
wavpack-5.1.0-16.fc30
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-f3ef4d22db cups-2.2.12-1.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-644ef7ebec
graphite2-1.3.13-1.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-f40c49b99e
python-slixmpp-1.4.2-1.fc30
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b25dd670a4
python-mitogen-0.2.8-1.fc30
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c106e46a95
community-mysql-8.0.17-2.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-5d2420030c
chromium-76.0.3809.132-1.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-55d101a740
golang-1.12.9-1.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-7f7489dc8c
seamonkey-2.49.5-1.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-2baa1f7b19 lxc-3.0.4-1.fc30
lxcfs-3.0.4-1.fc30 python3-lxc-3.0.4-1.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-baff775841
rdesktop-1.8.6-1.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e01bc28777
pdfresurrect-0.18-1.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4c91a2f76e
kernel-5.2.11-200.fc30 kernel-headers-5.2.11-200.fc30 kernel-tools-5.2.11-200.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-0bb6b876da
grafana-6.3.4-1.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-446ca9f695 SDL-1.2.15-41.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-0811a88d77 kea-1.5.0-9.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-96fe76e02b nsd-4.2.2-1.fc30
The following Fedora 30 Critical Path updates have yet to be approved:
Age URL
53
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c05e4425d1
dash-0.5.10.2-3.fc30
44
https://bodhi.fedoraproject.org/updates/FEDORA-2019-45ce99686a
pungi-4.1.38-2.fc30
31
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c6ef0c53d5
iproute-5.2.0-1.fc30
15
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ee3442fd65
libevent-2.1.8-7.fc30
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-f3ef4d22db cups-2.2.12-1.fc30
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c72f5f6361
wavpack-5.1.0-16.fc30
13
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e11df00d17 kmod-26-3.fc30
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-35a7bc6244
perl-5.28.2-439.fc30
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-56744fc88a
perl-Pod-Perldoc-3.28.01-420.fc30
8
https://bodhi.fedoraproject.org/updates/FEDORA-2019-760282d4aa
telepathy-glib-0.24.1-13.fc30.1
8
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3a3b518302
ostree-2019.3-3.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-644ef7ebec
graphite2-1.3.13-1.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4c91a2f76e
kernel-5.2.11-200.fc30 kernel-headers-5.2.11-200.fc30 kernel-tools-5.2.11-200.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-8278841292
libselinux-2.9-3.1.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-aec5fc4920
libcacard-2.7.0-3.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-f75c1a1b26
policycoreutils-2.9-4.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-7f297cb49a
dnsmasq-2.80-10.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d0179eb247
xfce4-settings-4.14.1-2.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-40235845dc dnf-4.2.8-1.fc30
dnf-plugins-core-4.0.9-1.fc30 libdnf-0.35.2-1.fc30 swid-tools-0.8.6-1.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-83fa1cfd0f file-5.36-4.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ae52a20ff6 curl-7.65.3-3.fc30
The following builds have been pushed to Fedora 30 updates-testing
R-3.6.1-2.fc30
Zim-0.72.0-1.fc30
anki-2.1.15-1.fc30
cross-gcc-9.2.1-1.fc30
diffpdf-2.1.3-17.fc30
dino-0.0-0.10.20190830.git.016ab2c.fc30
fuse3-3.6.2-1.fc30
git-annex-7.20190819-1.fc30
libxcrypt-4.4.8-1.fc30
pcsc-cyberjack-3.99.5final.SP13-1.fc30
pdfbox-2.0.16-1.fc30
python-injector-0.17.0-1.fc30
python-pikepdf-1.6.2-1.fc30
rkward-0.7.0-9.fc30
rpy-3.0.5-3.fc30
swift-lang-5.0.3-0.58.20190830gita16543a.fc30
Details about builds:
================================================================================
R-3.6.1-2.fc30 (FEDORA-2019-729bba50f9)
A language for data analysis and graphics
--------------------------------------------------------------------------------
Update Information:
Update R to 3.6.1.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 30 2019 Tom Callaway <spot(a)fedoraproject.org> - 3.6.1-2
- conditionalize macro usage so that it only happens on Fedora 31+ and EPEL-8
* Fri Aug 16 2019 Tom Callaway <spot(a)fedoraproject.org> - 3.6.1-1
- update to 3.6.1
* Sun Aug 11 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 3.6.0-5
- Remove unused and nonfunctional macros and helper script
* Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.6.0-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Sun Jul 21 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 3.6.0-3
- Add automated dependency generator to R-devel
- Add standard Provides for bundled libraries
* Thu Jun 13 2019 Tom Callaway <spot(a)fedoraproject.org> - 3.6.0-2
- use devtoolset toolchain to compile on el6/el7 for C++11 support
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1744723 - R-devel requires R-rpm-macros
https://bugzilla.redhat.com/show_bug.cgi?id=1744723
[ 2 ] Bug #1727281 - R-3.6.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1727281
--------------------------------------------------------------------------------
================================================================================
Zim-0.72.0-1.fc30 (FEDORA-2019-fc414249ac)
Desktop wiki & notekeeper
--------------------------------------------------------------------------------
Update Information:
* Improve pathbar with "linked" visual design * Improve statusbar visual style
*
Change behavior for lists with mixed bullets * Add configuration of keybindings
to preferences dialog * Support gnome-screenshot in the insert screenshot pluing
* Save size of secondary page window * Add option for linenumbers option in
insert code block dialog * Add option to display date column in tasklist side
pane * Add warnings if locale does not support unicode * Make SVG thumbnail
support configurable * Fix bug for insert equation and other objects * Fix use
of escape sequence in table cells * Fix tasklist view for multiple dates in task
* Fix "apply heading" to strip list formatting * Make ToC plugin update instead
of refresh on save * Fix issue with not-unique headings in tableofcontents * Fix
bugs in auto insert bullet at newline
--------------------------------------------------------------------------------
ChangeLog:
* Sun Sep 1 2019 Robin Lee <cheeselee(a)fedoraproject.org> - 0.72.0-1
- Release 0.72.0
--------------------------------------------------------------------------------
================================================================================
anki-2.1.15-1.fc30 (FEDORA-2019-ed630b1de4)
Flashcard program for using space repetition learning
--------------------------------------------------------------------------------
Update Information:
Update to new upstream release 2.1.15. Please see
https://apps.ankiweb.net/docs/changes.html for details.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 23 2019 Christian Krause <chkr(a)fedoraproject.org> - 2.1.15-1
- Update to new upstream version 2.1.15 (BZ 1744359)
- Remove obsolete requirement python3-qt5-webkit
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1744359 - anki-2.1.15 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1744359
--------------------------------------------------------------------------------
================================================================================
cross-gcc-9.2.1-1.fc30 (FEDORA-2019-d2be09dadf)
Cross C compiler
--------------------------------------------------------------------------------
Update Information:
Sync with gcc-9.2.1-1
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 27 2019 Peter Robinson <pbrobinson(a)fedoraproject.org> 9.2.1-1
- Sync with gcc-9.2.1-1
* Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 9.1.1-2.1
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Mon Jun 10 2019 Tom Callaway <spot(a)fedoraproject.org> - 9.1.1-2
- remove shared support from arm (glibc-arm-linux-gnu is dead)
--------------------------------------------------------------------------------
================================================================================
diffpdf-2.1.3-17.fc30 (FEDORA-2019-de41f89055)
PDF files comparator
--------------------------------------------------------------------------------
Update Information:
Rebuilt package to make it work again.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.1.3-17
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1699440 - diffpdf doesn't accept two files as arguments from the command
line
https://bugzilla.redhat.com/show_bug.cgi?id=1699440
--------------------------------------------------------------------------------
================================================================================
dino-0.0-0.10.20190830.git.016ab2c.fc30 (FEDORA-2019-13fcc61f53)
Modern XMPP ("Jabber") Chat Client using GTK+/Vala
--------------------------------------------------------------------------------
Update Information:
Update dino to
[
016ab2c1](https://github.com/dino/dino/compare/8120203d...016ab2c1).
--------------------------------------------------------------------------------
ChangeLog:
* Sat Aug 31 2019 Randy Barlow <bowlofeggs(a)fedoraproject.org> -
0.0-0.12.20190830.git.016ab2c1
- Update to 016ab2c1.
