The following Fedora 32 Security updates need testing:
Age URL
10
https://bodhi.fedoraproject.org/updates/FEDORA-2020-8b0d59bac6
mbedtls-2.16.8-1.fc32
9
https://bodhi.fedoraproject.org/updates/FEDORA-2020-d737c57172
dovecot-2.3.11.3-5.fc32
5
https://bodhi.fedoraproject.org/updates/FEDORA-2020-f0812d6aad
qutebrowser-1.13.1-1.fc32
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-08402f4071
zeromq-4.3.3-1.fc32
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-22ab822e3b
singularity-3.6.3-1.fc32
The following Fedora 32 Critical Path updates have yet to be approved:
Age URL
76
https://bodhi.fedoraproject.org/updates/FEDORA-2020-ebbe0f7b25 cpio-2.13-6.fc32
14
https://bodhi.fedoraproject.org/updates/FEDORA-2020-1107aadcd8
breeze-icon-theme-5.73.0-1.fc32 extra-cmake-modules-5.73.0-1.fc32 kf5-5.73.0-1.fc32
kf5-attica-5.73.0-1.fc32 kf5-baloo-5.73.0-1.fc32 kf5-bluez-qt-5.73.0-1.fc32
kf5-frameworkintegration-5.73.0-1.fc32 kf5-kactivities-5.73.0-1.fc32
kf5-kactivities-stats-5.73.0-1.fc32 kf5-kapidox-5.73.0-1.fc32 kf5-karchive-5.73.0-2.fc32
kf5-kauth-5.73.0-1.fc32 kf5-kbookmarks-5.73.0-1.fc32 kf5-kcalendarcore-5.73.0-1.fc32
kf5-kcmutils-5.73.0-1.fc32 kf5-kcodecs-5.73.0-1.fc32 kf5-kcompletion-5.73.0-1.fc32
kf5-kconfig-5.73.0-1.fc32 kf5-kconfigwidgets-5.73.0-1.fc32 kf5-kcontacts-5.73.0-1.fc32
kf5-kcoreaddons-5.73.0-1.fc32 kf5-kcrash-5.73.0-1.fc32 kf5-kdbusaddons-5.73.0-1.fc32
kf5-kdeclarative-5.73.0-1.fc32 kf5-kded-5.73.0-1.fc32 kf5-kdelibs4support-5.73.0-1.fc32
kf5-kdesignerplugin-5.73.0-1.fc32 kf5-kdesu-5.73.0-1.fc32 kf5-kdewebkit-5.73.0-1.fc32
kf5-kdnssd-5.73.0-1.fc32 kf5-kdoctools-5.73.0-1.fc32 kf5-kemoticons-5.73.0-1.fc32
kf5-kfilemeta
data-5.73.0-1.fc32 kf5-kglobalaccel-5.73.0-1.fc32 kf5-kguiaddons-5.73.0-1.fc32
kf5-kholidays-5.73.0-1.fc32 kf5-khtml-5.73.0-1.fc32 kf5-ki18n-5.73.0-1.fc32
kf5-kiconthemes-5.73.0-1.fc32 kf5-kidletime-5.73.0-1.fc32 kf5-kimageformats-5.73.0-1.fc32
kf5-kinit-5.73.0-1.fc32 kf5-kio-5.73.0-1.fc32 kf5-kirigami2-5.73.0-2.fc32
kf5-kitemmodels-5.73.0-1.fc32 kf5-kitemviews-5.73.0-1.fc32 kf5-kjobwidgets-5.73.0-1.fc32
kf5-kjs-5.73.0-1.fc32 kf5-kjsembed-5.73.0-1.fc32 kf5-kmediaplayer-5.73.0-1.fc32
kf5-knewstuff-5.73.0-1.fc32 kf5-knotifications-5.73.0-1.fc32
kf5-knotifyconfig-5.73.0-1.fc32 kf5-kpackage-5.73.0-1.fc32 kf5-kparts-5.73.0-1.fc32
kf5-kpeople-5.73.0-1.fc32 kf5-kplotting-5.73.0-1.fc32 kf5-kpty-5.73.0-1.fc32
kf5-kquickcharts-5.73.0-1.fc32 kf5-kross-5.73.0-1.fc32 kf5-krunner-5.73.0-1.fc32
kf5-kservice-5.73.0-1.fc32 kf5-ktexteditor-5.73.0-1.fc32 kf5-ktextwidgets-5.73.0-1.fc32
kf5-kunitconversion-5.73.0-1.fc32 kf5-kwallet-5.73.0-1.fc32 kf5-kwayland-5.73.0-1.fc32
kf5-kwidgetsaddons-5.73.0-1.fc3
2 kf5-kwindowsystem-5.73.0-1.fc32 kf5-kxmlgui-5.73.0-1.fc32
kf5-kxmlrpcclient-5.73.0-1.fc32 kf5-modemmanager-qt-5.73.0-1.fc32
kf5-networkmanager-qt-5.73.0-1.fc32 kf5-plasma-5.73.0-1.fc32 kf5-prison-5.73.0-1.fc32
kf5-purpose-5.73.0-1.fc32 kf5-solid-5.73.0-1.fc32 kf5-sonnet-5.73.0-1.fc32
kf5-syndication-5.73.0-1.fc32 kf5-syntax-highlighting-5.73.0-1.fc32
kf5-threadweaver-5.73.0-1.fc32 oxygen-icon-theme-5.73.0-1.fc32
plasma-wayland-protocols-1.1.1-1.fc32 qqc2-desktop-style-5.73.0-1.fc32
5
https://bodhi.fedoraproject.org/updates/FEDORA-2020-b794ad1c18
webkit2gtk3-2.30.0-1.fc32
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-7b99075365
openldap-2.4.47-5.fc32
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-914ecf9cd9
langtable-0.0.53-1.fc32
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-2233f1ffd0
xdg-desktop-portal-1.8.0-1.fc32 xdg-desktop-portal-gtk-1.8.0-1.fc32
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-04a0dcb582
gnome-control-center-3.36.4-2.fc32
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-938048655c
gnome-remote-desktop-0.1.8-5.fc32 mutter-3.36.6-2.fc32
The following builds have been pushed to Fedora 32 updates-testing
R-ascii-2.4-1.fc32
clang-10.0.1-2.fc32
compiler-rt-10.0.1-1.fc32
cups-filters-1.28.2-2.fc32
dnstwist-20200916-1.fc32
doxygen-1.8.20-4.fc32
fedscm-admin-1.0.17-1.fc32
fuzza-0.6.0-3.fc32
gammastep-2.0.2-1.fc32
