The following Fedora 30 Security updates need testing: Age URL 7 https://bodhi.fedoraproject.org/updates/FEDORA-2019-e3e521e5b3 samba-4.10.8-0.fc30 6 https://bodhi.fedoraproject.org/updates/FEDORA-2019-d9677f2b92 wordpress-5.2.3-1.fc30 5 https://bodhi.fedoraproject.org/updates/FEDORA-2019-62b65ed7f6 libextractor-1.9-5.fc30 5 https://bodhi.fedoraproject.org/updates/FEDORA-2019-9231a18768 sphinx-2.2.11-12.fc30 3 https://bodhi.fedoraproject.org/updates/FEDORA-2019-686ecf43f4 jbig2dec-0.16-1.fc30 2 https://bodhi.fedoraproject.org/updates/FEDORA-2019-f47093cc3d ceph-14.2.3-1.fc30 2 https://bodhi.fedoraproject.org/updates/FEDORA-2019-9b1da08d62 kmplayer-0.12.0b-1.fc30 0 https://bodhi.fedoraproject.org/updates/FEDORA-2019-2cb551904b qbittorrent-4.1.7-1.fc30 0 https://bodhi.fedoraproject.org/updates/FEDORA-2019-2b1f72899a python34-3.4.10-3.fc30 0 https://bodhi.fedoraproject.org/updates/FEDORA-2019-00c25b9379 compat-openssl10-1.0.2o-7.fc30 The following Fedora 30 Critical Path updates have yet to be approved: Age URL 62 https://bodhi.fedoraproject.org/updates/FEDORA-2019-c05e4425d1 dash-0.5.10.2-3.fc30 18 https://bodhi.fedoraproject.org/updates/FEDORA-2019-3a3b518302 ostree-2019.3-3.fc30 12 https://bodhi.fedoraproject.org/updates/FEDORA-2019-aec5fc4920 libcacard-2.7.0-3.fc30 12 https://bodhi.fedoraproject.org/updates/FEDORA-2019-f75c1a1b26 policycoreutils-2.9-4.fc30 12 https://bodhi.fedoraproject.org/updates/FEDORA-2019-7f297cb49a dnsmasq-2.80-10.fc30 12 https://bodhi.fedoraproject.org/updates/FEDORA-2019-d0179eb247 xfce4-settings-4.14.1-2.fc30 8 https://bodhi.fedoraproject.org/updates/FEDORA-2019-5ab46923f4 v4l-utils-1.16.7-1.fc30 7 https://bodhi.fedoraproject.org/updates/FEDORA-2019-89ecce35b2 python-mako-1.1.0-1.fc30 7 https://bodhi.fedoraproject.org/updates/FEDORA-2019-27b017d993 nfs-utils-2.4.1-0.rc1.fc30 7 https://bodhi.fedoraproject.org/updates/FEDORA-2019-e3e521e5b3 samba-4.10.8-0.fc30 6 https://bodhi.fedoraproject.org/updates/FEDORA-2019-178306f835 iio-sensor-proxy-2.8-1.fc30 6 https://bodhi.fedoraproject.org/updates/FEDORA-2019-2deb6cb688 python-productmd-1.22-1.fc30 5 https://bodhi.fedoraproject.org/updates/FEDORA-2019-7cef6b4a7b fontconfig-2.13.1-9.fc30 5 https://bodhi.fedoraproject.org/updates/FEDORA-2019-187ed0d70d vim-8.1.1991-2.fc30 5 https://bodhi.fedoraproject.org/updates/FEDORA-2019-a292b9a550 osinfo-db-20190905-1.fc30 5 https://bodhi.fedoraproject.org/updates/FEDORA-2019-fc8b6238f8 libtirpc-1.1.4-2.rc3.fc30 3 https://bodhi.fedoraproject.org/updates/FEDORA-2019-aadaa1a995 plymouth-0.9.4-9.fc30 3 https://bodhi.fedoraproject.org/updates/FEDORA-2019-dd0056f586 epiphany-3.32.5-1.fc30 3 https://bodhi.fedoraproject.org/updates/FEDORA-2019-4714eb7d5e cryptsetup-2.2.1-1.fc30 2 https://bodhi.fedoraproject.org/updates/FEDORA-2019-57b5902ed1 gjs-1.56.2-6.fc30 mozjs60-60.9.0-2.fc30 polkit-0.116-2.fc30 2 https://bodhi.fedoraproject.org/updates/FEDORA-2019-f47093cc3d ceph-14.2.3-1.fc30 0 https://bodhi.fedoraproject.org/updates/FEDORA-2019-00c25b9379 compat-openssl10-1.0.2o-7.fc30 0 https://bodhi.fedoraproject.org/updates/FEDORA-2019-21b97145cb xorg-x11-server-1.20.5-7.fc30 0 https://bodhi.fedoraproject.org/updates/FEDORA-2019-76df1ca76c librsvg2-2.46.0-1.fc30 0 https://bodhi.fedoraproject.org/updates/FEDORA-2019-468fc6cfa6 gdk-pixbuf2-2.38.2-1.fc30 0 https://bodhi.fedoraproject.org/updates/FEDORA-2019-9984eb7eeb edk2-20190501stable-4.fc30 0 https://bodhi.fedoraproject.org/updates/FEDORA-2019-b90e3682a6 libblockdev-2.23-1.fc30 0 https://bodhi.fedoraproject.org/updates/FEDORA-2019-e9c8adc344 pungi-4.1.39-2.fc30 The following builds have been pushed to Fedora 30 updates-testing autoconf-2.69-31.fc30 bemenu-0.1.0-3.20190819git442d283.fc30 blis-0.6.0-4.fc30 coreboot-utils-4.9-1.fc30 fotoxx-19.17-1.fc30 golang-github-git-lfs-wildmatch-1.0.4-1.fc30 ibus-typing-booster-2.6.6-1.fc30 josm-0-0.100.15322svn.fc30 kernel-5.2.14-200.fc30 kernel-headers-5.2.14-200.fc30 libeasyfc-0.14.0-6.fc30 libsearpc-3.1-12.fc30 libsoup-2.66.3-1.fc30 magic-8.2.139-1.fc30 mozilla-ublock-origin-1.22.2-2.fc30 perl-5.28.2-440.fc30 perl-Image-Sane-3-1.fc30 python-oauth-1.0.1-20.fc30 shared-mime-info-1.13-1.fc30 Details about builds: ================================================================================ autoconf-2.69-31.fc30 (FEDORA-2019-d495fb73bc) A GNU tool for automatically configuring source code -------------------------------------------------------------------------------- Update Information: Port tests to Bash 5 * tests/local.at (AT_CHECK_ENV, AT_CONFIG_CMP): Add