The following Fedora 31 Security updates need testing: Age URL 18 https://bodhi.fedoraproject.org/updates/FEDORA-2020-021fb887ac python-psutil-5.6.7-1.fc31 13 https://bodhi.fedoraproject.org/updates/FEDORA-2020-4304397fe0 ppp-2.4.7-34.fc31 4 https://bodhi.fedoraproject.org/updates/FEDORA-2020-10fe60d68b cacti-1.2.10-1.fc31 cacti-spine-1.2.10-1.fc31 3 https://bodhi.fedoraproject.org/updates/FEDORA-2020-3f38f3e517 zsh-5.7.1-6.fc31 3 https://bodhi.fedoraproject.org/updates/FEDORA-2020-79516cb689 sympa-6.2.54-1.fc31 3 https://bodhi.fedoraproject.org/updates/FEDORA-2020-0ab860bb95 mbedtls-2.16.5-1.fc31 2 https://bodhi.fedoraproject.org/updates/FEDORA-2020-bf6ca75fec seamonkey-2.53.1-2.fc31 2 https://bodhi.fedoraproject.org/updates/FEDORA-2020-9c19202d55 monit-5.26.0-1.fc31 2 https://bodhi.fedoraproject.org/updates/FEDORA-2020-f43d9b394f java-1.8.0-openjdk-aarch32-1.8.0.242.b07-1.fc31 0 https://bodhi.fedoraproject.org/updates/FEDORA-2020-a8ac31fed0 mediawiki-1.32.6-1.fc31
The following Fedora 31 Critical Path updates have yet to be approved: Age URL 16 https://bodhi.fedoraproject.org/updates/FEDORA-2020-599bdb7c34 kexec-tools-2.0.20-10.fc31 13 https://bodhi.fedoraproject.org/updates/FEDORA-2020-74c650e33a ostree-2020.2-2.fc31 13 https://bodhi.fedoraproject.org/updates/FEDORA-2020-4304397fe0 ppp-2.4.7-34.fc31 13 https://bodhi.fedoraproject.org/updates/FEDORA-2020-296917559c fonts-rpm-macros-2.0.1-3.fc31 redhat-rpm-config-143-1.fc31 13 https://bodhi.fedoraproject.org/updates/FEDORA-2020-0133fc2657 quota-4.05-8.fc31 11 https://bodhi.fedoraproject.org/updates/FEDORA-2020-a334dc624d wireless-tools-29-25.fc31 9 https://bodhi.fedoraproject.org/updates/FEDORA-2020-c1a2fd3585 libpcap-1.9.1-2.fc31 8 https://bodhi.fedoraproject.org/updates/FEDORA-2020-c938e6937d spice-0.14.3-1.fc31 8 https://bodhi.fedoraproject.org/updates/FEDORA-2020-f1288b438c geoclue2-2.5.6-1.fc31 8 https://bodhi.fedoraproject.org/updates/FEDORA-2020-3aedaed7b6 net-snmp-5.8-17.fc31 8 https://bodhi.fedoraproject.org/updates/FEDORA-2020-ec1ae64cee libsoup-2.68.4-1.fc31 6 https://bodhi.fedoraproject.org/updates/FEDORA-2020-66f209aa06 pcre-8.44-1.fc31 4 https://bodhi.fedoraproject.org/updates/FEDORA-2020-146495d355 vte291-0.58.3-2.fc31 4 https://bodhi.fedoraproject.org/updates/FEDORA-2020-92090d32ac perl-Encode-3.03-441.fc31 4 https://bodhi.fedoraproject.org/updates/FEDORA-2020-9160ff39bc hwdata-0.333-1.fc31 3 https://bodhi.fedoraproject.org/updates/FEDORA-2020-37d53c9c97 python-setuptools-41.6.0-1.fc31 3 https://bodhi.fedoraproject.org/updates/FEDORA-2020-b59a10b45f at-spi2-atk-2.34.2-1.fc31 2 https://bodhi.fedoraproject.org/updates/FEDORA-2020-644f24ed1c cups-2.2.12-6.fc31 2 https://bodhi.fedoraproject.org/updates/FEDORA-2020-d294e11555 adwaita-icon-theme-3.34.3-2.fc31 2 https://bodhi.fedoraproject.org/updates/FEDORA-2020-4b0528d225 libevdev-1.9.0-1.fc31 2 https://bodhi.fedoraproject.org/updates/FEDORA-2020-2999cb2110 http-parser-2.9.3-2.fc31 libgit2-0.99.0-2.fc31 libgit2-glib-0.99.0.1-2.fc31 libgit2_0.28-0.28.4-1.fc31 0 https://bodhi.fedoraproject.org/updates/FEDORA-2020-717ce1436f ceph-14.2.8-1.fc31 0 https://bodhi.fedoraproject.org/updates/FEDORA-2020-2a203a3a22 fwupd-1.3.9-2.fc31 libgusb-0.3.4-1.fc31 0 https://bodhi.fedoraproject.org/updates/FEDORA-2020-3059e6f8a8 gnome-terminal-3.34.2-2.fc31 0 https://bodhi.fedoraproject.org/updates/FEDORA-2020-9ba6d17f35 nspr-4.25.0-1.fc31 nss-3.50.0-1.fc31
The following builds have been pushed to Fedora 31 updates-testing
batctl-2020.0-1.fc31 blender-2.82-3.fc31 couchdb-3.0.0-1.fc31 dnf-plugins-extras-4.0.8-3.fc31 fedpkg-1.38-2.fc31 gnome-software-3.34.2-2.fc31 kernel-5.5.8-200.fc31 kernel-headers-5.5.8-200.fc31 kernel-tools-5.5.8-200.fc31 libdnf-0.43.1-3.fc31 libinput-1.15.3-1.fc31 nbdkit-1.16.3-1.fc31 php-phpspec-prophecy-1.10.3-1.fc31 pyproject-rpm-macros-0-13.fc31 python-anytree-2.7.2-1.fc31 quilter-2.1.2-1.fc31 rubygem-nokogiri-1.10.9-1.fc31 tomcat-9.0.31-1.fc31 visualboyadvance-m-2.1.4-2.fc31 xxhash-0.7.3-1.fc31
Details about builds:
================================================================================ batctl-2020.0-1.fc31 (FEDORA-2020-380fe19a70) B.A.T.M.A.N. advanced control and management tool -------------------------------------------------------------------------------- Update Information:
Update to 2020.0 -------------------------------------------------------------------------------- ChangeLog:
* Thu Mar 5 2020 Felix Kaechele heffer@fedoraproject.org - 2020.0-1 - update to 2020.0 * Tue Jan 28 2020 Fedora Release Engineering releng@fedoraproject.org - 2019.5-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ blender-2.82-3.fc31 (FEDORA-2020-7e4f6bbb90) 3D modeling, animation, rendering and post-production -------------------------------------------------------------------------------- Update Information:
This update obsoletes the standalone Blender Player for better upgrading system process. -------------------------------------------------------------------------------- ChangeLog:
* Thu Mar 5 2020 Luya Tshimbalanga luya@fedoraproject.org - 1:2.82-3 - Add Obsolete blenderplayer line for system upgrade (#1810743) * Sun Feb 23 2020 Luya Tshimbalanga luya@fedoraproject.org - 1:2.82-2 - Patch for upstream invalid appdata causing segmentation fault -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1810743 - blenderplayer-1:2.79b-17.fc31.x86_64 fails during test update from f31 to f32 https://bugzilla.redhat.com/show_bug.cgi?id=1810743 --------------------------------------------------------------------------------
================================================================================ couchdb-3.0.0-1.fc31 (FEDORA-2020-83f513fd7e) A document database server, accessible via a RESTful JSON API -------------------------------------------------------------------------------- Update Information:
CouchDB 3.0.0 -------------------------------------------------------------------------------- ChangeLog:
* Thu Mar 28 2019 Peter Lemenkov lemenkov@gmail.com - 2.3.1-1 - Ver. 2.3.1 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1803197 - Install of CouchDB on Fedora 31 fails because nothing provides libmozjs185.so.1.0 https://bugzilla.redhat.com/show_bug.cgi?id=1803197 [ 2 ] Bug #1660481 - CVE-2018-17188 couchdb: Remote Privilege Escalations [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1660481 [ 3 ] Bug #1660403 - CVE-2018-11769 couchdb: Possible privilege escalation by couchdb administrator to system couchdb user [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1660403 [ 4 ] Bug #1601003 - CVE-2018-8007 couchdb: Administrative Privilege Escalation [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1601003 [ 5 ] Bug #1799258 - couchdb: FTBFS in Fedora rawhide/f32 https://bugzilla.redhat.com/show_bug.cgi?id=1799258 [ 6 ] Bug #1377306 - couchdb-3.0.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1377306 [ 7 ] Bug #1767037 - couchdb broken dependancies https://bugzilla.redhat.com/show_bug.cgi?id=1767037 [ 8 ] Bug #1735052 - couchdb: FTBFS in Fedora rawhide/f31 https://bugzilla.redhat.com/show_bug.cgi?id=1735052 --------------------------------------------------------------------------------
================================================================================ dnf-plugins-extras-4.0.8-3.fc31 (FEDORA-2020-ecb1f7f4d0) Extras Plugins for DNF -------------------------------------------------------------------------------- Update Information:
dnf-plugins-extras: - Fix patch to fix distribution issues with missing upgrade path between dist versions (RhBug:1767351) -------------------------------------------------------------------------------- ChangeLog:
* Fri Mar 6 2020 Ales Matej amatej@redhat.com - 4.0.8-3 - Fix patch to fix distribution issues with missing upgrade path between dist versions (RhBug:1767351) --------------------------------------------------------------------------------
================================================================================ fedpkg-1.38-2.fc31 (FEDORA-2020-72d77eef77) Fedora utility for working with dist-git -------------------------------------------------------------------------------- Update Information:
Detailed release notes: [here](https://docs.pagure.org/fedpkg/releases/1.38.html) A number of fixes and features from the list were already released as patches. -------------------------------------------------------------------------------- ChangeLog:
* Fri Mar 6 2020 Ond��ej Nosek onosek@redhat.com - 1.38-2 - Patch: Move rpm dependency for test environment only * Mon Mar 2 2020 Ond��ej Nosek onosek@redhat.com - 1.38-1 - Removes check of bodhi-client version - rhbz#1796972 (onosek) - Clone config customization for namespaces (onosek) - Repair Jenkins tests (onosek) - Update bash completion with side tag commands (lsedlar) - add --fail-fast to bash-completion (cheese) - Improve coding style by sorting imports (onosek) - Repair tests for previous commits (onosek) - Create fork of the active repository - #276 (onosek) - request-tests-repo: add branch into ticket body - #359 (onosek) - verrel command on master asks Koji first - #357 (onosek) - Check nvr before build - #356 (onosek) - Change dist tag for epel8-playground (onosek) - Add test for retiring on archived release (lsedlar) - Mock requests in all tests (lsedlar) - Line up descriptions for better code readability (onosek) - Clarify request-branch 'service levels' argument - #283 (onosek) - Resolve Jenkins unittests failing (onosek) - utils: fix whitespace in Pagure error message (kdreyer) - New options for bodhi template - 459 (onosek) - Block retiring in released branches - #337 (onosek) - Use package.cfg for epel8+ branches (mboddu) - Add epel*-playground into rpmdefines (smooge) - linux_distribution import moved (onosek) - Unittests for epel*-playground branch requests (onosek) - Allow epel*-playground requests for epel8 and newer (onosek) - Support for epel*-playground branch requests - #334 (mboddu) - git-changelog: Fix running on Python 3 (onosek) - Avoid warning about invalid escape with python3.8 (zbyszek) - Tests for update stable karma - #321 (cqi) - Bump check for bodhi client - 330 (lsedlar) - Ignore files in a cloned repository - patterns update (onosek) --------------------------------------------------------------------------------
================================================================================ gnome-software-3.34.2-2.fc31 (FEDORA-2020-675a0aff30) A software center for GNOME -------------------------------------------------------------------------------- Update Information:
This update adds artwork for distro upgrades to F32 Beta and backports a few distro upgrade fixes from upstream. -------------------------------------------------------------------------------- ChangeLog:
* Fri Mar 6 2020 Kalev Lember klember@redhat.com - 3.34.2-2 - Add artwork for F32 Beta upgrades - Fix various issues with rpm-ostree distro upgrades - Show correct button for distro upgrades --------------------------------------------------------------------------------
================================================================================ kernel-5.5.8-200.fc31 (FEDORA-2020-d8c4450b82) The Linux kernel -------------------------------------------------------------------------------- Update Information:
The 5.5.8 stable kernel update contains a number of important fixes across the tree. -------------------------------------------------------------------------------- ChangeLog:
* Thu Mar 5 2020 Justin M. Forbes jforbes@fedoraproject.org - 5.5.8-200 - Linux v5.5.8 --------------------------------------------------------------------------------
================================================================================ kernel-headers-5.5.8-200.fc31 (FEDORA-2020-d8c4450b82) Header files for the Linux kernel for use by glibc -------------------------------------------------------------------------------- Update Information:
The 5.5.8 stable kernel update contains a number of important fixes across the tree. -------------------------------------------------------------------------------- ChangeLog:
* Thu Mar 5 2020 Justin M. Forbes jforbes@fedoraproject.org - 5.5.8-200 - Linux v5.5.8 --------------------------------------------------------------------------------
================================================================================ kernel-tools-5.5.8-200.fc31 (FEDORA-2020-d8c4450b82) Assortment of tools for the Linux kernel -------------------------------------------------------------------------------- Update Information:
The 5.5.8 stable kernel update contains a number of important fixes across the tree. -------------------------------------------------------------------------------- ChangeLog:
* Thu Mar 5 2020 Justin M. Forbes jforbes@fedoraproject.org - 5.5.8-200 - Linux v5.5.8 --------------------------------------------------------------------------------
================================================================================ libdnf-0.43.1-3.fc31 (FEDORA-2020-717d521d35) Library providing simplified C and Python API to libsolv -------------------------------------------------------------------------------- Update Information:
libdnf: - Backport patch to reset active modules when no module enabled or default (RhBug:1767351) -------------------------------------------------------------------------------- ChangeLog:
* Fri Mar 6 2020 Ales Matej amatej@redhat.com - 0.43.1-3 - Backport patch to reset active modules when no module enabled or default (1767351) --------------------------------------------------------------------------------
================================================================================ libinput-1.15.3-1.fc31 (FEDORA-2020-15e7140fa5) Input device library -------------------------------------------------------------------------------- Update Information:
libinput 1.15.3 -------------------------------------------------------------------------------- ChangeLog:
* Fri Mar 6 2020 Peter Hutterer peter.hutterer@redhat.com 1.15.3-1 - libinput 1.15.3 --------------------------------------------------------------------------------
================================================================================ nbdkit-1.16.3-1.fc31 (FEDORA-2020-db2c19d0ea) NBD server -------------------------------------------------------------------------------- Update Information:
New stable release 1.16.3. -------------------------------------------------------------------------------- ChangeLog:
* Fri Mar 6 2020 Richard W.M. Jones rjones@redhat.com - 1.16.3-1 - New stable release 1.16.3. --------------------------------------------------------------------------------
================================================================================ php-phpspec-prophecy-1.10.3-1.fc31 (FEDORA-2020-3507ce3043) Highly opinionated mocking framework for PHP -------------------------------------------------------------------------------- Update Information:
**Version 1.10.3** / 2020/03/05 * [fixed] removed fatal error when phpdocumentor/reflection-docblock 5 parses an invalid `@method` tag (@stof) -------------------------------------------------------------------------------- ChangeLog:
* Fri Mar 6 2020 Remi Collet remi@remirepo.net - 1.10.3-1 - update to 1.10.3 - allow phpdocumentor/reflection-docblock 5.0 --------------------------------------------------------------------------------
================================================================================ pyproject-rpm-macros-0-13.fc31 (FEDORA-2020-f0b861e528) RPM macros for PEP 517 Python packages -------------------------------------------------------------------------------- Update Information:
Tox dependency generator: Handle deps read in from a text file -------------------------------------------------------------------------------- ChangeLog:
* Mon Mar 2 2020 Miro Hron��ok mhroncok@redhat.com - 0-13 - Tox dependency generator: Handle deps read in from a text file (#1808601) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1808601 - tox dependency generator cannot handle deps read in from a text file https://bugzilla.redhat.com/show_bug.cgi?id=1808601 --------------------------------------------------------------------------------
================================================================================ python-anytree-2.7.2-1.fc31 (FEDORA-2020-26a87d836d) Powerful and Lightweight Python Tree Data Structure -------------------------------------------------------------------------------- Update Information:
initial build for f31 -------------------------------------------------------------------------------- ChangeLog:
* Fri Mar 6 2020 Gerd Pokorra gz@zimt.uni-siegen.de - 2.7.2-1 - This things are done by Lubomir Rintel lkundrak@v3.sk: - Fixes suggested in a review from Elliott Sales de Andrade (#1768186): - Fix the license file location - Tag the license file appropriately - Use the apppropriate python build tags - Initial packaging -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1768186 - Package Review: python-anytree - Powerful and Lightweight Python Tree Data Structure https://bugzilla.redhat.com/show_bug.cgi?id=1768186 --------------------------------------------------------------------------------
================================================================================ quilter-2.1.2-1.fc31 (FEDORA-2020-3a6c60e243) Focus on your writing -------------------------------------------------------------------------------- Update Information:
Update to latest version -------------------------------------------------------------------------------- ChangeLog:
* Fri Mar 6 2020 Artem Polishchuk ego.cordatus@gmail.com - 2.1.2-1 - Update to 2.1.2 --------------------------------------------------------------------------------
================================================================================ rubygem-nokogiri-1.10.9-1.fc31 (FEDORA-2020-074d1576d4) An HTML, XML, SAX, and Reader parser -------------------------------------------------------------------------------- Update Information:
New version 1.10.9 is released. -------------------------------------------------------------------------------- ChangeLog:
* Fri Mar 6 2020 Mamoru TASAKA mtasaka@fedoraproject.org - 1.10.9-1 - 1.10.9 --------------------------------------------------------------------------------
================================================================================ tomcat-9.0.31-1.fc31 (FEDORA-2020-04ac174fa9) Apache Servlet/JSP Engine, RI for Servlet 4.0/JSP 2.3 API -------------------------------------------------------------------------------- Update Information:
This update includes a rebase from 9.0.30 up to 9.0.31 which resolves one CVE along with various other bugs/features: * rhbz#1806805 CVE-2020-1938 tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability * rhbz#1801729 tomcat-9.0.31 is available -------------------------------------------------------------------------------- ChangeLog:
* Thu Mar 5 2020 Coty Sutherland csutherl@redhat.com - 1:9.0.31-1 - Update to 9.0.31 - Resolves: rhbz#1806398 - CVE-2020-1938 tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability --------------------------------------------------------------------------------
================================================================================ visualboyadvance-m-2.1.4-2.fc31 (FEDORA-2020-d1a780051b) High compatibility Gameboy Advance Emulator combining VBA builds -------------------------------------------------------------------------------- Update Information:
Update to 2.1.4, bugfix release See upstream notes for more details: https://gi thub.com/visualboyadvance-m/visualboyadvance-m/blob/v2.1.4/CHANGELOG.md -------------------------------------------------------------------------------- ChangeLog:
* Fri Mar 6 2020 Jeremy Newton <alexjnewt AT hotmail DOT com> - 1.9.94-21.20190306.git62467b8 - Fix non x86 arches (backported a patch from upstream) * Fri Jan 31 2020 Fedora Release Engineering releng@fedoraproject.org - 2.1.4-1.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Wed Dec 11 2019 Jeremy Newton <alexjnewt AT hotmail DOT com> - 2.1.4-1 - Update to v2.1.4 --------------------------------------------------------------------------------
================================================================================ xxhash-0.7.3-1.fc31 (FEDORA-2020-784aa11225) Extremely fast hash algorithm -------------------------------------------------------------------------------- Update Information:
xxhash 0.7.3 -------------------------------------------------------------------------------- ChangeLog:
* Fri Mar 6 2020 Mattias Ellert mattias.ellert@physics.uu.se - 0.7.3-1 - Update to version 0.7.3 - Drop patch xxhash-gcc10-altivec.patch (accepted upstream) * Fri Feb 7 2020 Mattias Ellert mattias.ellert@physics.uu.se - 0.7.2-3 - Fix ppc64le build with gcc 10 * Fri Jan 31 2020 Fedora Release Engineering releng@fedoraproject.org - 0.7.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1810867 - xxhash-0.7.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1810867 --------------------------------------------------------------------------------