The following Fedora 31 Security updates need testing:
Age URL
18
https://bodhi.fedoraproject.org/updates/FEDORA-2020-021fb887ac
python-psutil-5.6.7-1.fc31
13
https://bodhi.fedoraproject.org/updates/FEDORA-2020-4304397fe0 ppp-2.4.7-34.fc31
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-10fe60d68b cacti-1.2.10-1.fc31
cacti-spine-1.2.10-1.fc31
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-3f38f3e517 zsh-5.7.1-6.fc31
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-79516cb689
sympa-6.2.54-1.fc31
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-0ab860bb95
mbedtls-2.16.5-1.fc31
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-bf6ca75fec
seamonkey-2.53.1-2.fc31
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-9c19202d55
monit-5.26.0-1.fc31
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-f43d9b394f
java-1.8.0-openjdk-aarch32-1.8.0.242.b07-1.fc31
0
https://bodhi.fedoraproject.org/updates/FEDORA-2020-a8ac31fed0
mediawiki-1.32.6-1.fc31
The following Fedora 31 Critical Path updates have yet to be approved:
Age URL
16
https://bodhi.fedoraproject.org/updates/FEDORA-2020-599bdb7c34
kexec-tools-2.0.20-10.fc31
13
https://bodhi.fedoraproject.org/updates/FEDORA-2020-74c650e33a
ostree-2020.2-2.fc31
13
https://bodhi.fedoraproject.org/updates/FEDORA-2020-4304397fe0 ppp-2.4.7-34.fc31
13
https://bodhi.fedoraproject.org/updates/FEDORA-2020-296917559c
fonts-rpm-macros-2.0.1-3.fc31 redhat-rpm-config-143-1.fc31
13
https://bodhi.fedoraproject.org/updates/FEDORA-2020-0133fc2657 quota-4.05-8.fc31
11
https://bodhi.fedoraproject.org/updates/FEDORA-2020-a334dc624d
wireless-tools-29-25.fc31
9
https://bodhi.fedoraproject.org/updates/FEDORA-2020-c1a2fd3585
libpcap-1.9.1-2.fc31
8
https://bodhi.fedoraproject.org/updates/FEDORA-2020-c938e6937d
spice-0.14.3-1.fc31
8
https://bodhi.fedoraproject.org/updates/FEDORA-2020-f1288b438c
geoclue2-2.5.6-1.fc31
8
https://bodhi.fedoraproject.org/updates/FEDORA-2020-3aedaed7b6
net-snmp-5.8-17.fc31
8
https://bodhi.fedoraproject.org/updates/FEDORA-2020-ec1ae64cee
libsoup-2.68.4-1.fc31
6
https://bodhi.fedoraproject.org/updates/FEDORA-2020-66f209aa06 pcre-8.44-1.fc31
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-146495d355
vte291-0.58.3-2.fc31
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-92090d32ac
perl-Encode-3.03-441.fc31
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-9160ff39bc
hwdata-0.333-1.fc31
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-37d53c9c97
python-setuptools-41.6.0-1.fc31
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-b59a10b45f
at-spi2-atk-2.34.2-1.fc31
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-644f24ed1c cups-2.2.12-6.fc31
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-d294e11555
adwaita-icon-theme-3.34.3-2.fc31
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-4b0528d225
libevdev-1.9.0-1.fc31
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-2999cb2110
http-parser-2.9.3-2.fc31 libgit2-0.99.0-2.fc31 libgit2-glib-0.99.0.1-2.fc31
libgit2_0.28-0.28.4-1.fc31
0
https://bodhi.fedoraproject.org/updates/FEDORA-2020-717ce1436f ceph-14.2.8-1.fc31
0
https://bodhi.fedoraproject.org/updates/FEDORA-2020-2a203a3a22 fwupd-1.3.9-2.fc31
libgusb-0.3.4-1.fc31
0
https://bodhi.fedoraproject.org/updates/FEDORA-2020-3059e6f8a8
gnome-terminal-3.34.2-2.fc31
0
https://bodhi.fedoraproject.org/updates/FEDORA-2020-9ba6d17f35 nspr-4.25.0-1.fc31
nss-3.50.0-1.fc31
The following builds have been pushed to Fedora 31 updates-testing
batctl-2020.0-1.fc31
blender-2.82-3.fc31
couchdb-3.0.0-1.fc31
dnf-plugins-extras-4.0.8-3.fc31
fedpkg-1.38-2.fc31
gnome-software-3.34.2-2.fc31
kernel-5.5.8-200.fc31
kernel-headers-5.5.8-200.fc31
kernel-tools-5.5.8-200.fc31
libdnf-0.43.1-3.fc31
libinput-1.15.3-1.fc31
nbdkit-1.16.3-1.fc31
php-phpspec-prophecy-1.10.3-1.fc31
pyproject-rpm-macros-0-13.fc31
python-anytree-2.7.2-1.fc31
quilter-2.1.2-1.fc31
rubygem-nokogiri-1.10.9-1.fc31
tomcat-9.0.31-1.fc31
visualboyadvance-m-2.1.4-2.fc31
xxhash-0.7.3-1.fc31
Details about builds:
================================================================================
batctl-2020.0-1.fc31 (FEDORA-2020-380fe19a70)
B.A.T.M.A.N. advanced control and management tool
--------------------------------------------------------------------------------
Update Information:
Update to 2020.0
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 5 2020 Felix Kaechele <heffer(a)fedoraproject.org> - 2020.0-1
- update to 2020.0
* Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2019.5-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
blender-2.82-3.fc31 (FEDORA-2020-7e4f6bbb90)