BASH_ARGC, BASH_ARGV to list of variables to be ignored when comparing variable space dumps. (AT_CONFIG_CMP): Also ignore LINENO. * tests/m4sh.at: Also unset LINENO in 'reference' and 'test/test-1'. -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 28 2019 Ondrej Dubaj <odubaj@xxxxxxxxxx> - 2.69-31 - Port tests to Bash 5 * Wed Jul 24 2019 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 2.69-30 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1714635 - autoconf-2.69-29.fc31 FTBFS: LINENO test FAILED (m4sh.at:268) https://bugzilla.redhat.com/show_bug.cgi?id=1714635 [ 2 ] Bug #1734954 - autoconf: FTBFS in Fedora rawhide/f31 https://bugzilla.redhat.com/show_bug.cgi?id=1734954 -------------------------------------------------------------------------------- ================================================================================ bemenu-0.1.0-3.20190819git442d283.fc30 (FEDORA-2019-41b2316e3a) Dynamic menu library and client program inspired by dmenu -------------------------------------------------------------------------------- Update Information: New package for bemenu -------------------------------------------------------------------------------- ================================================================================ blis-0.6.0-4.fc30 (FEDORA-2019-5fec758a3f) BLAS-like Library Instantiation Software Framework -------------------------------------------------------------------------------- Update Information: Don't call popen on ARM (in case it's run with privileges). Also replace patch to use FMA with simd pragma. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 11 2019 Dave love <loveshack@xxxxxxxxxxxxxxxxx> - 0.6.0-4 - Patch to avoid popen (security) - Replace patch1 with upstream change * Sat Aug 17 2019 Dave love <loveshack@xxxxxxxxxxxxxxxxx> - 0.6.0-3 - Patch out use of simd pragma - Use devtoolset-8, not -6 on el6/7 - Fix dblat3 test * Wed Jul 24 2019 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 0.6.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Tue Jun 4 2019 Dave Love <loveshack@xxxxxxxxxxxxxxxxx> - 0.6.0-1 - New version -------------------------------------------------------------------------------- ================================================================================ coreboot-utils-4.9-1.fc30 (FEDORA-2019-a1b212c258) Various utilities from coreboot project -------------------------------------------------------------------------------- Update Information: Update to the 4.9 release -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 10 2019 Richard Hughes <richard@xxxxxxxxxxx> - 4.9-1 - Update to the 4.9 release * Tue Sep 10 2019 Richard Hughes <richard@xxxxxxxxxxx> - 4.8-7 - Include the commonlib headers needed by fwupd -------------------------------------------------------------------------------- ================================================================================ fotoxx-19.17-1.fc30 (FEDORA-2019-aa98c68d17) Photo editor -------------------------------------------------------------------------------- Update Information: 19.17 -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 11 2019 Gwyn Ciesla <gwync@xxxxxxxxxxxxxx> - 19.17-1 - 19.17 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1751177 - fotoxx-19.17 is available https://bugzilla.redhat.com/show_bug.cgi?id=1751177 -------------------------------------------------------------------------------- ================================================================================ golang-github-git-lfs-wildmatch-1.0.4-1.fc30 (FEDORA-2019-49c3dae556) Pattern matching language for filepaths compatible with Git -------------------------------------------------------------------------------- Update Information: Update to latest version -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 10 2019 Elliott Sales de Andrade <quantum.analyst@xxxxxxxxx> - 1.0.4-1 - Update to latest version -------------------------------------------------------------------------------- References: [ 1 ] Bug #1750940 - golang-github-git-lfs-wildmatch-1.0.