The following Fedora 32 Security updates need testing:
Age URL
32
https://bodhi.fedoraproject.org/updates/FEDORA-2020-eb942ee0db libuv-1.39.0-1.fc32
nodejs-12.18.4-1.fc32
9
https://bodhi.fedoraproject.org/updates/FEDORA-2020-3cea1ac8f3 mupdf-1.18.0-2.fc32
python-PyMuPDF-1.18.0-1.fc32 zathura-pdf-mupdf-0.3.6-4.fc32
6
https://bodhi.fedoraproject.org/updates/FEDORA-2020-0fbf0db920
singularity-3.6.4-1.fc32
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-92b1d001b3 ant-1.10.9-1.fc32
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-3449b92e5f
suricata-5.0.4-1.fc32
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-da859aadde
calamares-3.2.11-14.fc32 kde-partitionmanager-4.2.0-1.fc32 kpmcore-4.2.0-1.fc32
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-81026ddd81
pdns-recursor-4.3.5-1.fc32
0
https://bodhi.fedoraproject.org/updates/FEDORA-2020-c605353480
nodejs-12.19.0-1.fc32
The following Fedora 32 Critical Path updates have yet to be approved:
Age URL
109
https://bodhi.fedoraproject.org/updates/FEDORA-2020-ebbe0f7b25 cpio-2.13-6.fc32
13
https://bodhi.fedoraproject.org/updates/FEDORA-2020-1c29e70c7b
perl-Digest-MD5-2.58-1.fc32
12
https://bodhi.fedoraproject.org/updates/FEDORA-2020-95b9c09df2
binutils-2.34-6.fc32
10
https://bodhi.fedoraproject.org/updates/FEDORA-2020-700e58867d
os-prober-1.77-6.fc32
10
https://bodhi.fedoraproject.org/updates/FEDORA-2020-dc35a61092 ndctl-70.1-1.fc32
10
https://bodhi.fedoraproject.org/updates/FEDORA-2020-62ce186a60 yelp-3.36.1-1.fc32
10
https://bodhi.fedoraproject.org/updates/FEDORA-2020-f1a758d07a
at-spi2-core-2.36.1-1.fc32
7
https://bodhi.fedoraproject.org/updates/FEDORA-2020-54f71a0745
libpwquality-1.4.4-1.fc32
6
https://bodhi.fedoraproject.org/updates/FEDORA-2020-e1bec53f2a
perl-Digest-1.19-1.fc32
6
https://bodhi.fedoraproject.org/updates/FEDORA-2020-174525f97d
perl-Pod-Usage-2.01-1.fc32
6
https://bodhi.fedoraproject.org/updates/FEDORA-2020-a27b8aedcd fedora-repos-32-10
5
https://bodhi.fedoraproject.org/updates/FEDORA-2020-c796a2ea94 avahi-0.7-24.fc32
5
https://bodhi.fedoraproject.org/updates/FEDORA-2020-aadcbd3eed
osinfo-db-20201015-1.fc32
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-afbcf0cac7
ostree-2020.7-3.fc32
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-0596794674
tzdata-2020b-1.fc32
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-da3401a3ce
enchant2-2.2.12-1.fc32 mingw-enchant2-2.2.12-1.fc32
0
https://bodhi.fedoraproject.org/updates/FEDORA-2020-8c65b883c8
kernel-5.8.16-200.fc32
The following builds have been pushed to Fedora 32 updates-testing
bugzilla-5.0.6-7.fc32
ceph-14.2.12-1.fc32
certmonger-0.79.13-1.fc32
elisa-player-20.08.2-1.fc32
gcc-10.2.1-6.fc32
golang-github-minio-7.0.5-2.fc32
inxi-3.1.08-1.fc32
kbackup-20.08.2-1.fc32
minuet-20.08.2-1.fc32
mozjs78-78.4.0-1.fc32
oniguruma-6.9.5-4.rev1.fc32
openbgpd-6.8p0-1.fc32
pcre-8.44-2.fc32
perl-CPAN-Perl-Releases-5.20201020-1.fc32
perl-Module-CoreList-5.20201020-1.fc32
php-twig-1.44.0-1.fc32
php-twig2-2.14.0-1.fc32
php-twig3-3.1.0-1.fc32
python-bsddb3-6.2.7-1.fc32
rpki-client-6.8p0-1.fc32
sane-airscan-0.99.18-1.fc32
tcpreplay-4.3.3-3.fc32
video-downloader-0.5.9-1.fc32
xen-4.13.1-7.fc32
Details about builds:
================================================================================
bugzilla-5.0.6-7.fc32 (FEDORA-2020-2db60d8180)
Bug tracking system
--------------------------------------------------------------------------------
Update Information:
The way Bugzilla uses the perl module Email::MIME prior to 1.949 to send mail
was incorrect but worked because of a bug in Email::MIME. This was fixed and now
Bugzilla's use of the module fails. This update patches the issue away.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 19 2020 Emmanuel Seyman <emmanuel(a)seyman.fr> - 5.0.6-7
- Replace calls to %{__perl} with /usr/bin/perl
- Remove contrib/bugzilla-submit (no longers works) (#1835451)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1835451 - raise ValueError, errmsg # 'File Not Found in bugzilla-submit
https://bugzilla.redhat.com/show_bug.cgi?id=1835451