golang-github-aaronjanse-pty-1.1.14-1.fc32
golang-github-npat-efault-poller-2.0.0-1.fc32
kernel-5.8.10-200.fc32
libblockdev-2.24-2.fc32
libcxx-10.0.1-1.fc32
libcxxabi-10.0.1-1.fc32
libomp-10.0.1-2.fc32
librdkafka-1.5.0-1.fc32
librelp-1.7.0-1.fc32
libuv-1.39.0-1.fc32
lld-10.0.1-2.fc32
lldb-10.0.1-1.fc32
llvm-10.0.1-4.fc32
llvm-test-suite-10.0.1-2.fc32
matio-1.5.18-1.fc32
mellowplayer-3.6.6-1.fc32
mesa-20.1.8-1.fc32
metamath-0.193-1.fc32
nodejs-12.18.4-1.fc32
nwg-launchers-0.3.4-1.fc32
perl-DBD-Mock-1.57-1.fc32
php-phpdocumentor-reflection-docblock5-5.2.2-1.fc32
php-phpunit-php-code-coverage9-9.1.10-1.fc32
pipewire-0.3.12-1.fc32
pocl-1.5-3.fc32
python-accuweather-0.0.10-1.fc32
python-afsapi-0.0.4-1.fc32
python-jsonref-0.2-1.fc32
python-spnego-0.1.1-2.fc32
python39-3.9.0~rc2-1.fc32
rsyslog-8.2008.0-2.fc32
xtb-6.3.3-1.fc32
yadifa-2.3.10-1.fc32
Details about builds:
================================================================================
R-ascii-2.4-1.fc32 (FEDORA-2020-5ec08626e0)
Export R Objects to Several Markup Languages
--------------------------------------------------------------------------------
Update Information:
Update to latest version (#1880019)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Sep 18 2020 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 2.4-1
- Update to latest version (#1880019)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1880019 - R-ascii-2.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1880019
--------------------------------------------------------------------------------
================================================================================
clang-10.0.1-2.fc32 (FEDORA-2020-a2a54c0ec1)
A C language family front-end for LLVM
--------------------------------------------------------------------------------
Update Information:
Update to LLVM 10.0.1 ---- LLVM 10.0.1
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 17 2020 sguelton(a)redhat.com - 10.0.1-2
- rebuilt with gating.yaml update
* Mon Jul 27 2020 sguelton(a)redhat.com - 10.0.1-1
- 10.0.1
--------------------------------------------------------------------------------
================================================================================
compiler-rt-10.0.1-1.fc32 (FEDORA-2020-a2a54c0ec1)
LLVM "compiler-rt" runtime libraries
--------------------------------------------------------------------------------
Update Information:
Update to LLVM 10.0.1 ---- LLVM 10.0.1
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 27 2020 sguelton(a)redhat.com - 10.0.0-1
- 10.0.1
--------------------------------------------------------------------------------
================================================================================
cups-filters-1.28.2-2.fc32 (FEDORA-2020-6d1438650a)
OpenPrinting CUPS filters and backends
--------------------------------------------------------------------------------
Update Information:
1879147 - driverless cannot generate ppd for dns-sd based uris
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 17 2020 Zdenek Dohnal <zdohnal(a)redhat.com> - 1.28.2-2
- 1879147 - driverless cannot generate ppd for dns-sd based uris
* Tue Sep 15 2020 Zdenek Dohnal <zdohnal(a)redhat.com> - 1.28.2-1
- 1.28.2
* Thu Sep 3 2020 Zdenek Dohnal <zdohnal(a)redhat.com> - 1.28.1-2
- revert previous commit - systemd-resolved doesn't work with avahi right now
because missing link in NetworkManager
* Mon Aug 31 2020 Zdenek Dohnal <zdohnal(a)redhat.com> - 1.28.1-2
- MDNS resolving should be done by systemd-resolved now
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1879147 - driverless cannot generate ppd for dns-sd based uris
https://bugzilla.redhat.com/show_bug.cgi?id=1879147
--------------------------------------------------------------------------------
================================================================================
dnstwist-20200916-1.fc32 (FEDORA-2020-67c246d74d)
Domain name permutation engine
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release (v20200916)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Sep 18 2020 Artur Frenszek-Iwicki <fedora(a)svgames.pl> - 20200916-1
