FEDORA-2019-ac2a21ff07

security update in Fedora 30 for atomix, at-spi2-core, & 64 more

Status: stable 5 months ago

This update fixes a bug in the Meson build system which caused binaries and libraries to incorrectly be marking as requiring an executable stack. This makes them more vulnerable to security issues, and also can result in errors caused by SELinux denials.

This update also provides rebuilds of all the packages that were built with the buggy Meson, excepting packages for updates were already pending (in those cases, those updates have been edited instead). This includes gnome-initial-setup, which was affected by this problem, resulting in a release-blocking bug that prevented it running correctly with SELinux in enforcing mode.

Comments 22

This update has been submitted for testing by adamwill.

adamwill edited this update.

New build(s):

  • meson-0.50.0-4.fc30
  • dbus-broker-20-3.fc30
  • dav1d-0.2.1-3.fc30
  • containers-0.8.0-8.alpha.9.fc30
  • bijiben-3.32.1-2.fc30
  • atomix-3.32.1-2.fc30
  • at-spi2-core-2.32.1-2.fc30

Karma has been reset.

adamwill edited this update.

New build(s):

  • elementary-camera-1.0.4-2.fc30
  • dsymbol-20181014gitec28618-8.fc30
  • egl-wayland-1.1.2-3.fc30

Karma has been reset.

adamwill edited this update.

New build(s):

  • elementary-terminal-5.3.4-2.fc30
  • elementary-code-3.1.1-2.fc30

Karma has been reset.

adamwill edited this update.

New build(s):

  • geocode-glib-3.26.1-2.fc30
  • gamemode-1.2-4.fc30
  • fwupd-1.2.7-2.fc30
  • fuse-2.9.9-3.fc30
  • fondo-1.2.2-4.20190324git71d97ee.fc30
  • file-roller-3.32.1-2.fc30
  • ephemeral-5.0.1-2.fc30
  • eog-3.32.1-2.fc30

Karma has been reset.

adamwill edited this update.

New build(s):

  • gnome-maps-3.32.1-2.fc30
  • gnome-music-3.32.1-2.fc30
  • gnome-disk-utility-3.32.1-2.fc30
  • gnome-desktop3-3.32.1-2.fc30
  • gnome-control-center-3.32.1-2.fc30
  • gnome-characters-3.32.1-2.fc30
  • gnome-builder-3.32.1-3.fc30
  • gnome-books-3.32.0-3.fc30
  • gnome-bluetooth-3.32.1-2.fc30
  • glib2-2.60.1-2.fc30
  • glib-networking-2.60.1-2.fc30
  • gir-to-d-0.18.0-4.fc30

Karma has been reset.

adamwill edited this update.

New build(s):

  • libnotify-0.7.8-2.fc30
  • libmodulemd-2.2.3-3.fc30
  • libinput-1.13.1-2.fc30
  • libdparse-0.9.9-7.fc30
  • libdazzle-3.32.1-2.fc30
  • gvfs-1.40.1-2.fc30
  • group-service-1.1.0-5.fc30
  • gobject-introspection-1.60.1-2.fc30
  • gnome-weather-3.32.1-2.fc30
  • gnome-system-monitor-3.32.1-2.fc30
  • gnome-software-3.32.1-2.fc30
  • gnome-shell-extension-gsconnect-21-2.fc30

Karma has been reset.

adamwill edited this update.

New build(s):

  • mate-user-admin-1.4.1-2.fc30
  • gnome-calculator-3.32.1-2.fc30
  • libxmlb-0.1.8-2.fc30
  • libsoup-2.66.1-2.fc30
  • libplacebo-1.18.0-2.fc30

Karma has been reset.

adamwill edited this update.

New build(s):

  • mate-user-admin-1.4.1-2.fc30
  • gnome-calculator-3.32.1-2.fc30
  • libxmlb-0.1.8-2.fc30
  • libsoup-2.66.1-2.fc30
  • libplacebo-1.18.0-2.fc30

Karma has been reset.

adamwill edited this update.

New build(s):

  • msgpack-d-1.0.0-0.6.beta.7.fc30
  • mpris-scrobbler-0.3.2-2.fc30
  • mesa-19.0.2-3.fc30

Karma has been reset.

adamwill edited this update.

New build(s):

  • polari-3.32.0-3.fc30
  • reportd-0.6.6-2.fc30
  • shotwell-0.31.0-2.fc30
  • signon-glib-2.1-4.fc30
  • simple-scan-3.32.2-2.fc30
  • stdx-allocator-2.77.2-7.fc30

Karma has been reset.

adamwill edited this update.

New build(s):

  • wingpanel-2.2.3-2.fc30
  • gnome-builder-3.32.1-4.fc30
  • gnome-boxes-3.32.0.2-2.fc30
  • toolbox-0.0.8-2.fc30
  • systemd-241-7.gita2eaa1c.fc30
  • switchboard-plug-pantheon-shell-2.8.1-2.fc30
  • switchboard-plug-display-2.1.7-2.fc30

Removed build(s):

  • gnome-builder-3.32.1-3.fc30

Karma has been reset.

adamwill edited this update.

New build(s):

  • zchunk-1.1.1-3.fc30

Karma has been reset.