[ 2 ] Bug #1855962 - bugzilla can't send non-html email
https://bugzilla.redhat.com/show_bug.cgi?id=1855962
--------------------------------------------------------------------------------
================================================================================
ceph-14.2.12-1.fc32 (FEDORA-2020-b7b2df5bcc)
User space components of the Ceph file system
--------------------------------------------------------------------------------
Update Information:
ceph 14.2.12 GA
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 20 2020 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:14.2.12-1
- ceph 14.2.12 GA
--------------------------------------------------------------------------------
================================================================================
certmonger-0.79.13-1.fc32 (FEDORA-2020-ad31de1d5b)
Certificate status monitor and PKI enrollment client
--------------------------------------------------------------------------------
Update Information:
- Drop previous dbus fix which allowed certmonger to stop on dbus stop -
Configure systemd service so certmonger is managed by dbus start/stop - Remove
empty translation files in prep for Weblate - Switch IPA to use the JSON instead
of XML-RPC API - Disable certmaster CA support by default - Don't send SIGKILL
to children, give them a chance to die - Fix NSS shutdown issues when obtaining
the internal token name - Save a copy of the IPA error message when parsing the
JSON result - certread-n: Look up certs using PK11_FindCertFromNickname() -
Free public key information after storing and displaying - Don't report a
spurious error if no SCEP pkiMessage is ready yet
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 20 2020 Rob Crittenden <rcritten(a)redhat.com> - 0.79.13-1
- Update to upstream 0.79.13
* Mon Oct 5 2020 Rob Crittenden <rcritten(a)redhat.com> - 0.79.12-1
- Update to upstream 0.79.12
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1869370 - Support JSON requests to IPA
https://bugzilla.redhat.com/show_bug.cgi?id=1869370
--------------------------------------------------------------------------------
================================================================================
elisa-player-20.08.2-1.fc32 (FEDORA-2020-82c09dac16)
Elisa music player
--------------------------------------------------------------------------------
Update Information:
Update some KDE apps to 20.08.2.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 21 2020 Vasiliy N. Glazov <vascom2(a)gmail.com> - 20.08.2-1
- Update to 20.08.2
* Wed Sep 23 2020 Vasiliy N. Glazov <vascom2(a)gmail.com> - 20.08.1-1
- Update to 20.08.1
* Wed Aug 19 2020 Vasiliy N. Glazov <vascom2(a)gmail.com> - 20.08.0-1
- Update to 20.08.0
* Tue Aug 18 2020 Rex Dieter <rdieter(a)fedoraproject.org> - 20.04.3-4
- drop unused dep on qt5-qtbase-private-devel
- tighten qt5-qtquickcontrols runtime dep
- drop kde-filesystem dep (not needed, pulled in elsewhere)
- drop __cmake_in_source_build reference, enforced by %cmake_kf5 now
* Tue Jul 28 2020 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 20.04.3-3
- Fix FTBFS
* Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 20.04.3-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Fri Jul 10 2020 Vasiliy N. Glazov <vascom2(a)gmail.com> - 20.04.3-1
- Update to 20.04.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1875601 - elisa-player-20.08.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1875601
[ 2 ] Bug #1886923 - elisa-player-20.08.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1886923
[ 3 ] Bug #1886983 - kio-gdrive-20.08.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1886983
[ 4 ] Bug #1889880 - elisa not working: "QQmlApplicationEngine failed to load
component"
https://bugzilla.redhat.com/show_bug.cgi?id=1889880
--------------------------------------------------------------------------------
================================================================================
gcc-10.2.1-6.fc32 (FEDORA-2020-a60c5b3723)
Various compilers (C, C++, Objective-C, ...)