-
https://github.com/dino/dino/compare/8120203d...016ab2c1
--------------------------------------------------------------------------------
================================================================================
fuse3-3.6.2-1.fc30 (FEDORA-2019-849fc5cd68)
File System in Userspace (FUSE) v3 utilities
--------------------------------------------------------------------------------
Update Information:
* fuse3 ver. 3.6.2
--------------------------------------------------------------------------------
ChangeLog:
* Sun Sep 1 2019 Peter Lemenkov <lemenkov(a)gmail.com> - 3.6.2-1
- Update to 3.6.2
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.6.1-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1728264 - fuse3-3.6.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1728264
--------------------------------------------------------------------------------
================================================================================
git-annex-7.20190819-1.fc30 (FEDORA-2019-488b38f90e)
Manage files with git, without checking their contents into git
--------------------------------------------------------------------------------
Update Information:
update to 7.20190819
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 30 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> -
7.20190819-1
- update to 7.20190819
* Fri Aug 9 2019 Jens Petersen <petersen(a)redhat.com> - 7.20190730-1
- update to 7.20190730
* Thu Aug 1 2019 Jens Petersen <petersen(a)redhat.com> - 7.20190708-3
- rebuild
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> -
7.20190708-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Mon Jul 15 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> -
7.20190708-1
- update to 7.20190708
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1727892 - git-annex-7.20190819 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1727892
--------------------------------------------------------------------------------
================================================================================
libxcrypt-4.4.8-1.fc30 (FEDORA-2019-b7da9ab2c4)
Extended crypt library for descrypt, md5crypt, bcrypt, and others
--------------------------------------------------------------------------------
Update Information:
- New upstream release.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Sep 1 2019 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.8-1
- New upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1747795 - libxcrypt-4.4.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747795
--------------------------------------------------------------------------------
================================================================================
pcsc-cyberjack-3.99.5final.SP13-1.fc30 (FEDORA-2019-1fd373ac10)
PC/SC driver for REINER SCT cyberjack USB chip card reader
--------------------------------------------------------------------------------
Update Information:
* Update to new upstream version SP13 (rev cyberJack@1374)
--------------------------------------------------------------------------------
ChangeLog:
* Sun Sep 1 2019 Robert Scheck <robert(a)fedoraproject.org> - 3.99.5final.SP13-1
- Update to new upstream version SP13 (#1554806)
- Drop requirements for 'initscripts' from specfile (#1592381)
* Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> -
3.99.5final.SP12-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1592381 - [pcsc-cyberjack] Drop requirements for 'initscripts' from
specfile
https://bugzilla.redhat.com/show_bug.cgi?id=1592381
[ 2 ] Bug #1554806 - pcsc-cyberjack-3.99.5final.SP13 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1554806
--------------------------------------------------------------------------------
================================================================================
pdfbox-2.0.16-1.fc30 (FEDORA-2019-9e91afa2be)
Apache PDFBox library for working with PDF documents
--------------------------------------------------------------------------------
Update Information:
Update to 2.0.16
--------------------------------------------------------------------------------
ChangeLog:
* Sat Aug 31 2019 Orion Poplawski <orion(a)nwra.com> - 2.0.16-1
- Update to 2.0.16 (CVE-2018-8036, CVE-2018-11797, CVE-2019-0228)
* Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.9-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1699742 - CVE-2019-0228 pdfbox: XML External Entity (XXE) attacks via a
crafted XFDF [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1699742
[ 2 ] Bug #1637494 - CVE-2018-11797 pdfbox: unbounded computation in parser resulting in
a denial of service [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1637494
[ 3 ] Bug #1597491 - CVE-2018-8036 pdfbox: Infinite loop in AFMParser.java allows for
out of memory erros via crafted PDF [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1597491
--------------------------------------------------------------------------------
================================================================================
python-injector-0.17.0-1.fc30 (FEDORA-2019-8aa6c831e6)
Python dependency injection framework inspired by Guice
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sun Sep 1 2019 Artem Polishchuk <ego.cordatus(a)gmail.com> - 0.17.0-1
- Update to 0.17.0
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 0.16.1-3
- Rebuilt for Python 3.8
* Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.16.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1703672 - python-injector-0.17.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1703672
--------------------------------------------------------------------------------
================================================================================
python-pikepdf-1.6.2-1.fc30 (FEDORA-2019-04ae7add5f)
Read and write PDFs with Python, powered by qpdf
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 30 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 1.6.2-1
- Update to latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1747051 - python-pikepdf-1.6.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747051
--------------------------------------------------------------------------------
================================================================================
rkward-0.7.0-9.fc30 (FEDORA-2019-729bba50f9)
Graphical frontend for R language
--------------------------------------------------------------------------------
Update Information:
Update R to 3.6.1.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 16 2019 Tom Callaway <spot(a)fedoraproject.org> - 0.7.0-9
- rebuild for R 3.6.1
* Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.7.0-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1744723 - R-devel requires R-rpm-macros
https://bugzilla.redhat.com/show_bug.cgi?id=1744723
[ 2 ] Bug #1727281 - R-3.6.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1727281
--------------------------------------------------------------------------------
================================================================================
rpy-3.0.5-3.fc30 (FEDORA-2019-729bba50f9)
Python interface to the R language
--------------------------------------------------------------------------------
Update Information:
Update R to 3.6.1.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 16 2019 Tom Callaway <spot(a)fedoraproject.org> - 3.0.5-3
- rebuild for R 3.6.1
* Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.0.5-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1744723 - R-devel requires R-rpm-macros
https://bugzilla.redhat.com/show_bug.cgi?id=1744723
[ 2 ] Bug #1727281 - R-3.6.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1727281
--------------------------------------------------------------------------------
================================================================================
swift-lang-5.0.3-0.58.20190830gita16543a.fc30 (FEDORA-2019-dfeb375a60)
Apple's Swift programming language
--------------------------------------------------------------------------------
Update Information:
Updated to swift-5.0.3-RELEASE
--------------------------------------------------------------------------------
ChangeLog:
* Sat Aug 31 2019 Ron Olson <tachoknight(a)gmail.com> 5.0.3-0.58.20190830gita16543a
- Updated to swift-5.0.3-RELEASE
--------------------------------------------------------------------------------