The following Fedora 31 Security updates need testing:
Age URL
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b90f48e9aa
chromium-76.0.3809.132-1.fc31
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b20614ff74
pdfresurrect-0.18-1.fc31
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ea638fb605
dovecot-2.3.7.2-1.fc31
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-f5558abfef SDL-1.2.15-42.fc31
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d2257607b8 irssi-1.2.2-1.fc31
The following Fedora 31 Critical Path updates have yet to be approved:
Age URL
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e4b6ffd824
rpm-4.15.0-0.rc1.1.fc31
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-55d30d69d3
pcre2-10.33-13.fc31
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-7632c79e6f
fontconfig-2.13.92-3.fc31
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-70af080058
xfce4-settings-4.14.1-2.fc31
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4fa6321eaf
uboot-tools-2019.10-0.3.rc3.fc31
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3e417d3ec7 curl-7.65.3-4.fc31
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-7438eaf3dd gcc-9.2.1-1.fc31
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d1d58d7148
libcacard-2.7.0-3.fc31
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-130a2b2cd6
policycoreutils-2.9-5.fc31
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-883c54f9e9
dnsmasq-2.80-10.fc31
The following builds have been pushed to Fedora 31 updates-testing
Zim-0.72.0-1.fc31
dino-0.0-0.12.20190830.git.016ab2c.fc31
domoticz-4.10718-0.git20190831.1.fc31
fuse3-3.6.2-1.fc31
geoipupdate-4.0.4-1.fc31
git-annex-7.20190819-1.fc31
golang-github-mmcloughlin-geohash-0.9.0-1.fc31
golang-github-nrdcg-namesilo-0.2.1-1.fc31
libnl3-3.5.0-1.fc31
libxcrypt-4.4.8-1.fc31
maven-3.5.4-12.fc31
nodejs-xml2js-0.4.20-1.fc31
nordugrid-arc-6.2.0-1.fc31
openzwave-1.6.899-1.fc31
pcsc-cyberjack-3.99.5final.SP13-1.fc31
pdfbox-2.0.16-1.fc31
python-guessit-3.0.5-1.fc31
vips-8.8.2-2.fc31
xoreos-tools-0.0.5-1.fc31
Details about builds:
================================================================================
Zim-0.72.0-1.fc31 (FEDORA-2019-80724ad82c)
Desktop wiki & notekeeper
--------------------------------------------------------------------------------
Update Information:
* Improve pathbar with "linked" visual design * Improve statusbar visual style
*
Change behavior for lists with mixed bullets * Add configuration of keybindings
to preferences dialog * Support gnome-screenshot in the insert screenshot pluing
* Save size of secondary page window * Add option for linenumbers option in
insert code block dialog * Add option to display date column in tasklist side
pane * Add warnings if locale does not support unicode * Make SVG thumbnail
support configurable * Fix bug for insert equation and other objects * Fix use
of escape sequence in table cells * Fix tasklist view for multiple dates in task
* Fix "apply heading" to strip list formatting * Make ToC plugin update instead
of refresh on save * Fix issue with not-unique headings in tableofcontents * Fix
bugs in auto insert bullet at newline
--------------------------------------------------------------------------------
ChangeLog:
* Sun Sep 1 2019 Robin Lee <cheeselee(a)fedoraproject.org> - 0.72.0-1
- Release 0.72.0
- Add launchable entry to metainfo (RHBZ#1729275)
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 0.71.1-3
- Rebuilt for Python 3.8
--------------------------------------------------------------------------------
================================================================================
dino-0.0-0.12.20190830.git.016ab2c.fc31 (FEDORA-2019-b282001454)
Modern XMPP ("Jabber") Chat Client using GTK+/Vala
--------------------------------------------------------------------------------
Update Information:
Update dino to
[
016ab2c1](https://github.com/dino/dino/compare/8120203d...016ab2c1) and fix a
[
FTBFS](https://bugzilla.redhat.com/show_bug.cgi?id=1735087).
--------------------------------------------------------------------------------
ChangeLog:
* Sat Aug 31 2019 Randy Barlow <bowlofeggs(a)fedoraproject.org> -
0.0-0.12.20190830.git.016ab2c1
- Update to 016ab2c1.
- Fix FTBFS (#1735087).