--------------------------------------------------------------------------------
Update Information:
Upstream bugs (
http://gcc.gnu.org/PRNNNNN) fixed: 88115, 95189, 95788, 95886,
96229, 96313, 96456, 97150, 97236, 97251, 97255, 97272, 97273, 97290, 97295,
97302, 97313, 97349, 97357
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 16 2020 Jakub Jelinek <jakub(a)redhat.com> 10.2.1-6
- update from releases/gcc-10 branch
- PRs c++/88115, c++/96229, fortran/97272, libstdc++/95788, libstdc++/97273,
lto/97290, middle-end/95189, middle-end/95886, rtl-optimization/97313,
target/96313, target/96456, target/97150, target/97251, target/97302,
target/97349, tree-optimization/97236, tree-optimization/97255,
tree-optimization/97357
- fix ICE on building Firefox with LTO+PGO (#1886399, PR ipa/97295)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1886399 - [Rawhide/Fedora33] gcc crashes at brew during Firefox build
https://bugzilla.redhat.com/show_bug.cgi?id=1886399
--------------------------------------------------------------------------------
================================================================================
golang-github-minio-7.0.5-2.fc32 (FEDORA-2020-cfdb2a2494)
MinIO Client SDK for Go
--------------------------------------------------------------------------------
Update Information:
Add alternate import path
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 10 2020 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 7.0.5-2
- Add alternate import path
* Sun Aug 30 2020 Steve Miller (copart) <code(a)rellims.com> - 7.0.5-1
- Bumped to upstream
- Resolves: #1863766 and #1813756
* Sat Aug 1 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.0.49-3
- Second attempt - Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.0.49-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
inxi-3.1.08-1.fc32 (FEDORA-2020-1ad71611c3)
A full featured system information script
--------------------------------------------------------------------------------
Update Information:
Update to 3.1.08.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 21 2020 Vasiliy N. Glazov <vascom2(a)gmail.com> - 3.1.08-1
- Update to 3.1.08
--------------------------------------------------------------------------------
================================================================================
kbackup-20.08.2-1.fc32 (FEDORA-2020-82c09dac16)
Back up your data in a simple, user friendly way
--------------------------------------------------------------------------------
Update Information:
Update some KDE apps to 20.08.2.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 21 2020 Vasiliy N. Glazov <vascom2(a)gmail.com> - 20.08.2-1
- Update to 20.08.2
* Wed Sep 23 2020 Vasiliy N. Glazov <vascom2(a)gmail.com> - 20.08.1-1
- Update to 20.08.1
* Thu Aug 20 2020 Vasiliy N. Glazov <vascom2(a)gmail.com> - 20.08.0-1
- Update to 20.08.0
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 20.04.3-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Fri Jul 10 2020 Vasiliy N. Glazov <vascom2(a)gmail.com> - 20.04.3-1
- Update to 20.04.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1875601 - elisa-player-20.08.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1875601
[ 2 ] Bug #1886923 - elisa-player-20.08.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1886923
[ 3 ] Bug #1886983 - kio-gdrive-20.08.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1886983
[ 4 ] Bug #1889880 - elisa not working: "QQmlApplicationEngine failed to load
component"
https://bugzilla.redhat.com/show_bug.cgi?id=1889880
--------------------------------------------------------------------------------
================================================================================
minuet-20.08.2-1.fc32 (FEDORA-2020-82c09dac16)
A KDE Software for Music Education
--------------------------------------------------------------------------------
Update Information:
Update some KDE apps to 20.08.2.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 21 2020 Vasiliy N. Glazov <vascom2(a)gmail.com> - 20.08.2-1
- Update to 20.08.2
* Wed Sep 23 2020 Vasiliy N. Glazov <vascom2(a)gmail.com> - 20.08.1-1
- Update to 20.08.1
* Thu Aug 20 2020 Vasiliy N. Glazov <vascom2(a)gmail.com> - 20.08.0-1
- Update to 20.08.0
* Sat Aug 1 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 20.04.3-3
- Second attempt - Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 20.04.3-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Fri Jul 10 2020 Vasiliy N. Glazov <vascom2(a)gmail.com> - 20.04.3-1