- Update to latest upstream release
--------------------------------------------------------------------------------
================================================================================
doxygen-1.8.20-4.fc32 (FEDORA-2020-f35734aac3)
A documentation system for C/C++
--------------------------------------------------------------------------------
Update Information:
- Fix issue with enums being defined in multiple files This is a regression in
1.8.20 that causes python-wxpython4 to FTBFS. More information about the issue
is available here:
https://github.com/doxygen/doxygen/issues/7979 - Fix doxygen
producing different results on 32 and 64 bit architectures - Fix doxygen
crashing when building tpm2-tss docs
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 17 2020 Than Ngo <than(a)redhat.com> - 1.8.20-4
- Fix doxygen crash
* Tue Sep 15 2020 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 1:1.8.20-3
- Fix doxygen producing different results on 32 and 64 bit architectures
* Fri Aug 28 2020 Scott Talbert <swt(a)techie.net> - 1:1.8.20-2
- Fix issue with enums being defined in multiple files
--------------------------------------------------------------------------------
================================================================================
fedscm-admin-1.0.17-1.fc32 (FEDORA-2020-fb3b25cf4b)
CLI tool to process Fedora SCM requests
--------------------------------------------------------------------------------
Update Information:
Extends f31 EOL. New branch requests for F31 will be processed normally.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Sep 18 2020 Tomas Hrcka <thrcka(a)redhat.com> - 1.0.17-1
- Update to 1.0.17
--------------------------------------------------------------------------------
================================================================================
fuzza-0.6.0-3.fc32 (FEDORA-2020-22579e2a80)
TCP fuzzing tool to test for remote buffer overflows
--------------------------------------------------------------------------------
Update Information:
Disable dependency generator
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
gammastep-2.0.2-1.fc32 (FEDORA-2020-4a1fc702c7)
Adjusts the color temperature of your screen according to time of day
--------------------------------------------------------------------------------
Update Information:
Initial import (#1878350)
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1878350 - Review Request: gammastep - Adjusts the color temperature of your
screen according to time of day
https://bugzilla.redhat.com/show_bug.cgi?id=1878350
--------------------------------------------------------------------------------
================================================================================
golang-github-aaronjanse-pty-1.1.14-1.fc32 (FEDORA-2020-39e130a2d6)
Go package for using unix pseudo-terminals
--------------------------------------------------------------------------------
Update Information:
Initial package for Fedora
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
golang-github-npat-efault-poller-2.0.0-1.fc32 (FEDORA-2020-38b6befaa2)
An epoll(7)-based file-descriptor multiplexer
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
kernel-5.8.10-200.fc32 (FEDORA-2020-9f10c3dfae)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 5.8.10 stable kernel update contains a number of important fixes across the
tree.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 17 2020 Justin M. Forbes <jforbes(a)fedoraproject.org> - 5.8.10-200
- Linux v5.8.10
- Fix (rhbz 1873720 1876997)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1873720 - kernel-5.7.17 and kernel-5.8.4: NFS client can't see files from
NFS mount
https://bugzilla.redhat.com/show_bug.cgi?id=1873720
[ 2 ] Bug #1876997 - Touchpad detected but pointer doesn't move on screen
https://bugzilla.redhat.com/show_bug.cgi?id=1876997
--------------------------------------------------------------------------------
================================================================================