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1750940 -------------------------------------------------------------------------------- ================================================================================ ibus-typing-booster-2.6.6-1.fc30 (FEDORA-2019-aa6b361a34) A completion input method -------------------------------------------------------------------------------- Update Information: When checking whether to show inline completion, normalize the first candidate as well -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 11 2019 Mike FABIAN <mfabian@xxxxxxxxxx> - 2.6.6-1 - When checking whether to show inline completion, normalize the first candidate as well - Two more test cases in hunspell_suggest.py - Make it work correctly with newer French hunspell dictionaries - Skip some unittests when dictionaries or python modules needed are not installed - Update emoji annotations from CLDR - Add more test cases to m17n_translit_test.py for si-sayura.mim -------------------------------------------------------------------------------- ================================================================================ josm-0-0.100.15322svn.fc30 (FEDORA-2019-88a44a37d2) An editor for OpenStreetMap (OSM) -------------------------------------------------------------------------------- Update Information: New upstream release (#1747695) -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 11 2019 Jakub Jelen <jjelen@xxxxxxxxxx> - 0-0.100.15322svn - New upstream release (#1747695) - now bundles signpost-core, which was removed from Fedora -------------------------------------------------------------------------------- References: [ 1 ] Bug #1747695 - josm-15322 is available https://bugzilla.redhat.com/show_bug.cgi?id=1747695 -------------------------------------------------------------------------------- ================================================================================ kernel-5.2.14-200.fc30 (FEDORA-2019-a0fd6829fd) The Linux kernel -------------------------------------------------------------------------------- Update Information: The 5.2.14 stable kernel update contains a number of important fixes across the tree. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 10 2019 Justin M. Forbes <jforbes@xxxxxxxxxx> - 5.2.14-200 - Linux v5.2.14 -------------------------------------------------------------------------------- ================================================================================ kernel-headers-5.2.14-200.fc30 (FEDORA-2019-a0fd6829fd) Header files for the Linux kernel for use by glibc -------------------------------------------------------------------------------- Update Information: The 5.2.14 stable kernel update contains a number of important fixes across the tree. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 10 2019 Justin M. Forbes <jforbes@xxxxxxxxxx> - 5.2.14-200 - Linux v5.2.14 -------------------------------------------------------------------------------- ================================================================================ libeasyfc-0.14.0-6.fc30 (FEDORA-2019-3fea5b1b5c) Easy configuration generator interface for fontconfig -------------------------------------------------------------------------------- Update Information: Fix the config can't be turned on when no $HOME/.config/fontconfig/conf.d is available. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 11 2019 Akira TAGOH <tagoh@xxxxxxxxxx> - 0.14.0-6 - Fix the issue config can't be turned on when no user config dir is available. Resolves: rhbz#1750732 * Thu Jul 25 2019 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 0.14.0-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1750732 - config can't be turned on if no $HOME/.config/fontconfig/conf.d is available https://bugzilla.redhat.com/show_bug.cgi?id=1750732 -------------------------------------------------------------------------------- ================================================================================ libsearpc-3.1-12.fc30 (FEDORA-2019-75170d9d49) A simple and easy-to-use C language RPC framework -------------------------------------------------------------------------------- Update Information: Update to latest 3.1-latest tag to fix imports. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 11 2019 Julien Enselme <jujens@xxxxxxxxx> - 3.1-12 - Update latest tag to latest version. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1748473 - seaf-cli not working https://bugzilla.redhat.com/show_bug.cgi?id=1748473 [ 2 ] Bug #1748985 - cannot import name NamedPipeClient https://bugzilla.redhat.com/show_bug.cgi?id=1748985 -------------------------------------------------------------------------------- ================================================================================ libsoup-2.66.3-1.fc30 (FEDORA-2019-e1b7a26ac3) Soup, an HTTP library implementation -------------------------------------------------------------------------------- Update Information: libsoup 2.66.3 release: * Several memory leaks fixed in tests, examples, and parsing code [Claudio Saavedra] * SoupServer: Fixes to Windows path handling [Ignacio Casal Quinteiro] -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 11 2019 Kalev Lember <klember@xxxxxxxxxx> - 2.66.3-1 - Update to 2.66.3 -------------------------------------------------------------------------------- ================================================================================ magic-8.2.139-1.fc30 (FEDORA-2019-6df3dad236) A very capable VLSI layout tool -------------------------------------------------------------------------------- Update Information: New version 8.2.139 is released. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 11 2019 Mamoru TASAKA <mtasaka@xxxxxxxxxxxxxxxxx> - 8.2.139-1 - 8.2.139 -------------------------------------------------------------------------------- ================================================================================ mozilla-ublock-origin-1.22.2-2.fc30 (FEDORA-2019-9c65ffe94b) An efficient blocker for Firefox -------------------------------------------------------------------------------- Update Information: **New:** New procedural cosmetic/HTML filtering operator: `min-text-length(x)`, where `x` is the minimal text length of the subject DOM element. It is chainable. Example: example.de##^script:has-text(.charCodeAt):min-text- length(14000) New keyboard shortcut available: "Relax blocking mode". Use it to lower the current blocking mode to a lower one. Currently the default behavior is: + Allow JavaScript; or + Allow 3rd-party network requests Consequently, if your default blocking profile is to disable JavaScript and 3rd-party network requests, you will need to press twice to lower uBO's blocking mode to the lowest blocking mode achievable through the keyboard command. The current web page will be automatically reloaded each time the current blocking mode is lowered. The shortcut will have no effect when the current blocking mode in effect does not forbid JavaScript and 3rd-party requests. **Fixed** * url(...) style injections in cosmetic filters * Parse search string as plaintext to avoid doubling \ * Commit button gets stuck under specific circumstances * Whitelisting behind-the-scene causes uBO to disregard the moz-extension-scheme rule * Add link to open urls in a new tab * Coalesce common plain filters in a bucket into a single trie * Temporary dynamic filters with 3p-script won't save * Keyboard shortcut to change modes * Fix thrown exception in onHeadersReceived listener * Prevent adding known invalid URL-based rules * Fix background color of previewed image in logger * Finalize converting resources.txt into immutable resources * Save only modified immediate hidden settings * Refactor management of injectable resources * Strict-block only if match is anchored to end of hostname * Minor code review re. context menu code * Add ability to suspend network request handler at will * Fix some element picker-related issues * Fix merging multiple URls in element picker * Replace exec with transpose in procedural filters * Add test pages for procedural filters * Add new procedural operator: :min-text-length(x) * Does not block large media fetched over Fetch API * Last permanent rule is marked as changed when rules are added to the bottom * Dashboard open from uBO popup triggers unsaved changes dialog * Multiple "Advanced settings" opened * Redirection fails for filters having * in the host part * Show requests blocked in the logger as a result of csp= option * Element picker normalize style attrib * "#@#+js" entries are shown in the logger as yellow instead of green * no-scripting: behind-the-scene false sticks even after restoring uBO from a config where it's not present * Revert button remains active/clickable after clicking on Apply changes * "Block element" item should have ellipsis (usability) * Nested !#if/!