The following Fedora 32 Security updates need testing: Age URL 93 https://bodhi.fedoraproject.org/updates/FEDORA-2021-4c8458e373 containernetworking-plugins-0.9.1-1.fc32 89 https://bodhi.fedoraproject.org/updates/FEDORA-2021-16d1596c42 buildah-1.19.4-1.fc32 9 https://bodhi.fedoraproject.org/updates/FEDORA-2021-be95e017e7 cups-2.3.3op2-5.fc32 6 https://bodhi.fedoraproject.org/updates/FEDORA-2021-158a237d4a bind-9.11.31-1.fc32 bind-dyndb-ldap-11.3-6.fc32 dnsperf-2.3.4-6.fc32 6 https://bodhi.fedoraproject.org/updates/FEDORA-2021-ff893e12c5 chromium-90.0.4430.93-1.fc32 5 https://bodhi.fedoraproject.org/updates/FEDORA-2021-5b6c69a73a community-mysql-8.0.24-1.fc32 5 https://bodhi.fedoraproject.org/updates/FEDORA-2021-3f9e87aaa4 php-7.4.19-1.fc32 5 https://bodhi.fedoraproject.org/updates/FEDORA-2021-fcb25df974 djvulibre-3.5.27-25.fc32 5 https://bodhi.fedoraproject.org/updates/FEDORA-2021-38e1f87ac3 thunderbird-78.10.1-1.fc32 2 https://bodhi.fedoraproject.org/updates/FEDORA-2021-ab09c9a7a1 python-impacket-0.9.22-3.fc32 1 https://bodhi.fedoraproject.org/updates/FEDORA-2021-9c0276e935 kernel-5.11.19-100.fc32 kernel-headers-5.11.19-100.fc32 kernel-tools-5.11.19-100.fc32
The following Fedora 32 Critical Path updates have yet to be approved: Age URL 151 https://bodhi.fedoraproject.org/updates/FEDORA-2020-345d2fd2aa iproute-5.9.0-1.fc32 11 https://bodhi.fedoraproject.org/updates/FEDORA-2021-6efbebaf08 gnome-software-3.36.1-4.fc32 10 https://bodhi.fedoraproject.org/updates/FEDORA-2021-2efb16d06b pungi-4.2.9-1.fc32 7 https://bodhi.fedoraproject.org/updates/FEDORA-2021-bdf471bdb7 ethtool-5.12-1.fc32 7 https://bodhi.fedoraproject.org/updates/FEDORA-2021-2650a24eec libxcrypt-4.4.20-2.fc32 5 https://bodhi.fedoraproject.org/updates/FEDORA-2021-38e1f87ac3 thunderbird-78.10.1-1.fc32 5 https://bodhi.fedoraproject.org/updates/FEDORA-2021-9e79d2e147 hwdata-0.347-1.fc32 5 https://bodhi.fedoraproject.org/updates/FEDORA-2021-19cdc5683f libmodulemd-2.12.1-1.fc32 4 https://bodhi.fedoraproject.org/updates/FEDORA-2021-7fd2a21f94 python3-3.8.10-1.fc32 python3-docs-3.8.10-1.fc32 4 https://bodhi.fedoraproject.org/updates/FEDORA-2021-f1edd94582 firefox-88.0-8.fc32 2 https://bodhi.fedoraproject.org/updates/FEDORA-2021-276b0013e8 gnome-terminal-3.36.3-1.fc32 2 https://bodhi.fedoraproject.org/updates/FEDORA-2021-151dc7fd1b vte291-0.60.4-1.fc32 2 https://bodhi.fedoraproject.org/updates/FEDORA-2021-a2ee549bcb xorg-x11-drv-nouveau-1.0.17-1.fc32 1 https://bodhi.fedoraproject.org/updates/FEDORA-2021-9c0276e935 kernel-5.11.19-100.fc32 kernel-headers-5.11.19-100.fc32 kernel-tools-5.11.19-100.fc32
The following builds have been pushed to Fedora 32 updates-testing
aime-8.20210510-1.fc32 bottles-3.1.8-1.fc32 btrfs-progs-5.11.1-1.fc32 cacti-1.2.17-1.fc32 cacti-spine-1.2.17-1.fc32 cozy-0.9.5-1.fc32 exif-0.6.22-1.fc32 gnuchess-6.2.8-1.fc32 icewm-2.3.4-2.fc32 moodle-3.8.9-1.fc32 php-pear-1.10.12-7.fc32 protontricks-1.5.1-1.fc32 python-overpy-0.6-1.fc32 syncthing-1.16.1-1.fc32
Details about builds:
================================================================================ aime-8.20210510-1.fc32 (FEDORA-2021-93c96df5c9) An application embeddable programming language interpreter -------------------------------------------------------------------------------- Update Information:
- Update to 8.20210510 fixes rhbz#1938144 -------------------------------------------------------------------------------- ChangeLog:
* Mon May 10 2021 Filipe Rosset rosset.filipe@gmail.com - 8.20210510-1 - Update to 8.20210510 fixes rhbz#1938144 * Mon Jan 25 2021 Fedora Release Engineering releng@fedoraproject.org - 8.20210121-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ bottles-3.1.8-1.fc32 (FEDORA-2021-47b8dd79a1) Easily manage Wine prefix in a new way -------------------------------------------------------------------------------- Update Information:
Update to latest version -------------------------------------------------------------------------------- ChangeLog:
* Wed May 5 2021 Artem Polishchuk ego.cordatus@gmail.com - 3.1.8-1 - build(update): 3.1.8 * Sun May 2 2021 Artem Polishchuk ego.cordatus@gmail.com - 3.1.7-1 - build(update): 3.1.7 * Mon Apr 26 2021 Artem Polishchuk ego.cordatus@gmail.com - 3.1.6-1 - build(update): 3.1.6 --------------------------------------------------------------------------------
================================================================================ btrfs-progs-5.11.1-1.fc32 (FEDORA-2021-f438908573) Userspace programs for btrfs -------------------------------------------------------------------------------- Update Information:
* properly format checksums when a mismatch is reported * fix device path canonicalization for device mapper devices * check: fix false alert on tree block crossing 64K page boundary * convert: * refuse to convert filesystem with 'needs_recovery' * update documentation to require fsck before conversion * fi resize: improved summary * receive: remove workaround for setting capabilities, all stable kernels have been patched * receive: fix duplicate mount path detection * rescue: new subcommand create-control-device * device stats: minor fix for plain text format output * build: detect if e2fsprogs support 64bit timestamps * build: drop libmount, required functionality has been reimplemented * mkfs: warn when raid56 is used * balance convert: warn when raid56 is used * other * build: fix checks and autoconf defines * new and updated tests * documentation updates * seeding device * raid56 status -------------------------------------------------------------------------------- ChangeLog:
* Sun Mar 28 2021 Igor Raits ignatenkobrain@fedoraproject.org - 5.11.1-1 - Update to 5.11.1 * Fri Mar 5 2021 Igor Raits ignatenkobrain@fedoraproject.org - 5.11-1 - Update to 5.11 * Tue Jan 26 2021 Fedora Release Engineering releng@fedoraproject.org - 5.10-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ cacti-1.2.17-1.fc32 (FEDORA-2021-598b6d2924) An rrd based graphing tool -------------------------------------------------------------------------------- Update Information:
- Update to 1.2.17 Release notes: https://www.cacti.net/release_notes.php?version=1.2.17 -------------------------------------------------------------------------------- ChangeLog:
* Mon May 10 2021 Morten Stevens mstevens@fedoraproject.org - 1.2.17-1 - Update to 1.2.17 * Tue Jan 26 2021 Fedora Release Engineering releng@fedoraproject.org - 1.2.16-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1915043 - CVE-2020-35701 cacti: SQL injection vulnerability in data_debug.php [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1915043 --------------------------------------------------------------------------------
================================================================================ cacti-spine-1.2.17-1.fc32 (FEDORA-2021-598b6d2924) Threaded poller for Cacti written in C -------------------------------------------------------------------------------- Update Information:
- Update to 1.2.17 Release notes: https://www.cacti.net/release_notes.php?version=1.2.17 -------------------------------------------------------------------------------- ChangeLog:
* Mon May 10 2021 Morten Stevens mstevens@fedoraproject.org - 1.2.17-1 - Update to 1.2.17 * Tue Jan 26 2021 Fedora Release Engineering releng@fedoraproject.org - 1.2.16-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1915043 - CVE-2020-35701 cacti: SQL injection vulnerability in data_debug.php [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1915043 --------------------------------------------------------------------------------
================================================================================ cozy-0.9.5-1.fc32 (FEDORA-2021-619cbb0f9f) Modern audiobook player -------------------------------------------------------------------------------- Update Information:
Update to v0.9.5 -------------------------------------------------------------------------------- ChangeLog:
* Mon May 10 2021 Artur Frenszek-Iwicki fedora@svgames.pl - 0.9.5-1 - Update to latest release -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1958690 - cozy-0.9.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=1958690 --------------------------------------------------------------------------------
================================================================================ exif-0.6.22-1.fc32 (FEDORA-2021-477809f45f) Utility to show EXIF information hidden in JPEG files -------------------------------------------------------------------------------- Update Information:
0.6.22, patch for CVE-2021-27815. -------------------------------------------------------------------------------- ChangeLog:
* Mon May 10 2021 Gwyn Ciesla gwync@protonmail.com - 0.6.22-1 - 0.6.22, patch for CVE-2021-27815. * Tue Jan 26 2021 Fedora Release Engineering releng@fedoraproject.org - 0.6.21-20 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Mon Jul 27 2020 Fedora Release Engineering releng@fedoraproject.org - 0.6.21-19 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Mon Jul 13 2020 Tom Stellard tstellar@redhat.com - 0.6.21-18 - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1958808 - CVE-2021-27815 exif: libexif: NULL Pointer Deference may lead to DoS by uploading a malicious JPEG file [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1958808 --------------------------------------------------------------------------------