libblockdev-2.24-2.fc32 (FEDORA-2020-711e9582c6)
A library for low-level manipulation with block devices
--------------------------------------------------------------------------------
Update Information:
exec: Fix setting locale for util calls
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 17 2020 Vojtech Trefny <vtrefny(a)redhat.com> - 2.24-2
- exec: Fix setting locale for util calls
--------------------------------------------------------------------------------
================================================================================
libcxx-10.0.1-1.fc32 (FEDORA-2020-a2a54c0ec1)
C++ standard library targeting C++11
--------------------------------------------------------------------------------
Update Information:
Update to LLVM 10.0.1 ---- LLVM 10.0.1
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 27 2020 sguelton(a)redhat.com - 10.0.1-1
- 10.0.1
--------------------------------------------------------------------------------
================================================================================
libcxxabi-10.0.1-1.fc32 (FEDORA-2020-a2a54c0ec1)
Low level support for a standard C++ library
--------------------------------------------------------------------------------
Update Information:
Update to LLVM 10.0.1 ---- LLVM 10.0.1
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 27 2020 sguelton(a)redhat.com - 10.0.1-1
- 10.0.1
--------------------------------------------------------------------------------
================================================================================
libomp-10.0.1-2.fc32 (FEDORA-2020-a2a54c0ec1)
OpenMP runtime for clang
--------------------------------------------------------------------------------
Update Information:
Update to LLVM 10.0.1 ---- LLVM 10.0.1
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 17 2020 sguelton(a)redhat.com - 10.0.1-2
- rebuilt with gating.yaml update
* Mon Jul 27 2020 sguelton(a)redhat.com - 10.0.1-1
- 10.0.1
--------------------------------------------------------------------------------
================================================================================
librdkafka-1.5.0-1.fc32 (FEDORA-2020-f7d61979bd)
The Apache Kafka C library
--------------------------------------------------------------------------------
Update Information:
- rsyslog rebase to latest upstream version resolves: #1829092 resolves:
#1823862 resolves: #1876773 - librdkafka rebase to latest upstream version
resolves: #1818082 - librelp rebase to latest upstream version resolves:
#1826269
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 9 2020 Zoltan Fridrich <zfridric(a)redhat.com> - 1.5.0-1
- Update to upstream 1.5.0
resolves: rhbz#1818082
* Wed Sep 9 2020 Zoltan Fridrich <zfridric(a)redhat.com> - 1.3.0-6
- Switch BuildRequires from python2 to python3
resolves: rhbz#1808329
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1818082 - librdkafka-1.5.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1818082
[ 2 ] Bug #1823862 - Invalid configuration in RPM
https://bugzilla.redhat.com/show_bug.cgi?id=1823862
[ 3 ] Bug #1826269 - librelp-1.7.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1826269
[ 4 ] Bug #1829092 - rsyslog-8.2008.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1829092
[ 5 ] Bug #1876773 - F33FailsToInstall: rsyslog-snmp
https://bugzilla.redhat.com/show_bug.cgi?id=1876773
--------------------------------------------------------------------------------
================================================================================
librelp-1.7.0-1.fc32 (FEDORA-2020-f7d61979bd)
The Reliable Event Logging Protocol library
--------------------------------------------------------------------------------
Update Information:
- rsyslog rebase to latest upstream version resolves: #1829092 resolves:
#1823862 resolves: #1876773 - librdkafka rebase to latest upstream version
resolves: #1818082 - librelp rebase to latest upstream version resolves:
#1826269
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 8 2020 Attila Lakatos <alakatos(a)redhat.com> - 1.7.0-1