3D modeling, animation, rendering and post-production
--------------------------------------------------------------------------------
Update Information:
This update obsoletes the standalone Blender Player for better upgrading system
process.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 5 2020 Luya Tshimbalanga <luya(a)fedoraproject.org> - 1:2.82-3
- Add Obsolete blenderplayer line for system upgrade (#1810743)
* Sun Feb 23 2020 Luya Tshimbalanga <luya(a)fedoraproject.org> - 1:2.82-2
- Patch for upstream invalid appdata causing segmentation fault
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1810743 - blenderplayer-1:2.79b-17.fc31.x86_64 fails during test update from
f31 to f32
https://bugzilla.redhat.com/show_bug.cgi?id=1810743
--------------------------------------------------------------------------------
================================================================================
couchdb-3.0.0-1.fc31 (FEDORA-2020-83f513fd7e)
A document database server, accessible via a RESTful JSON API
--------------------------------------------------------------------------------
Update Information:
CouchDB 3.0.0
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 28 2019 Peter Lemenkov <lemenkov(a)gmail.com> - 2.3.1-1
- Ver. 2.3.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1803197 - Install of CouchDB on Fedora 31 fails because nothing provides
libmozjs185.so.1.0
https://bugzilla.redhat.com/show_bug.cgi?id=1803197
[ 2 ] Bug #1660481 - CVE-2018-17188 couchdb: Remote Privilege Escalations [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1660481
[ 3 ] Bug #1660403 - CVE-2018-11769 couchdb: Possible privilege escalation by couchdb
administrator to system couchdb user [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1660403
[ 4 ] Bug #1601003 - CVE-2018-8007 couchdb: Administrative Privilege Escalation
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1601003
[ 5 ] Bug #1799258 - couchdb: FTBFS in Fedora rawhide/f32
https://bugzilla.redhat.com/show_bug.cgi?id=1799258
[ 6 ] Bug #1377306 - couchdb-3.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1377306
[ 7 ] Bug #1767037 - couchdb broken dependancies
https://bugzilla.redhat.com/show_bug.cgi?id=1767037
[ 8 ] Bug #1735052 - couchdb: FTBFS in Fedora rawhide/f31
https://bugzilla.redhat.com/show_bug.cgi?id=1735052
--------------------------------------------------------------------------------
================================================================================
dnf-plugins-extras-4.0.8-3.fc31 (FEDORA-2020-ecb1f7f4d0)
Extras Plugins for DNF
--------------------------------------------------------------------------------
Update Information:
dnf-plugins-extras: - Fix patch to fix distribution issues with missing upgrade
path between dist versions (RhBug:1767351)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 6 2020 Ales Matej <amatej(a)redhat.com> - 4.0.8-3
- Fix patch to fix distribution issues with missing upgrade path between dist versions
(RhBug:1767351)
--------------------------------------------------------------------------------
================================================================================
fedpkg-1.38-2.fc31 (FEDORA-2020-72d77eef77)
Fedora utility for working with dist-git
--------------------------------------------------------------------------------
Update Information:
Detailed release notes:
[
here](https://docs.pagure.org/fedpkg/releases/1.38.html) A number of fixes and
features from the list were already released as patches.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 6 2020 Ond��ej Nosek <onosek(a)redhat.com> - 1.38-2
- Patch: Move rpm dependency for test environment only
* Mon Mar 2 2020 Ond��ej Nosek <onosek(a)redhat.com> - 1.38-1
- Removes check of bodhi-client version - rhbz#1796972 (onosek)
- Clone config customization for namespaces (onosek)
- Repair Jenkins tests (onosek)
- Update bash completion with side tag commands (lsedlar)
- add --fail-fast to bash-completion (cheese)
- Improve coding style by sorting imports (onosek)
- Repair tests for previous commits (onosek)
- Create fork of the active repository - #276 (onosek)
- request-tests-repo: add branch into ticket body - #359 (onosek)
- verrel command on master asks Koji first - #357 (onosek)
- Check nvr before build - #356 (onosek)
- Change dist tag for epel8-playground (onosek)
- Add test for retiring on archived release (lsedlar)
- Mock requests in all tests (lsedlar)
- Line up descriptions for better code readability (onosek)
- Clarify request-branch 'service levels' argument - #283 (onosek)
- Resolve Jenkins unittests failing (onosek)
