The following Fedora 30 Security updates need testing:
Age URL
127
https://bodhi.fedoraproject.org/updates/FEDORA-2019-71b2273a9f
libarchive-3.3.3-7.fc30
13
https://bodhi.fedoraproject.org/updates/FEDORA-2020-40fa1ae94b
libxslt-1.1.34-1.fc30
11
https://bodhi.fedoraproject.org/updates/FEDORA-2020-c870aa8378
tomcat-9.0.31-2.fc30
5
https://bodhi.fedoraproject.org/updates/FEDORA-2020-40c35d7b37
PyYAML-5.3.1-1.fc30
5
https://bodhi.fedoraproject.org/updates/FEDORA-2020-39e0b8bd14
chromium-80.0.3987.149-1.fc30
5
https://bodhi.fedoraproject.org/updates/FEDORA-2020-2a8c314816 tor-0.4.2.7-1.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-545493aa4b
dcraw-9.28.0-9.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-261449d821
ckeditor-4.14.0-1.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-4bfa9d6084 light-1.2.2-1.fc30
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-f7ba0ac7a4
libmodsecurity-3.0.2-6.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-e35573f7df
okular-19.12.3-2.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2020-25f3aea389
phpMyAdmin-4.9.5-1.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2020-51637cf853
drupal8-8.8.4-1.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2020-f3fcb1608a
coturn-4.5.1.1-3.fc30
The following Fedora 30 Critical Path updates have yet to be approved:
Age URL
258
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c05e4425d1
dash-0.5.10.2-3.fc30
127
https://bodhi.fedoraproject.org/updates/FEDORA-2019-71b2273a9f
libarchive-3.3.3-7.fc30
21
https://bodhi.fedoraproject.org/updates/FEDORA-2020-f13060e7a5 vim-8.2.348-1.fc30
20
https://bodhi.fedoraproject.org/updates/FEDORA-2020-36282d2a6d cups-2.2.12-6.fc30
13
https://bodhi.fedoraproject.org/updates/FEDORA-2020-40fa1ae94b
libxslt-1.1.34-1.fc30
12
https://bodhi.fedoraproject.org/updates/FEDORA-2020-7eb53be2a5
perl-Encode-3.04-13.fc30
11
https://bodhi.fedoraproject.org/updates/FEDORA-2020-fffba1c2dd
python3-3.7.7-1.fc30 python3-docs-3.7.7-1.fc30
11
https://bodhi.fedoraproject.org/updates/FEDORA-2020-94049d2962 nss-3.50.0-2.fc30
8
https://bodhi.fedoraproject.org/updates/FEDORA-2020-ed8d4d492b pcre2-10.34-8.fc30
8
https://bodhi.fedoraproject.org/updates/FEDORA-2020-9360ad9872
perl-Pod-Usage-1.70-1.fc30
8
https://bodhi.fedoraproject.org/updates/FEDORA-2020-1070052d10
linux-firmware-20200316-106.fc30
8
https://bodhi.fedoraproject.org/updates/FEDORA-2020-fa2df48609 pungi-4.2.1-2.fc30
6
https://bodhi.fedoraproject.org/updates/FEDORA-2020-036fae08b5 gcc-9.3.1-1.fc30
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-cde9529d3d
selinux-policy-3.14.3-57.fc30
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-c345af20c3 gdisk-1.0.5-1.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2020-057d9bbb8a fedora-repos-30-3
0
https://bodhi.fedoraproject.org/updates/FEDORA-2020-6c16509e84
python-productmd-1.25-1.fc30
0
https://bodhi.fedoraproject.org/updates/FEDORA-2020-b6287eafe3
dnsmasq-2.80-13.fc30
The following builds have been pushed to Fedora 30 updates-testing
fedora-easy-karma-0-0.43.20191206git56f1e97.fc30
golang-1.12.17-1.fc30
kernel-5.5.11-100.fc30
ndctl-68-1.fc30
python-ailment-8.20.1.7-1.fc30
python-archinfo-8.20.1.7-1.fc30
python-pyscf-1.7.1-1.fc30
restview-2.9.2-1.fc30
rpkg-1.60-1.fc30
solaar-1.0.2-0.1.rc1.20200322git563ef0d.fc30
variety-0.8.4-0.1.git8b8bb63.fc30
wxMaxima-20.03.1-1.fc30
Details about builds:
================================================================================
fedora-easy-karma-0-0.43.20191206git56f1e97.fc30 (FEDORA-2020-a298299fd5)
Fedora update feedback made easy
--------------------------------------------------------------------------------
Update Information:
- Proper Bodhi 4 Support - Legacy code cleanup (drop yum, py2 and old bodhi
support)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 24 2020 Frantisek Zatloukal <fzatlouk(a)redhat.com> -
0-0.43.20191206git56f1e97
- Proper Bodhi 4 Support
- Legacy code cleanup (drop yum, py2 and old bodhi support)
* Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> -
0-0.43.20181206gitb6d97e0
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> -
0-0.42.20181206gitb6d97e0
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
golang-1.12.17-1.fc30 (FEDORA-2020-97be24d09d)
The Go Programming Language
--------------------------------------------------------------------------------
Update Information:
Rebase to go1.12.17
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 23 2020 Jakub ��ajka <jcajka(a)redhat.com> - 1.12.17-1
- Rebase to 1.12.17
--------------------------------------------------------------------------------
================================================================================
kernel-5.5.11-100.fc30 (FEDORA-2020-ded581e74c)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 5.5.11 stable kernel update contains a number of important fixes across the
tree.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 23 2020 Justin M. Forbes <jforbes(a)fedoraproject.org> - 5.5.11-100
- Linux v5.5.11
* Fri Mar 20 2020 Jeremy Cline <jcline(a)redhat.com>
- Switch Secure Boot to lock down to integrity mode (rhbz 1815571)
* Fri Mar 20 2020 Justin M. Forbes <jforbes(a)fedoraproject.org>
- Fix CVE-2019-19769 (rhbz 1786174 1786175)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1786174 - CVE-2019-19769 kernel: use-after-free in perf_trace_lock_acquire
related to include/trace/events/lock.h
https://bugzilla.redhat.com/show_bug.cgi?id=1786174
--------------------------------------------------------------------------------
================================================================================
ndctl-68-1.fc30 (FEDORA-2020-6b74054731)
Manage "libnvdimm" subsystem devices (Non-volatile Memory)
--------------------------------------------------------------------------------
Update Information:
release-v68
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 24 2020 Vishal Verma <vishal(a)stellar.sh> - 68-1
- release v68
* Fri Jan 31 2020 Vishal Verma <vishal.l.verma(a)intel.com> - 67-3
- Add fix for GCC10 builds
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 67-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1816504 - ndctl-68 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1816504
--------------------------------------------------------------------------------
================================================================================
python-ailment-8.20.1.7-1.fc30 (FEDORA-2020-aa8066360a)
The angr intermediate language
--------------------------------------------------------------------------------
Update Information:
Initial package for Fedora
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
python-archinfo-8.20.1.7-1.fc30 (FEDORA-2020-261593488e)
Collection of classes that contain architecture-specific information
--------------------------------------------------------------------------------
Update Information:
Initial package for Fedora
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
python-pyscf-1.7.1-1.fc30 (FEDORA-2020-063c33509d)
Python module for quantum chemistry
--------------------------------------------------------------------------------
Update Information:
Update to 1.7.1, see changes at
https://github.com/pyscf/pyscf/releases
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 24 2020 Susi Lehtola <jussilehtola(a)fedoraproject.org> - 1.7.1-1
- Update to 1.7.1.
