The following Fedora 32 Security updates need testing:
Age URL
79
https://bodhi.fedoraproject.org/updates/FEDORA-2021-4c8458e373
containernetworking-plugins-0.9.1-1.fc32
76
https://bodhi.fedoraproject.org/updates/FEDORA-2021-16d1596c42
buildah-1.19.4-1.fc32
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-444e38face
jetty-9.4.40-1.fc32
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-d6b9d8497b
openvpn-2.4.11-1.fc32
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-168fbed46f
ceph-14.2.20-1.fc32
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-1556d440ba
nginx-1.20.0-2.fc32
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-f71b592e07
java-1.8.0-openjdk-1.8.0.292.b10-0.fc32
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-83dbc3f7da
p7zip-16.02-20.fc32
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-b88e86b753
java-11-openjdk-11.0.11.0.9-0.fc32
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-c1116fb75e
ansible-2.9.20-1.fc32
The following Fedora 32 Critical Path updates have yet to be approved:
Age URL
137
https://bodhi.fedoraproject.org/updates/FEDORA-2020-345d2fd2aa
iproute-5.9.0-1.fc32
12
https://bodhi.fedoraproject.org/updates/FEDORA-2021-360ad970fd koji-1.24.1-1.fc32
11
https://bodhi.fedoraproject.org/updates/FEDORA-2021-5a4e02312f
xdg-desktop-portal-1.8.1-2.fc32
7
https://bodhi.fedoraproject.org/updates/FEDORA-2021-3f0ce2dede
mtools-4.0.27-1.fc32
7
https://bodhi.fedoraproject.org/updates/FEDORA-2021-b5ce87e535
libical-3.0.10-1.fc32
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-2e33c3908d
evolution-data-server-3.36.5-2.fc32
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-4cc9c81077
gnome-online-accounts-3.36.1-1.fc32
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-426ec216b2 annobin-9.27-3.fc32
gcc-10.3.1-1.fc32
The following builds have been pushed to Fedora 32 updates-testing
apostrophe-2.4-2.fc32
bgpq4-0.0.7-1.fc32
calf-0.90.3-7.fc32
go-rpm-macros-3.0.10-1.fc32
la-capitaine-icon-theme-0.6.2-1.fc32
libmicrohttpd-0.9.73-1.fc32
lua-sec-1.0.1-1.fc32
mate-session-manager-1.24.3-1.fc32
osinfo-db-20210426-1.fc32
perl-Image-ExifTool-12.16-3.fc32
perl-grpc-xs-0.35-1.fc32
pngcheck-2.4.0-8.fc32
python-maya-0.6.1-2.fc32
python-tcxreader-0.3.8-1.fc32
snappy-java-1.1.2.4-19.fc32
strace-5.12-1.fc32
waiverdb-1.3.0-1.fc32
Details about builds:
================================================================================
apostrophe-2.4-2.fc32 (FEDORA-2021-773d4544d2)
Distraction free Markdown editor for GNU/Linux made with GTK+
--------------------------------------------------------------------------------
Update Information:
Bugfix
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 26 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 2.4-2
- fix: RH#1953395
* Wed Mar 10 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 2.4-1
- build(update): 2.4
* Wed Mar 3 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 2.3-1
- build(update): 2.3
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.2.0.3-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.2.0.3-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Tue May 26 2020 Miro Hron��ok <mhroncok(a)redhat.com> - 2.2.0.3-3
- Rebuilt for Python 3.9
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1953395 - Apostrophe can't export to HTML.