================================================================================ gnuchess-6.2.8-1.fc32 (FEDORA-2021-a4d8a35f70) The GNU chess program -------------------------------------------------------------------------------- Update Information:
6.2.8 -------------------------------------------------------------------------------- ChangeLog:
* Mon May 10 2021 Gwyn Ciesla gwync@protonmail.com - 6.2.8-1 - 6.2.8 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1958670 - gnuchess-6.2.8 is available https://bugzilla.redhat.com/show_bug.cgi?id=1958670 --------------------------------------------------------------------------------
================================================================================ icewm-2.3.4-2.fc32 (FEDORA-2021-170783dbce) Window manager designed for speed, usability, and consistency -------------------------------------------------------------------------------- Update Information:
Update to 2.3.4 ---- Update to 2.3.4 -------------------------------------------------------------------------------- ChangeLog:
* Mon May 10 2021 Artem Polishchuk ego.cordatus@gmail.com - 2.3.4-2 - build: Obsoletes icewm-fonts-settings package * Fri May 7 2021 Artem Polishchuk ego.cordatus@gmail.com - 2.3.4-1 - build(update): 2.3.4 * Fri May 7 2021 Artem Polishchuk ego.cordatus@gmail.com - 2.3.3-2 - build: Drop all custom stuff except default Fedora theme - build: Drop 'fonts-settings' sub-package --------------------------------------------------------------------------------
================================================================================ moodle-3.8.9-1.fc32 (FEDORA-2021-6f5ce4a19c) A Course Management System -------------------------------------------------------------------------------- Update Information:
Latest releases. -------------------------------------------------------------------------------- ChangeLog:
* Mon May 10 2021 Gwyn Ciesla gwync@protonmail.com - 3.8.9-1 - 3.8.9 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1958717 - moodle-3.10.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1958717 --------------------------------------------------------------------------------
================================================================================ php-pear-1.10.12-7.fc32 (FEDORA-2021-640f4a218a) PHP Extension and Application Repository framework -------------------------------------------------------------------------------- Update Information:
**Archive_Tar 1.4.13** * Fix Bug pear#27010: Relative symlinks failing (out-of path file extraction) [mrook] -------------------------------------------------------------------------------- ChangeLog:
* Mon May 10 2021 Remi Collet remi@remirepo.net - 1:1.10.12-7 - update Archive_Tar to 1.4.13 --------------------------------------------------------------------------------
================================================================================ protontricks-1.5.1-1.fc32 (FEDORA-2021-02f54e1996) Simple wrapper that does winetricks things for Proton enabled games -------------------------------------------------------------------------------- Update Information:
Update to latest version -------------------------------------------------------------------------------- ChangeLog:
* Mon May 10 2021 Artem Polishchuk ego.cordatus@gmail.com - 1.5.1-1 - build(update): 1.5.1 --------------------------------------------------------------------------------
================================================================================ python-overpy-0.6-1.fc32 (FEDORA-2021-d0c17c4fa1) Python Wrapper to access the Overpass API -------------------------------------------------------------------------------- Update Information:
New package -------------------------------------------------------------------------------- ChangeLog:
-------------------------------------------------------------------------------- References:
[ 1 ] Bug #1958564 - Review Request: python-overpy - Python Wrapper to access the Overpass API https://bugzilla.redhat.com/show_bug.cgi?id=1958564 --------------------------------------------------------------------------------
================================================================================ syncthing-1.16.1-1.fc32 (FEDORA-2021-43ea1acc10) Continuous File Synchronization -------------------------------------------------------------------------------- Update Information:
Update to version 1.16.1. Release notes: https://github.com/syncthing/syncthing/releases/tag/v1.16.0 -------------------------------------------------------------------------------- ChangeLog:
* Mon May 10 2021 Fabio Valentini decathorpe@gmail.com - 1.16.1-1 - Update to version 1.16.1. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1956466 - syncthing-1.16.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1956466 --------------------------------------------------------------------------------