- utils: fix whitespace in Pagure error message (kdreyer)
- New options for bodhi template - 459 (onosek)
- Block retiring in released branches - #337 (onosek)
- Use package.cfg for epel8+ branches (mboddu)
- Add epel*-playground into rpmdefines (smooge)
- linux_distribution import moved (onosek)
- Unittests for epel*-playground branch requests (onosek)
- Allow epel*-playground requests for epel8 and newer (onosek)
- Support for epel*-playground branch requests - #334 (mboddu)
- git-changelog: Fix running on Python 3 (onosek)
- Avoid warning about invalid escape with python3.8 (zbyszek)
- Tests for update stable karma - #321 (cqi)
- Bump check for bodhi client - 330 (lsedlar)
- Ignore files in a cloned repository - patterns update (onosek)
--------------------------------------------------------------------------------
================================================================================
gnome-software-3.34.2-2.fc31 (FEDORA-2020-675a0aff30)
A software center for GNOME
--------------------------------------------------------------------------------
Update Information:
This update adds artwork for distro upgrades to F32 Beta and backports a few
distro upgrade fixes from upstream.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 6 2020 Kalev Lember <klember(a)redhat.com> - 3.34.2-2
- Add artwork for F32 Beta upgrades
- Fix various issues with rpm-ostree distro upgrades
- Show correct button for distro upgrades
--------------------------------------------------------------------------------
================================================================================
kernel-5.5.8-200.fc31 (FEDORA-2020-d8c4450b82)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 5.5.8 stable kernel update contains a number of important fixes across the
tree.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 5 2020 Justin M. Forbes <jforbes(a)fedoraproject.org> - 5.5.8-200
- Linux v5.5.8
--------------------------------------------------------------------------------
================================================================================
kernel-headers-5.5.8-200.fc31 (FEDORA-2020-d8c4450b82)
Header files for the Linux kernel for use by glibc
--------------------------------------------------------------------------------
Update Information:
The 5.5.8 stable kernel update contains a number of important fixes across the
tree.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 5 2020 Justin M. Forbes <jforbes(a)fedoraproject.org> - 5.5.8-200
- Linux v5.5.8
--------------------------------------------------------------------------------
================================================================================
kernel-tools-5.5.8-200.fc31 (FEDORA-2020-d8c4450b82)
Assortment of tools for the Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 5.5.8 stable kernel update contains a number of important fixes across the
tree.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 5 2020 Justin M. Forbes <jforbes(a)fedoraproject.org> - 5.5.8-200
- Linux v5.5.8
--------------------------------------------------------------------------------
================================================================================
libdnf-0.43.1-3.fc31 (FEDORA-2020-717d521d35)
Library providing simplified C and Python API to libsolv
--------------------------------------------------------------------------------
Update Information:
libdnf: - Backport patch to reset active modules when no module enabled or
default (RhBug:1767351)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 6 2020 Ales Matej <amatej(a)redhat.com> - 0.43.1-3
- Backport patch to reset active modules when no module enabled or default (1767351)
--------------------------------------------------------------------------------
================================================================================
libinput-1.15.3-1.fc31 (FEDORA-2020-15e7140fa5)
Input device library
--------------------------------------------------------------------------------
Update Information:
libinput 1.15.3
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 6 2020 Peter Hutterer <peter.hutterer(a)redhat.com> 1.15.3-1
- libinput 1.15.3
--------------------------------------------------------------------------------
================================================================================
nbdkit-1.16.3-1.fc31 (FEDORA-2020-db2c19d0ea)
NBD server
--------------------------------------------------------------------------------
Update Information:
New stable release 1.16.3.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 6 2020 Richard W.M. Jones <rjones(a)redhat.com> - 1.16.3-1
- New stable release 1.16.3.