- Update to 20.04.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1875601 - elisa-player-20.08.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1875601
[ 2 ] Bug #1886923 - elisa-player-20.08.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1886923
[ 3 ] Bug #1886983 - kio-gdrive-20.08.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1886983
[ 4 ] Bug #1889880 - elisa not working: "QQmlApplicationEngine failed to load
component"
https://bugzilla.redhat.com/show_bug.cgi?id=1889880
--------------------------------------------------------------------------------
================================================================================
mozjs78-78.4.0-1.fc32 (FEDORA-2020-32d6be9781)
SpiderMonkey JavaScript library
--------------------------------------------------------------------------------
Update Information:
- mozjs78-78.4.0 ESR:
https://www.mozilla.org/en-US/firefox/78.4.0/releasenotes/
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 19 2020 Frantisek Zatloukal <fzatlouk(a)redhat.com> - 78.4.0-1
- Update to 78.4.0
--------------------------------------------------------------------------------
================================================================================
oniguruma-6.9.5-4.rev1.fc32 (FEDORA-2020-5e44c3c60f)
Regular expressions library
--------------------------------------------------------------------------------
Update Information:
As CVE-2020-26159 was proved to be false positive, this rpm reverts the change
for CVE-2020-26159 issue.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 20 2020 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 6.9.5-4.rev1
- Revert the previous change, CVE-2020-26159 is marked as false
https://github.com/kkos/oniguruma/issues/221
--------------------------------------------------------------------------------
================================================================================
openbgpd-6.8p0-1.fc32 (FEDORA-2020-04d52aaa3f)
OpenBGPD Routing Daemon
--------------------------------------------------------------------------------
Update Information:
OpenBGPD 6.8p0 ============== Portable release based on OpenBSD 6.8. It
includes the following changes to the previous release: * In `bgpctl(8)`, the
`reload` command now takes a 'reason' argument to use as Administrative Shutdown
Communication to its neighbors. * Added `bgpctl(8)` support for VPNv6 in the
family option of the `show rib` command. * Added `bgpctl(8)` support for JSON
formatted output in various `show` commands. * Support to build OpenBGPD on
Alpine Linux added.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 20 2020 Robert Scheck <robert(a)fedoraproject.org> 6.8p0-1
- Upgrade to 6.8p0 (#1889826)
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.7p0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1889826 - openbgpd-6.8p0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1889826
--------------------------------------------------------------------------------
================================================================================
pcre-8.44-2.fc32 (FEDORA-2020-f9ada0f4f8)
Perl-compatible regular expression library
--------------------------------------------------------------------------------
Update Information:
This release fixes reading an unitialized memory when compilnig an expression
with named groups wwhere a former group name is a prefix of the later group
name.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 19 2020 Petr Pisar <ppisar(a)redhat.com> - 8.44-2
- Fix reading an uninitialized memory when populating a name table
(upstream bug #2661)
--------------------------------------------------------------------------------
================================================================================
perl-CPAN-Perl-Releases-5.20201020-1.fc32 (FEDORA-2020-6841b9941b)
Mapping Perl releases on CPAN to the location of the tarballs
--------------------------------------------------------------------------------
Update Information:
Update to the latest version
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 21 2020 Jitka Plesnikova <jplesnik(a)redhat.com> - 5.20201020-1
- 5.20201020 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1889922 - perl-CPAN-Perl-Releases-5.20201020 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1889922
--------------------------------------------------------------------------------
================================================================================
perl-Module-CoreList-5.20201020-1.fc32 (FEDORA-2020-dbe87feb25)
What modules are shipped with versions of perl