-
https://github.com/dino/dino/compare/8120203d...016ab2c1
* Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> -
0.0-0.11.20190601.git.8120203
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1735087 - dino: FTBFS in Fedora rawhide/f31
https://bugzilla.redhat.com/show_bug.cgi?id=1735087
--------------------------------------------------------------------------------
================================================================================
domoticz-4.10718-0.git20190831.1.fc31 (FEDORA-2019-a09d87d4db)
Open source Home Automation System
--------------------------------------------------------------------------------
Update Information:
Resolve OpenZWave issues with the latest stable library and latest git checkout
of Domoticz. May new features and bug fixes.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Aug 31 2019 Michael Cronenworth <mike(a)cchtml.com> - 4.10718-0.git20190831.1
- Version update to current master git checkout
- Compile against OpenZWave 1.6
--------------------------------------------------------------------------------
================================================================================
fuse3-3.6.2-1.fc31 (FEDORA-2019-00db2259d2)
File System in Userspace (FUSE) v3 utilities
--------------------------------------------------------------------------------
Update Information:
* fuse3 ver. 3.6.2
--------------------------------------------------------------------------------
ChangeLog:
* Sun Sep 1 2019 Peter Lemenkov <lemenkov(a)gmail.com> - 3.6.2-1
- Update to 3.6.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1728264 - fuse3-3.6.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1728264
--------------------------------------------------------------------------------
================================================================================
geoipupdate-4.0.4-1.fc31 (FEDORA-2019-4fc2d58cac)
Update GeoIP2 and GeoIP Legacy binary databases from MaxMind
--------------------------------------------------------------------------------
Update Information:
Current upstream maintenance release.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Sep 1 2019 Paul Howarth <paul(a)city-fan.org> - 4.0.4-1
- Update to 4.0.4
- Do not try to sync the database directory when running on Windows; syncing
this way is not supported there and would lead to an error (GH#32)
--------------------------------------------------------------------------------
================================================================================
git-annex-7.20190819-1.fc31 (FEDORA-2019-b586941a1c)
Manage files with git, without checking their contents into git
--------------------------------------------------------------------------------
Update Information:
update to 7.20190819
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 30 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> -
7.20190819-1
- update to 7.20190819
* Fri Aug 9 2019 Jens Petersen <petersen(a)redhat.com> - 7.20190730-1
- update to 7.20190730
* Thu Aug 1 2019 Jens Petersen <petersen(a)redhat.com> - 7.20190708-3
- rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1727892 - git-annex-7.20190819 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1727892
--------------------------------------------------------------------------------
================================================================================
golang-github-mmcloughlin-geohash-0.9.0-1.fc31 (FEDORA-2019-64c2b7a957)
Golang geohash library
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1746215 - Review Request: golang-github-mmcloughlin-geohash - Golang geohash
library
https://bugzilla.redhat.com/show_bug.cgi?id=1746215
--------------------------------------------------------------------------------
================================================================================
golang-github-nrdcg-namesilo-0.2.1-1.fc31 (FEDORA-2019-df7a0f040c)
Go library for accessing the Namesilo API
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1747624 - Review Request: golang-github-nrdcg-namesilo - Go library for
accessing the Namesilo API
https://bugzilla.redhat.com/show_bug.cgi?id=1747624
--------------------------------------------------------------------------------
================================================================================
libnl3-3.5.0-1.fc31 (FEDORA-2019-f30741c09c)
Convenience library for kernel netlink sockets
--------------------------------------------------------------------------------
Update Information:
Update to 3.5.0 release
--------------------------------------------------------------------------------
ChangeLog:
* Sun Sep 1 2019 Thomas Haller <thaller(a)redhat.com> - 3.5.0-1
- Update to 3.5.0 release
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 3.4.0-10
- Rebuilt for Python 3.8
--------------------------------------------------------------------------------
================================================================================
libxcrypt-4.4.8-1.fc31 (FEDORA-2019-2e7a516a0a)
Extended crypt library for descrypt, md5crypt, bcrypt, and others
--------------------------------------------------------------------------------
Update Information:
- New upstream release.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Sep 1 2019 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.8-1
- New upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1747795 - libxcrypt-4.4.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747795
--------------------------------------------------------------------------------
================================================================================
maven-3.5.4-12.fc31 (FEDORA-2019-7ada4c6760)
Java project management and project comprehension tool
--------------------------------------------------------------------------------
Update Information:
Remove (direct) dependency on logback-classic to fix issues with broken
dependencies on fedora 31+.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 29 2019 Fabio Valentini <decathorpe(a)gmail.com> - 1:3.5.4-12
- Remove dependency on logback-classic.