--------------------------------------------------------------------------------
================================================================================
php-phpspec-prophecy-1.10.3-1.fc31 (FEDORA-2020-3507ce3043)
Highly opinionated mocking framework for PHP
--------------------------------------------------------------------------------
Update Information:
**Version 1.10.3** / 2020/03/05 * [fixed] removed fatal error when
phpdocumentor/reflection-docblock 5 parses an invalid `@method` tag (@stof)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 6 2020 Remi Collet <remi(a)remirepo.net> - 1.10.3-1
- update to 1.10.3
- allow phpdocumentor/reflection-docblock 5.0
--------------------------------------------------------------------------------
================================================================================
pyproject-rpm-macros-0-13.fc31 (FEDORA-2020-f0b861e528)
RPM macros for PEP 517 Python packages
--------------------------------------------------------------------------------
Update Information:
Tox dependency generator: Handle deps read in from a text file
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 2 2020 Miro Hron��ok <mhroncok(a)redhat.com> - 0-13
- Tox dependency generator: Handle deps read in from a text file (#1808601)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1808601 - tox dependency generator cannot handle deps read in from a text
file
https://bugzilla.redhat.com/show_bug.cgi?id=1808601
--------------------------------------------------------------------------------
================================================================================
python-anytree-2.7.2-1.fc31 (FEDORA-2020-26a87d836d)
Powerful and Lightweight Python Tree Data Structure
--------------------------------------------------------------------------------
Update Information:
initial build for f31
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 6 2020 Gerd Pokorra <gz(a)zimt.uni-siegen.de> - 2.7.2-1
- This things are done by Lubomir Rintel <lkundrak(a)v3.sk>:
- Fixes suggested in a review from Elliott Sales de Andrade (#1768186):
- Fix the license file location
- Tag the license file appropriately
- Use the apppropriate python build tags
- Initial packaging
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1768186 - Package Review: python-anytree - Powerful and Lightweight Python
Tree Data Structure
https://bugzilla.redhat.com/show_bug.cgi?id=1768186
--------------------------------------------------------------------------------
================================================================================
quilter-2.1.2-1.fc31 (FEDORA-2020-3a6c60e243)
Focus on your writing
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 6 2020 Artem Polishchuk <ego.cordatus(a)gmail.com> - 2.1.2-1
- Update to 2.1.2
--------------------------------------------------------------------------------
================================================================================
rubygem-nokogiri-1.10.9-1.fc31 (FEDORA-2020-074d1576d4)
An HTML, XML, SAX, and Reader parser
--------------------------------------------------------------------------------
Update Information:
New version 1.10.9 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 6 2020 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 1.10.9-1
- 1.10.9
--------------------------------------------------------------------------------
================================================================================
tomcat-9.0.31-1.fc31 (FEDORA-2020-04ac174fa9)
Apache Servlet/JSP Engine, RI for Servlet 4.0/JSP 2.3 API
--------------------------------------------------------------------------------
Update Information:
This update includes a rebase from 9.0.30 up to 9.0.31 which resolves one CVE
along with various other bugs/features: * rhbz#1806805 CVE-2020-1938 tomcat:
Apache Tomcat AJP File Read/Inclusion Vulnerability * rhbz#1801729
tomcat-9.0.31 is available
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 5 2020 Coty Sutherland <csutherl(a)redhat.com> - 1:9.0.31-1
- Update to 9.0.31
- Resolves: rhbz#1806398 - CVE-2020-1938 tomcat: Apache Tomcat AJP File Read/Inclusion
Vulnerability
--------------------------------------------------------------------------------
================================================================================
visualboyadvance-m-2.1.4-2.fc31 (FEDORA-2020-d1a780051b)
High compatibility Gameboy Advance Emulator combining VBA builds
--------------------------------------------------------------------------------
Update Information:
Update to 2.1.4, bugfix release See upstream notes for more details:
https://gi
thub.com/visualboyadvance-m/visualboyadvance-m/blob/v2.1.4/CHANGELOG.md
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 6 2020 Jeremy Newton <alexjnewt AT hotmail DOT com> -
1.9.94-21.20190306.git62467b8
- Fix non x86 arches (backported a patch from upstream)
* Fri Jan 31 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.1.4-1.1
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Wed Dec 11 2019 Jeremy Newton <alexjnewt AT hotmail DOT com> - 2.1.4-1
- Update to v2.1.4
--------------------------------------------------------------------------------
================================================================================
xxhash-0.7.3-1.fc31 (FEDORA-2020-784aa11225)
Extremely fast hash algorithm
--------------------------------------------------------------------------------
Update Information:
xxhash 0.7.3
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 6 2020 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 0.7.3-1
- Update to version 0.7.3
- Drop patch xxhash-gcc10-altivec.patch (accepted upstream)
* Fri Feb 7 2020 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 0.7.2-3
- Fix ppc64le build with gcc 10
* Fri Jan 31 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.7.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1810867 - xxhash-0.7.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1810867
--------------------------------------------------------------------------------