- rebase to 1.7.0
resolves: rhbz#1826269
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1818082 - librdkafka-1.5.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1818082
[ 2 ] Bug #1823862 - Invalid configuration in RPM
https://bugzilla.redhat.com/show_bug.cgi?id=1823862
[ 3 ] Bug #1826269 - librelp-1.7.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1826269
[ 4 ] Bug #1829092 - rsyslog-8.2008.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1829092
[ 5 ] Bug #1876773 - F33FailsToInstall: rsyslog-snmp
https://bugzilla.redhat.com/show_bug.cgi?id=1876773
--------------------------------------------------------------------------------
================================================================================
libuv-1.39.0-1.fc32 (FEDORA-2020-eb942ee0db)
Platform layer for node.js
--------------------------------------------------------------------------------
Update Information:
Update to Node.js 12.18.4 September 2020 security release -
https://nodejs.org/en/blog/vulnerability/september-2020-security-releases/
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 8 2020 Stephen Gallagher <sgallagh(a)redhat.com> - 1.39.0-1
- Update to 1.39.0
* Fri Jul 31 2020 Stephen Gallagher <sgallagh(a)redhat.com> - 1.38.1-1
- Update to 1.38.1
-
https://github.com/libuv/libuv/blob/v1.38.1/ChangeLog
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> -
1:1.38.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
lld-10.0.1-2.fc32 (FEDORA-2020-a2a54c0ec1)
The LLVM Linker
--------------------------------------------------------------------------------
Update Information:
Update to LLVM 10.0.1 ---- LLVM 10.0.1
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 17 2020 sguelton(a)redhat.com - 10.0.1-2
- rebuilt with gating.yaml update
* Mon Jul 27 2020 sguelton(a)redhat.com - 10.0.1-1
- 10.0.1
--------------------------------------------------------------------------------
================================================================================
lldb-10.0.1-1.fc32 (FEDORA-2020-a2a54c0ec1)
Next generation high-performance debugger
--------------------------------------------------------------------------------
Update Information:
Update to LLVM 10.0.1 ---- LLVM 10.0.1
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 27 2020 sguelton(a)redhat.com - 10.0.1-1
- 10.0.1
--------------------------------------------------------------------------------
================================================================================
llvm-10.0.1-4.fc32 (FEDORA-2020-a2a54c0ec1)
The Low Level Virtual Machine
--------------------------------------------------------------------------------
Update Information:
Update to LLVM 10.0.1 ---- LLVM 10.0.1
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 17 2020 sguelton(a)redhat.com - 10.0.1-4
- rebuilt with gating update
* Fri Sep 4 2020 sguelton(a)redhat.com - 10.0.1-3
- Apply upstream patch for rhbz#1862012
--------------------------------------------------------------------------------
================================================================================
llvm-test-suite-10.0.1-2.fc32 (FEDORA-2020-a2a54c0ec1)
C/C++ Compiler Test Suite
--------------------------------------------------------------------------------
Update Information:
Update to LLVM 10.0.1 ---- LLVM 10.0.1
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 17 2020 sguelton(a)redhat.com - 10.0.1-2
- rebuilt with gating.yaml update
* Mon Jul 27 2020 sguelton(a)redhat.com - 10.0.1-1
- 10.0.1
--------------------------------------------------------------------------------
================================================================================
matio-1.5.18-1.fc32 (FEDORA-2020-5a44a95294)
Library for reading/writing Matlab MAT files
--------------------------------------------------------------------------------
Update Information:
1.5.18
https://github.com/tbeu/matio/releases/tag/v1.5.18
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 17 2020 Gwyn Ciesla <gwync(a)protonmail.com> - 1.5.18-1
- 1.5.18