--------------------------------------------------------------------------------
Update Information:
Update to the latest version
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 21 2020 Jitka Plesnikova <jplesnik(a)redhat.com> - 1:5.20201020-1
- 5.20201020 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1889925 - perl-Module-CoreList-5.20201020 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1889925
--------------------------------------------------------------------------------
================================================================================
php-twig-1.44.0-1.fc32 (FEDORA-2020-532e8d6335)
The flexible, fast, and secure template engine for PHP
--------------------------------------------------------------------------------
Update Information:
**Version 1.44.0** (2020-10-21) * Remove implicit dependency on ext/iconv in
JS escaper * Fix sandbox support when using "include(template_from_string())"
* Make round brackets optional for one argument tests like "same as" or
"divisible by" * Add support for ES2015 style object initialisation shortcut {
a } is the same as { 'a': a } * Fix filter(), map(), and reduce() to throw a
RuntimeError instead of a PHP TypeError * Drop PHP 7.1 support
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 21 2020 Remi Collet <remi(a)remirepo.net> - 1.44.0-1
- update to 1.44.0
- raise dependency on PHP 7.2.5
--------------------------------------------------------------------------------
================================================================================
php-twig2-2.14.0-1.fc32 (FEDORA-2020-ef7d1e35f2)
The flexible, fast, and secure template engine for PHP
--------------------------------------------------------------------------------
Update Information:
**Version 2.14.0** (2020-10-21) * Fix sandbox support when using
"include(template_from_string())" * Make round brackets optional for one
argument tests like "same as" or "divisible by" * Add support for
ES2015 style
object initialisation shortcut { a } is the same as { 'a': a } * Drop PHP 7.1
support
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 21 2020 Remi Collet <remi(a)remirepo.net> - 2.14.0-1
- update to 2.14.0
- raise dependency on PHP 7.2.5
--------------------------------------------------------------------------------
================================================================================
php-twig3-3.1.0-1.fc32 (FEDORA-2020-3fdd12dd86)
The flexible, fast, and secure template engine for PHP
--------------------------------------------------------------------------------
Update Information:
**Version 3.1.0** (2020-10-21) * Fix sandbox support when using
"include(template_from_string())" * Make round brackets optional for one
argument tests like "same as" or "divisible by" * Add support for
ES2015 style
object initialisation shortcut { a } is the same as { 'a': a }
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 21 2020 Remi Collet <remi(a)remirepo.net> - 3.1.0-1
- update to 3.1.0
--------------------------------------------------------------------------------
================================================================================
python-bsddb3-6.2.7-1.fc32 (FEDORA-2020-6684c0ea26)
Python 3 bindings for Berkeley DB
--------------------------------------------------------------------------------
Update Information:
Upgrade to version 6.2.7.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 20 2020 Jan Stan��k <jstanek(a)redhat.com> - 6.2.7-1
- Upgrade to version 6.2.7
* Wed Jul 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.2.6-11
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Tue May 26 2020 Miro Hron��ok <mhroncok(a)redhat.com> - 6.2.6-10
- Rebuilt for Python 3.9
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1800383 - python-bsddb3-6.2.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1800383
--------------------------------------------------------------------------------
================================================================================
rpki-client-6.8p0-1.fc32 (FEDORA-2020-cd83a5637b)
RPKI validator to support BGP Origin Validation
--------------------------------------------------------------------------------
Update Information:
rpki-client 6.8p0 ================= Portable release based on OpenBSD 6.8. It
includes the following changes to the previous release: * Improve how
repositories are downloaded: do not fetch symlinks and clean extraneous files in
the repositories after download using the cryptographically signed RPKI manifest
listings. * Fix a bug where `rpki-client` could hang after calling `rsync`.