#endif directives not evaluated properly * Hide predefined whitelist directives * Non-specific procedural filters * HTML filter showing up as cosmetic filter in logger * No warning for unsaved changes in dashboard * Logger: can't bring up filtering options for popup entries where URL does not start with http[s] * Switching configuration tabs [appears to stop] list updates * Cosmetic filter exceptions not displayed in network request logger * Fix generichide not being evaluated for local context * Discard whole filter with bad csp= content * Add a link to the remote asset in asset viewer * Rearrange inner loop of static network filtering engine * Fix "Close this window" not working on document-blocked page * Add support for all filter option * Set default delay for creating selfie to 3 minutes * Avoid duplicated strings in filterOrigin w/ new approach * Revisit code to benefit from ES6 syntax * Refactor runtime storage of specific cosmetic filters * Add support for nth-ancestor operator in HTML filtering * Ensure "Ignore generic cosmetic filters" sticks on Fennec * Fix regression affecting `*$csp=`-like filters * Fix error when loading a non-cached non-local asset -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 11 2019 Dominik Mierzejewski <rpm@xxxxxxxxxxxxxx> - 1.22.2-2 - fix wrong fileid (was pointing to 1.20.0 instead of 1.22.2) * Mon Sep 9 2019 Dominik Mierzejewski <rpm@xxxxxxxxxxxxxx> - 1.22.2-1 - update to 1.22.2 (#1713383) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1713383 - mozilla-ublock-origin-1.22.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1713383 -------------------------------------------------------------------------------- ================================================================================ perl-5.28.2-440.fc30 (FEDORA-2019-be1957ca4a) Practical Extraction and Report Language -------------------------------------------------------------------------------- Update Information: This release fixes a memory leak when matching a UTF-8 regular expression against an ASCII subject. It also corrects a misspelling in perlrebackslash documentation. It also fixes building with rpm-build 4.15 and ISO C99 compiler. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 11 2019 Petr Pisar <ppisar@xxxxxxxxxx> - 4:5.28.2-440 - Adjust spec file to rpm-build-4.15.0-0.rc1.1 - Correct a misspelling in perlrebackslash documentation (RT#134395) - Fix a memory leak when matching a UTF-8 regular expression (RT#134390) - Fix a detection for futimes (RT#134432) -------------------------------------------------------------------------------- ================================================================================ perl-Image-Sane-3-1.fc30 (FEDORA-2019-1f0e9bf5ff) Perl extension for the SANE (Scanner Access Now Easy) Project -------------------------------------------------------------------------------- Update Information: Version 3 incorporates Fedora patches. We deliver it only to provide an up-to- date version string. ---- This release initializes info flags because some backends do not do that. It also fixes some compiler warnings. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 11 2019 Petr Pisar <ppisar@xxxxxxxxxx> - 3-1 - Version 3 bump * Tue Sep 10 2019 Petr Pisar <ppisar@xxxxxxxxxx> - 2-1 - Version 2 bump -------------------------------------------------------------------------------- References: [ 1 ] Bug #1751096 - perl-Image-Sane-3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1751096 [ 2 ] Bug #1750388 - perl-Image-Sane-2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1750388 -------------------------------------------------------------------------------- ================================================================================ python-oauth-1.0.1-20.fc30 (FEDORA-2019-2ac56f513c) Library for OAuth version 1.0a -------------------------------------------------------------------------------- Update Information: Re-add python 2 package for F30 only for MythTV on RPM Fusion. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 11 2019 Richard Shaw <hobbes1069@xxxxxxxxx> - 1.0.1-20 - Re-enable Python 2 package for F30 only. -------------------------------------------------------------------------------- ================================================================================ shared-mime-info-1.13-1.fc30 (FEDORA-2019-03a6149300) Shared MIME information database -------------------------------------------------------------------------------- Update Information: This update fixes a number of problems with HTML related mime-types and adds the usual slew of new mime-types and fixes to existings one. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 11 2019 Bastien Nocera <bnocera@xxxxxxxxxx> - 1.13-1 + shared-mime-info-1.13-1 - Update to 1.13 -------------------------------------------------------------------------------- _______________________________________________ test mailing list -- test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to test-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/test@xxxxxxxxxxxxxxxxxxxxxxx