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1769546 - CVE-2019-17533 matio: improper null termination in
Mat_VarReadNextInfo4 in mat4.c leads to heap-based overflow [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1769546
[ 2 ] Bug #1769548 - CVE-2019-17533 matio: improper null termination in
Mat_VarReadNextInfo4 in mat4.c leads to heap-based overflow [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1769548
[ 3 ] Bug #1769550 - CVE-2019-17533 matio: improper null termination in
Mat_VarReadNextInfo4 in mat4.c leads to heap-based overflow [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1769550
[ 4 ] Bug #1792008 - CVE-2019-20019 matio: excessive memory allocation in Mat_VarRead5
in mat5.c [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1792008
[ 5 ] Bug #1792009 - CVE-2019-20019 matio: excessive memory allocation in Mat_VarRead5
in mat5.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1792009
[ 6 ] Bug #1792295 - CVE-2019-20020 matio: stack-based buffer overflow in
ReadNextStructField in mat5.c [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1792295
[ 7 ] Bug #1792296 - CVE-2019-20020 matio: stack-based buffer overflow in
ReadNextStructField in mat5.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1792296
[ 8 ] Bug #1792301 - CVE-2019-20018 matio: stack-based buffer overflow in ReadNextCell
in mat5.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1792301
[ 9 ] Bug #1792303 - CVE-2019-20018 matio: stack-based buffer overflow in ReadNextCell
in mat5.c [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1792303
[ 10 ] Bug #1792333 - CVE-2019-20017 matio: stack-based buffer overflow in
Mat_VarReadNextInfo5 in mat5.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1792333
[ 11 ] Bug #1792336 - CVE-2019-20017 matio: stack-based buffer overflow in
Mat_VarReadNextInfo5 in mat5.c [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1792336
[ 12 ] Bug #1794726 - CVE-2019-20052 matio: memory leak in Mat_VarCalloc in mat.c
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1794726
[ 13 ] Bug #1794727 - CVE-2019-20052 matio: memory leak in Mat_VarCalloc in mat.c
[epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1794727
[ 14 ] Bug #1880167 - matio-1.5.18 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1880167
--------------------------------------------------------------------------------
================================================================================
mellowplayer-3.6.6-1.fc32 (FEDORA-2020-a2dbab8bda)
Cloud music integration for your desktop
--------------------------------------------------------------------------------
Update Information:
Update to 3.6.6-1
--------------------------------------------------------------------------------
ChangeLog:
* Fri Sep 18 2020 Martin Gansser <martinkg(a)fedoraproject.org> - 3.6.6-1
- Update to 3.6.6
--------------------------------------------------------------------------------
================================================================================
mesa-20.1.8-1.fc32 (FEDORA-2020-e97591a389)
Mesa graphics libraries
--------------------------------------------------------------------------------
Update Information:
Update to 20.1.8
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 17 2020 Pete Walter <pwalter(a)fedoraproject.org> - 20.1.8-1
- Update to 20.1.8
--------------------------------------------------------------------------------
================================================================================
metamath-0.193-1.fc32 (FEDORA-2020-5a6676033e)
Construct mathematics from basic axioms
--------------------------------------------------------------------------------
Update Information:
Changes in version 0.193: - Make the output of /EXTRACT stable in the sense
that, with the same <label-list> parameter, extract(extract(file)) =
extract(file) except that the date stamp at the top will be updated. (The first
extraction even if "*" will usually be different because it discards non-
relevant content. Note that the include file directives "$( $[ Begin..." etc.