This update has been pushed to testing.

gnome-terminal crashed during update. 🥺 Could this because of dbus-broker? 🤔

Reinstalled all this packages in TTY and LGTM.

⚠️ Just dont upgrade in GUI terminal.

karma: +1

Looks OK

karma: +1

works for me

karma: +1

This update has been submitted for stable by bodhi.

KDE spin upgraded without issues in Konsole, working fine.

karma: +1 critpath: +1

@atim updating from a GUI terminal is never a good idea =) Use a tty and/or tmux or screen.

This update has been pushed to stable.

Add Comment & Feedback

Please login to add feedback.

Content Type
RPM
Status
stable
Test Gating
Submitted by
Update Type
security
Update Severity
urgent
Karma
+4
stable threshold: 3
unstable threshold: -3
Autopush (karma)
Enabled
Autopush (time)
Disabled
Dates
submitted 5 months ago
in testing 5 months ago
in stable 5 months ago
modified 5 months ago

Related Bugs 1

00 #1699099 gnome-initial-setup 3.32.0+ crashes due to SELinux denials (because it has execstack flag set, because meson 0.50.0 sets it when it shouldn't)
atomix-3.32.1-2.fc30
at-spi2-core-2.32.1-2.fc30
bijiben-3.32.1-2.fc30
containers-0.8.0-8.alpha.9.fc30
dav1d-0.2.1-3.fc30
dbus-broker-20-3.fc30
dsymbol-20181014gitec28618-8.fc30
egl-wayland-1.1.2-3.fc30
elementary-camera-1.0.4-2.fc30
elementary-code-3.1.1-2.fc30
elementary-terminal-5.3.4-2.fc30
eog-3.32.1-2.fc30
ephemeral-5.0.1-2.fc30
file-roller-3.32.1-2.fc30
fondo-1.2.2-4.20190324git71d97ee.fc30
fuse-2.9.9-3.fc30
fwupd-1.2.7-2.fc30
gamemode-1.2-4.fc30
geocode-glib-3.26.1-2.fc30
gir-to-d-0.18.0-4.fc30
glib2-2.60.1-2.fc30
glib-networking-2.60.1-2.fc30
gnome-bluetooth-3.32.1-2.fc30
gnome-books-3.32.0-3.fc30
gnome-boxes-3.32.0.2-2.fc30
gnome-builder-3.32.1-4.fc30
gnome-calculator-3.32.1-2.fc30
gnome-characters-3.32.1-2.fc30
gnome-control-center-3.32.1-2.fc30
gnome-desktop3-3.32.1-2.fc30
gnome-disk-utility-3.32.1-2.fc30
gnome-initial-setup-3.32.1-2.fc30
gnome-maps-3.32.1-2.fc30
gnome-music-3.32.1-2.fc30
gnome-shell-extension-gsconnect-21-2.fc30
gnome-software-3.32.1-2.fc30
gnome-system-monitor-3.32.1-2.fc30
gnome-weather-3.32.1-2.fc30
gobject-introspection-1.60.1-2.fc30
group-service-1.1.0-5.fc30
gvfs-1.40.1-2.fc30
libdazzle-3.32.1-2.fc30
libdparse-0.9.9-7.fc30
libinput-1.13.1-2.fc30
libmodulemd-2.2.3-3.fc30
libnotify-0.7.8-2.fc30
libplacebo-1.18.0-2.fc30
libsoup-2.66.1-2.fc30
libxmlb-0.1.8-2.fc30
mate-user-admin-1.4.1-2.fc30
mesa-19.0.2-3.fc30
meson-0.50.0-4.fc30
mpris-scrobbler-0.3.2-2.fc30
msgpack-d-1.0.0-0.6.beta.7.fc30
polari-3.32.0-3.fc30
reportd-0.6.6-2.fc30
shotwell-0.31.0-2.fc30
signon-glib-2.1-4.fc30
simple-scan-3.32.2-2.fc30
stdx-allocator-2.77.2-7.fc30
switchboard-plug-display-2.1.7-2.fc30
switchboard-plug-pantheon-shell-2.8.1-2.fc30
systemd-241-7.gita2eaa1c.fc30
toolbox-0.0.8-2.fc30
wingpanel-2.2.3-2.fc30
zchunk-1.1.1-3.fc30

Automated Test Results

Test Cases

00 Test Case Gnome Maps
00 Test Case Gnome Music
00 Test Case Services start
00 Test Case Workstation Graphical Upgrade
00 Test Case base initial setup
00 Test Case base service manipulation
00 Test Case base services start
00 Test Case base shutdown/reboot
00 Test Case calc
00 Test Case desktop update graphical
00 Test Case desktop update notification
00 Test Case disk management basic
00 Test Case disk management lvm
00 Test Case disk management modify
00 Test Case disk management multipath
00 Test Case disk management remote
00 Test Case gnome initial setup domain join
00 Test Case gnome-bluetooth send file
00 Test Case gnome-control-center domain join
00 Test Case maps
00 Test Case music
00 Test Case package install remove
00 Test Case upgrade gnome-software current workstation
00 Test Case upgrade gnome-software previous workstation
00 Test Case weather