* Remove the `-f` option, no longer needed. * Improved validation of the trust
anchors. * Add new option `-s timeout` to make `rpki-client` automatically
terminate after a timeout (default 1 hour). This helps when `rpki-client` is run
via `cron` to prevent a hanging process to cause problems. Portability
improvements: * Replace `warnc()` with `warnx()` + `strerror()` * Replace
`b64_pton()` with code using the `libcrypto EVP_Decode*` functionality. *
Adjust for OpenSSL 1.1.x compatible use of the `EVP_ENCODE_CTX` struct.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 20 2020 Robert Scheck <robert(a)fedoraproject.org> 6.8p0-1
- Upgrade to 6.8p0 (#1889618)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1889618 - rpki-client-6.8p0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1889618
--------------------------------------------------------------------------------
================================================================================
sane-airscan-0.99.18-1.fc32 (FEDORA-2020-ec7f797ac0)
SANE backend for AirScan (eSCL) and WSD document scanners
--------------------------------------------------------------------------------
Update Information:
1887870 - sane-airscan-0.99.18 is available
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 20 2020 Zdenek Dohnal <zdohnal(a)redhat.com> - 0.99.18-1
- 1887870 - sane-airscan-0.99.18 is available
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1887870 - sane-airscan-0.99.18 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1887870
--------------------------------------------------------------------------------
================================================================================
tcpreplay-4.3.3-3.fc32 (FEDORA-2020-0e036c907e)
Replay captured network traffic
--------------------------------------------------------------------------------
Update Information:
Patch CVE-2020-24265 and CVE-2020-24266.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 21 2020 Bojan Smojver <bojan@rexursive com> - 4.3.3-2
- CVE-2020-24265
* Wed Jul 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.3.3-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1889806 - CVE-2020-24265 tcpreplay: heap buffer overflow could result in a
crash [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1889806
[ 2 ] Bug #1889807 - CVE-2020-24265 tcpreplay: heap buffer overflow could result in a
crash [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1889807
[ 3 ] Bug #1889809 - CVE-2020-24266 tcpreplay: heap buffer overflow in get_l2len() could
result in a crash [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1889809
[ 4 ] Bug #1889810 - CVE-2020-24266 tcpreplay: heap buffer overflow in get_l2len() could
result in a crash [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1889810
--------------------------------------------------------------------------------
================================================================================
video-downloader-0.5.9-1.fc32 (FEDORA-2020-71f8ef0016)
Download videos from websites like YouTube and many others
--------------------------------------------------------------------------------
Update Information:
Update to 0.5.9
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 21 2020 Artem Polishchuk <ego.cordatus(a)gmail.com> - 0.5.9-1
- build(update): 0.5.9
--------------------------------------------------------------------------------
================================================================================
xen-4.13.1-7.fc32 (FEDORA-2020-e3d619cc32)
Xen is a virtual machine monitor
--------------------------------------------------------------------------------
Update Information:
x86: Race condition in Xen mapping code [XSA-345] undue deferral of IOMMU TLB
flushes [XSA-346] unsafe AMD IOMMU page table updates [XSA-347]
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 20 2020 Michael Young <m.a.young(a)durham.ac.uk> - 4.13.1-7
- x86: Race condition in Xen mapping code [XSA-345]
- undue deferral of IOMMU TLB flushes [XSA-346]
- unsafe AMD IOMMU page table updates [XSA-347]
--------------------------------------------------------------------------------