--------------------------------------------------------------------------------
================================================================================
restview-2.9.2-1.fc30 (FEDORA-2020-dc04891c95)
ReStructuredText viewer
--------------------------------------------------------------------------------
Update Information:
Initial package for Fedora
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
rpkg-1.60-1.fc30 (FEDORA-2020-57c6a88755)
Python library for interacting with rpm+git
--------------------------------------------------------------------------------
Update Information:
New release. Detailed release notes here:
https://docs.pagure.org/rpkg/releases/1.60.html
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 20 2020 Ond��ej Nosek <onosek(a)redhat.com> - 1.60-1
- More transparent check of retired package (onosek)
- Run newer version of sphinx-build tool (onosek)
- Lookaside cache upload is not based on an extension - #484 (onosek)
- container-build: additional warning when using --release (mlangsdo)
- allow compose-id with repo-url for container_build (rcerven)
- Clone config customization for namespaces - 231 (onosek)
- Repair Jenkins tests (onosek)
- (new-)sources should fail with git tracked files - 241 (onosek)
- Handle new cachito dependency replacement argument (athoscr)
- module-build optional key help - 280 (onosek)
- Modify watch-cancel message (sgallagh)
- Create stats for module builds in 'init' state (csomh)
- RPM 4.15 changed header returns from type 'bytes' to 'string'. Handle
either
by converting to 'string' if necessary. (mmathesi)
- Don't expect module build tasks to have "rpms" (mulaieva)
- Propagate module_hotfixes to getMockConfig - rhbz#1780228 (lsedlar)
- Add check for wrong repo name format during clone - 353 (onosek)
- Simplify methods for getting namespace giturl (onosek)
- Use a single thread pool while watching module builds (csomh)
- Also capture stderr in logfile (orion)
- Line up descriptions for better code readability (onosek)
- Isolated container-build should allow arches override (rcerven)
- container-build: add --koji-parent-build argument (kdreyer)
- tests: add container-build --isolated test (kdreyer)
- container-build: add --isolated argument (kdreyer)
- Pass skip_build option to buildContainer (rcerven)
- Reuse koji_cli.lib.unique_path (cqi)
* Thu Jan 30 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.59-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
solaar-1.0.2-0.1.rc1.20200322git563ef0d.fc30 (FEDORA-2020-d00e89d607)
Device manager for a wide range of Logitech devices
--------------------------------------------------------------------------------
Update Information:
* Look up tray icon filenames to get around a bug in libappindicator. *
Make the default behavior be to show the main window at startup. * Support
c537 nano receiver * Add logind signals for suspend/resume. * Remove
solaar-gnome3 package * Ignore features for devices that don't follow feature
specification * Add probe command to command-line interface to dump receiver
registers * Don't terminate on malformed or unknown messages * Create
fewer internal notifications for messages from devices * Add a button to the
main window to terminate (quit) Solaar * Set up nano receivers as receivers
with no unpairing and with re-pairing * Set up c534 as receiver with max 2
pairings, no unpairing, re-pairing * Better support receivers that do not
unpair or when pairing replace existing pairings * Add information about
receiver pairing to receiver data structure * Better support devices that
only allow a limited number of total re-pairings * Add --window option to
control main window visibility and tray usage * Ignore receiver if USB id is
not retrieved * Fix bug with double deleting when devices are disconnected *
Determine some receiver information from data structure for USB ids * Treat
battery level of 0 as unknown * Fix bug on devices with no serial number *
Drop support for python2, and use python3 throughout * Fix bug in remembering
features discovered from device reports * Show icons in main window device
list * Count offline devices when determining whether pairing is possible *
Update French, Dutch, German, and Croation translations * Better icons for
battery levels * Support DPI, Backlight 2, Battery Voltage features *