https://bugzilla.redhat.com/show_bug.cgi?id=1953395
--------------------------------------------------------------------------------
================================================================================
bgpq4-0.0.7-1.fc32 (FEDORA-2021-164b8962cb)
Automate BGP filter generation based on routing database information
--------------------------------------------------------------------------------
Update Information:
bgpq4 0.0.7 =========== - Replace `AM_CONFIG_HEADER` bysuperseded
`AC_CONFIG_HEADERS` - bgpq_expander: Increase the read select timeout to 30
seconds - Respect `-s` when there are no prefix lists - Multiple man page
improvements - Arista EOS Support - Remove `select()`, use system default -
Remove not-needed `shutdown()` - Revert conditional clauses around XR prefix
list generation
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 26 2021 Robert Scheck <robert(a)fedoraproject.org> 0.0.7-1
- Upgrade to 0.0.7 (#1953767)
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.0.6-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.0.6-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1953767 - bgpq4-0.0.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1953767
--------------------------------------------------------------------------------
================================================================================
calf-0.90.3-7.fc32 (FEDORA-2021-ad85426dfb)
Audio plugins pack
--------------------------------------------------------------------------------
Update Information:
Rebuild for fluidsynth.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.90.3-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
go-rpm-macros-3.0.10-1.fc32 (FEDORA-2021-b78d16ce99)
Build-stage rpm automation for Go packages
--------------------------------------------------------------------------------
Update Information:
Fix minor issues
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
la-capitaine-icon-theme-0.6.2-1.fc32 (FEDORA-2021-87b4235c01)
Icon pack designed to integrate with most desktop environments
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 25 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 0.6.2-1
- build(update): 0.6.2
* Sat Apr 24 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> -
0.6.1-12.20210424gitd49ef94
- build(update): d49ef94 commit
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1950614 - Defaults to redhat configuration instead of fedora
https://bugzilla.redhat.com/show_bug.cgi?id=1950614
--------------------------------------------------------------------------------
================================================================================
libmicrohttpd-0.9.73-1.fc32 (FEDORA-2021-6d5578e756)
Lightweight library for embedding a webserver in applications
--------------------------------------------------------------------------------
Update Information:
Update to 0.9.73-1
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 26 2021 Martin Gansser <martinkg(a)fedoraproject.org> - 1:0.9.73-1
- Update to 1:0.9.73
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> -
1:0.9.72-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1939128 - CVE-2021-3466 libmicrohttpd: Buffer overflow issue in URL parser in
the post_process_urlencoded function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1939128
[ 2 ] Bug #1953315 - libmicrohttpd-0.9.73 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1953315
--------------------------------------------------------------------------------
================================================================================
lua-sec-1.0.1-1.fc32 (FEDORA-2021-e6afd67e68)
Lua binding for OpenSSL library
--------------------------------------------------------------------------------
Update Information:
LuaSec 1.0.1 ============ * Fix `luaL_buffinit()` can use the stack and broke
`buffer_meth_receive()`
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 26 2021 Robert Scheck <robert(a)fedoraproject.org> 1.0.1-1
- Upgrade to 1.0.1 (#1953695)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1953695 - lua-sec-1.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1953695
--------------------------------------------------------------------------------
================================================================================
mate-session-manager-1.24.3-1.fc32 (FEDORA-2021-3323d25040)
MATE Desktop session manager
--------------------------------------------------------------------------------
Update Information:
- update to 1.24.3
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 26 2021 Wolfgang Ulbrich <fedora(a)raveit.de> - 1.24.3-1
- update to 1.24.3
--------------------------------------------------------------------------------
================================================================================
osinfo-db-20210426-1.fc32 (FEDORA-2021-ec36847440)
osinfo database files
--------------------------------------------------------------------------------
Update Information:
Update to new release (v20210426)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 26 2021 Fabiano Fid��ncio <fidencio(a)redhat.com> - 20210426-1
- Update to new release (v20210426)
--------------------------------------------------------------------------------
================================================================================
perl-Image-ExifTool-12.16-3.fc32 (FEDORA-2021-e3d8833d36)
Utility for reading and writing image meta info
--------------------------------------------------------------------------------
Update Information:
Fix CVE-2021-22204.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 26 2021 Tom Callaway <spot(a)fedoraproject.org> - 12.16-3
- apply upstream fix for CVE-2021-22204
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 12.16-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1953616 - CVE-2021-22204 perl-Image-ExifTool: improper neutralization of user