--------------------------------------------------------------------------------
================================================================================
nodejs-xml2js-0.4.20-1.fc31 (FEDORA-2019-66e5b13922)
Simple XML to JavaScript object converter
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Sun Sep 1 2019 Tom Hughes <tom(a)compton.nu> - 0.4.20-1
- Update to 0.4.20 upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1747754 - nodejs-xml2js-0.4.20 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747754
--------------------------------------------------------------------------------
================================================================================
nordugrid-arc-6.2.0-1.fc31 (FEDORA-2019-fc7b018e88)
Advanced Resource Connector Middleware
--------------------------------------------------------------------------------
Update Information:
ARC 6.2.0.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Aug 31 2019 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 6.2.0-1
- Update to version 6.2.0
- Drop Python 2 bindings for Fedora 32+ and EPEL 8+
- Drop infosys-ldap package for Fedora 32+ and EPEL 8+
(requires bdii which is not ported to Python 3)
- Build for EPEL 8 (pylint, gfal2 and python-lrms disabled - missing deps)
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 6.1.0-3
- Rebuilt for Python 3.8
--------------------------------------------------------------------------------
================================================================================
openzwave-1.6.899-1.fc31 (FEDORA-2019-a09d87d4db)
Sample Executables for OpenZWave
--------------------------------------------------------------------------------
Update Information:
Resolve OpenZWave issues with the latest stable library and latest git checkout
of Domoticz. May new features and bug fixes.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Aug 31 2019 Michael Cronenworth <mike(a)cchtml.com> - 1.6.899-1
- Version update
--------------------------------------------------------------------------------
================================================================================
pcsc-cyberjack-3.99.5final.SP13-1.fc31 (FEDORA-2019-bc681496be)
PC/SC driver for REINER SCT cyberjack USB chip card reader
--------------------------------------------------------------------------------
Update Information:
* Update to new upstream version SP13 (rev cyberJack@1374)
--------------------------------------------------------------------------------
ChangeLog:
* Sun Sep 1 2019 Robert Scheck <robert(a)fedoraproject.org> - 3.99.5final.SP13-1
- Update to new upstream version SP13 (#1554806)
- Drop requirements for 'initscripts' from specfile (#1592381)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1592381 - [pcsc-cyberjack] Drop requirements for 'initscripts' from
specfile
https://bugzilla.redhat.com/show_bug.cgi?id=1592381
[ 2 ] Bug #1554806 - pcsc-cyberjack-3.99.5final.SP13 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1554806
--------------------------------------------------------------------------------
================================================================================
pdfbox-2.0.16-1.fc31 (FEDORA-2019-88f53a7433)
Apache PDFBox library for working with PDF documents
--------------------------------------------------------------------------------
Update Information:
Update to 2.0.16
--------------------------------------------------------------------------------
ChangeLog:
* Sat Aug 31 2019 Orion Poplawski <orion(a)nwra.com> - 2.0.16-1
- Update to 2.0.16 (CVE-2018-8036, CVE-2018-11797, CVE-2019-0228)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1699742 - CVE-2019-0228 pdfbox: XML External Entity (XXE) attacks via a
crafted XFDF [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1699742
[ 2 ] Bug #1637494 - CVE-2018-11797 pdfbox: unbounded computation in parser resulting in
a denial of service [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1637494
[ 3 ] Bug #1597491 - CVE-2018-8036 pdfbox: Infinite loop in AFMParser.java allows for
out of memory erros via crafted PDF [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1597491
--------------------------------------------------------------------------------
================================================================================
python-guessit-3.0.5-1.fc31 (FEDORA-2019-88a04f5a52)
Library to extract as much information as possible from a video filename
--------------------------------------------------------------------------------
Update Information:
Version 3.0.5
--------------------------------------------------------------------------------
ChangeLog:
* Sun Sep 1 2019 Juan Orti Alcaine <jortialc(a)redhat.com> - 3.0.5-1
- Version 3.0.5
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 2.1.4-12
- Rebuilt for Python 3.8
--------------------------------------------------------------------------------
================================================================================
vips-8.8.2-2.fc31 (FEDORA-2019-b60416dee7)
C/C++ library for processing large images
--------------------------------------------------------------------------------
Update Information:
- [New upstream
release](https://libvips.github.io/libvips/2019/04/22/What%27s-new-in-8.8.html)
- Drop deprecated vips7 C++ bindings - Drop deprecated bundled Python bindings
--------------------------------------------------------------------------------
ChangeLog:
* Sun Sep 1 2019 Benjamin Gilbert <bgilbert(a)backtick.net> - 8.8.2-2
- Add python3-cairo dependency for vipsprofile
* Sun Sep 1 2019 Benjamin Gilbert <bgilbert(a)backtick.net> - 8.8.2-1
- New release
- Drop libvipsCC.so and python3-vips subpackage, both removed upstream
- Fix vipsprofile shebang to point to python3
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 8.7.4-5
- Rebuilt for Python 3.8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1738804 - vips depends on Python 2
https://bugzilla.redhat.com/show_bug.cgi?id=1738804
--------------------------------------------------------------------------------
================================================================================
xoreos-tools-0.0.5-1.fc31 (FEDORA-2019-05b3b847c1)
Tools to help the development of xoreos
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release (rhbz#1637220).
--------------------------------------------------------------------------------
ChangeLog:
* Sat Aug 31 2019 Ben Rosser <rosser.bjr(a)gmail.com> - 0.0.5-1
- Update to latest upstream release (rhbz#1637220).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1637220 - xoreos-tools-0.0.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1637220
--------------------------------------------------------------------------------