Support M585, M590, M330, MX Master 2s and 3, new M310, new K800, craft keyboard
* Documentation improvements * Clean up directory structure and remove
unused files
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 24 2020 Dominik Mierzejewski <rpm(a)greysector.net> -
1.0.2-0.1.rc1.20200322git563ef0d
- update to 1.0.2-rc1 + two recent commits
- drop obsolete patches
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1710758 - solaar panel icon not displayed if receiver is unplugged
https://bugzilla.redhat.com/show_bug.cgi?id=1710758
[ 2 ] Bug #1754278 - [abrt] solaar: gtk_cell_renderer_get_aligned_area(): python3.7
killed by SIGABRT
https://bugzilla.redhat.com/show_bug.cgi?id=1754278
[ 3 ] Bug #1754295 - [abrt] solaar: check_feature():
settings_templates.py:381:check_feature:AttributeError: '_SETTINGS_LIST' object
has no attribute 'low_res_scroll'
https://bugzilla.redhat.com/show_bug.cgi?id=1754295
[ 4 ] Bug #1761158 - [abrt] solaar: read():
base.py:208:_read:logitech_receiver.base.NoReceiver: {'reason': OSError(5,
'Input/output error')}
https://bugzilla.redhat.com/show_bug.cgi?id=1761158
[ 5 ] Bug #1770288 - [abrt] solaar: __call__(): settings.py:64:__call__:AssertionError
https://bugzilla.redhat.com/show_bug.cgi?id=1770288
[ 6 ] Bug #1777460 - [abrt] solaar: update(): window.py:792:update:AssertionError
https://bugzilla.redhat.com/show_bug.cgi?id=1777460
[ 7 ] Bug #1786196 - Critical battery icon on 50%
https://bugzilla.redhat.com/show_bug.cgi?id=1786196
[ 8 ] Bug #1791334 - [abrt] solaar: update(): window.py:792:update:AssertionError
https://bugzilla.redhat.com/show_bug.cgi?id=1791334
[ 9 ] Bug #1795944 - [abrt] solaar: check_feature():
settings_templates.py:381:check_feature:AttributeError: '_SETTINGS_LIST' object
has no attribute 'low_res_scroll'
https://bugzilla.redhat.com/show_bug.cgi?id=1795944
[ 10 ] Bug #1814073 - solaar-1.0.2-rc1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1814073
--------------------------------------------------------------------------------
================================================================================
variety-0.8.4-0.1.git8b8bb63.fc30 (FEDORA-2020-99577d25f1)
Wallpaper changer that automatically downloads wallpapers
--------------------------------------------------------------------------------
Update Information:
- Update to 0.8.4-0.1.git8b8bb63 fix (BZ #1794896)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 24 2020 Martin Gansser <martinkg(a)fedoraproject.org> -
0.8.4-0.1.git8b8bb63
- Update to 0.8.4-0.1.git8b8bb63 fix (BZ #1794896)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1809779 - Issue with Variety version 8
https://bugzilla.redhat.com/show_bug.cgi?id=1809779
[ 2 ] Bug #1815679 - Variety Crashes
https://bugzilla.redhat.com/show_bug.cgi?id=1815679
--------------------------------------------------------------------------------
================================================================================
wxMaxima-20.03.1-1.fc30 (FEDORA-2020-f9acf2a673)
Graphical user interface for Maxima
--------------------------------------------------------------------------------
Update Information:
Update to the latest stable release. The main changes since the the last release
shipped in Fedora are detailed below. New features: * support for pre- and
post- super- and subscripts. Bugfixes: * many improvements to the manpage and
the html documentation; * wxWidget's integrated help browser on some platforms
was broken => now the default web browser is used; * support for importing
static and some types of animated gif files; * animation frames created using
`draw()` now can be popped out interactively; * added a option to configure the
max amount of `gnuplot` data to save for this feature; * resolved a crash on
right-clicking a GroupCell; * Help works again in the German translation; *
removed an unnecessary info dialogue on startup; * right-click-suggestions for
similar command names.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 24 2020 Jos�� Matos <jamatos(a)fedoraproject.org> - 20.03.1-1
- update to 20.03.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1807366 - [abrt] wxMaxima: wxTrap()(): wxmaxima killed by SIGTRAP
https://bugzilla.redhat.com/show_bug.cgi?id=1807366
--------------------------------------------------------------------------------