data in the DjVu file format allows arbitrary code execution when parsing a malicious
image
https://bugzilla.redhat.com/show_bug.cgi?id=1953616
--------------------------------------------------------------------------------
================================================================================
perl-grpc-xs-0.35-1.fc32 (FEDORA-2021-5dd4faa5e0)
Perl binding to a client part of the gRPC library
--------------------------------------------------------------------------------
Update Information:
This release adapts to changes in grpc-1.32.0. We deliver it mainty to provide
an up-to-date version string. It also provides upstream tests in a dedicated
subpackage.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 26 2021 Petr Pisar <ppisar(a)redhat.com> - 0.35-1
- 0.35 bump
* Thu Apr 22 2021 Petr Pisar <ppisar(a)redhat.com> - 0.34-2
- Adapt to grpc-1.32.0 (CPAN RT#135258)
- Package the tests
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1953090 - perl-grpc-xs-0.35 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1953090
--------------------------------------------------------------------------------
================================================================================
pngcheck-2.4.0-8.fc32 (FEDORA-2021-eb5d6cf9f6)
Verifies the integrity of PNG, JNG and MNG files
--------------------------------------------------------------------------------
Update Information:
Backported fix for #1949800, in which certain invalid PNG data could cause an
integer division-by-zero, invoking undefined behavior, from upstream release
3.0.3.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 26 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> - 2.4.0-8
- Backport fix for RHBZ#1949800 from upstream release 3.0.3
--------------------------------------------------------------------------------
================================================================================
python-maya-0.6.1-2.fc32 (FEDORA-2021-3d0a9fd3c5)
Datetimes for Humans
--------------------------------------------------------------------------------
Update Information:
New subpackage for docs
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 26 2021 Iztok Fister Jr. <iztokf AT fedoraproject DOT org> - 0.6.1-2
- Subpage for docs
--------------------------------------------------------------------------------
================================================================================
python-tcxreader-0.3.8-1.fc32 (FEDORA-2021-60d7e7417c)
tcxreader is a parser/reader for Garmin's TCX file format
--------------------------------------------------------------------------------
Update Information:
Update to the latest release
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 26 2021 Iztok Fister Jr. <iztokf AT fedoraproject DOT org> - 0.3.8-1
- Update to the latest release -- 0.3.8
- Add LICENSE
* Thu Apr 22 2021 Iztok Fister Jr. <iztokf AT fedoraproject DOT org> - 0.3.6-3
- Install examples and datasets to docs
--------------------------------------------------------------------------------
================================================================================
snappy-java-1.1.2.4-19.fc32 (FEDORA-2021-21bb326a2d)
Fast compressor/decompresser
--------------------------------------------------------------------------------
Update Information:
Remove problematic files from upstream tarball.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 26 2021 Fabio Valentini <decathorpe(a)gmail.com> - 1.1.2.4-19
- Vacuum problematic files from upstream tarball.
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> -
1.1.2.4-18
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Wed Jul 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> -
1.1.2.4-17
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Sat Jul 11 2020 Jiri Vanek <jvanek(a)redhat.com> - 1.1.2.4-16
- Rebuilt for JDK-11, see
https://fedoraproject.org/wiki/Changes/Java11
* Fri Jun 19 2020 Mat Booth <mat.booth(a)redhat.com> - 1.1.2.4-15
- Allow building against Java 11
--------------------------------------------------------------------------------
================================================================================
strace-5.12-1.fc32 (FEDORA-2021-f6a336c86d)
Tracks and displays system calls associated with a running process
--------------------------------------------------------------------------------
Update Information:
v5.10 -> v5.12.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 26 2021 Dmitry V. Levin <ldv(a)strace.io> - 5.12-1
- v5.11 -> v5.12.
* Wed Feb 17 2021 Dmitry V. Levin <ldv(a)strace.io> - 5.11-1
- v5.10 -> v5.11.
--------------------------------------------------------------------------------
================================================================================
waiverdb-1.3.0-1.fc32 (FEDORA-2021-52794e4bcc)
Service for waiving results in ResultsDB
--------------------------------------------------------------------------------
Update Information:
A simpler permission configuration, fix for stomp.py.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 26 2021 Lukas Holecek <hluk(a)email.cz> - 1.3.0-1
- A simpler permission configuration can be now used. New option
``PERMISSIONS`` uses glob expressions instead of a regular expression to
verify the user is allowed to waive a test case. The configuration can be
listed with :http:get:`/api/v1.0/permissions`. Additional GET parameter
``testcase`` can be used to filter the list by matching test case.
``PERMISSION_MAPPING`` is deprecated but still works if the new option is not
defined.
- Fixes possible disconnecting issue with older stomp.py library
(
https://github.com/jasonrbriggs/stomp.py/issues/323).
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1811719 - waiverdb-1.3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1811719
--------------------------------------------------------------------------------