and comments with "$j" are currently discarded.) - Update set.mm to 12 Sep 2020
version
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 17 2020 Jerry James <loganjerry(a)gmail.com> - 0.193-1
- Version 0.193
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1878534 - metamath-0.193 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1878534
--------------------------------------------------------------------------------
================================================================================
nodejs-12.18.4-1.fc32 (FEDORA-2020-eb942ee0db)
JavaScript runtime
--------------------------------------------------------------------------------
Update Information:
Update to Node.js 12.18.4 September 2020 security release -
https://nodejs.org/en/blog/vulnerability/september-2020-security-releases/
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 16 2020 Stephen Gallagher <sgallagh(a)redhat.com> - 1:12.18.4-1
- Update to 12.18.4
--------------------------------------------------------------------------------
================================================================================
nwg-launchers-0.3.4-1.fc32 (FEDORA-2020-4117e8283b)
GTK-based launchers for sway and other window managers
--------------------------------------------------------------------------------
Update Information:
Initial import (#1878898)
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1878898 - Review Request: nwg-launchers - GTK-based launchers for sway and
other window managers
https://bugzilla.redhat.com/show_bug.cgi?id=1878898
--------------------------------------------------------------------------------
================================================================================
perl-DBD-Mock-1.57-1.fc32 (FEDORA-2020-04589065e3)
Mock database driver for testing
--------------------------------------------------------------------------------
Update Information:
This release applies patches that Fedora has already carried. We only deliver it
to provide an up-to-date version string. ---- This release can now mock a
last_insert_id value in the results sets.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Sep 18 2020 Petr Pisar <ppisar(a)redhat.com> - 1.57-1
- 1.57 bump
* Fri Sep 18 2020 Petr Pisar <ppisar(a)redhat.com> - 1.56-1
- 1.56 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1880040 - perl-DBD-Mock-1.56 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1880040
[ 2 ] Bug #1880278 - perl-DBD-Mock-1.57 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1880278
--------------------------------------------------------------------------------
================================================================================
php-phpdocumentor-reflection-docblock5-5.2.2-1.fc32 (FEDORA-2020-ff46565afe)
DocBlock parser
--------------------------------------------------------------------------------
Update Information:
**Version 5.2.2** **Fixed** * Update Link.php #239, thanks to @Kasp42 *
Param: fix phpdoc with reference hint #253, thanks to @voku * Do not resolve
types if it's not possible #254, thanks to @voku
--------------------------------------------------------------------------------
ChangeLog:
* Fri Sep 18 2020 Remi Collet <remi(a)remirepo.net> - 5.2.2-1
- update to 5.2.2
--------------------------------------------------------------------------------
================================================================================
php-phpunit-php-code-coverage9-9.1.10-1.fc32 (FEDORA-2020-5d4fa8d149)
PHP code coverage information
--------------------------------------------------------------------------------
Update Information:
**Version 9.1.10** - 2020-09-18 **Added** *
`SebastianBergmann\CodeCoverage\Driver\Selector::forLineCoverage()` and
`SebastianBergmann\CodeCoverage\Driver\Selector::forLineAndPathCoverage()` have
been added **Fixed** * [#810](https://github.com/sebastianbergmann/php-code-
coverage/issues/810):
`SebastianBergmann\CodeCoverage\Driver\Driver::forLineCoverage()` and
`SebastianBergmann\CodeCoverage\Driver\Driver::forLineAndPathCoverage()` are
marked as internal **Removed** *
`SebastianBergmann\CodeCoverage\Driver\Driver::forLineCoverage()` and
`SebastianBergmann\CodeCoverage\Driver\Driver::forLineAndPathCoverage()` are now
deprecated ---- **Version 9.1.9** - 2020-09-15 **Fixed** *
[#808](https://github.com/sebastianbergmann/php-code-coverage/issues/808): `PHP
Warning: Use of undefined constant T_MATCH`
--------------------------------------------------------------------------------
ChangeLog:
* Fri Sep 18 2020 Remi Collet <remi(a)remirepo.net> - 9.1.10-1
- update to 9.1.10
* Tue Sep 15 2020 Remi Collet <remi(a)remirepo.net> - 9.1.9-1
- update to 9.1.9
--------------------------------------------------------------------------------
================================================================================
pipewire-0.3.12-1.fc32 (FEDORA-2020-34d6d674be)
Media Sharing Server
--------------------------------------------------------------------------------
Update Information:
Update to 0.3.12
--------------------------------------------------------------------------------
ChangeLog:
* Fri Sep 18 2020 Wim Taymans <wtaymans(a)redhat.com> - 0.3.12-1
- Update to 0.3.12
--------------------------------------------------------------------------------
================================================================================
pocl-1.5-3.fc32 (FEDORA-2020-a2a54c0ec1)
Portable Computing Language - an OpenCL implementation
--------------------------------------------------------------------------------
Update Information:
Update to LLVM 10.0.1 ---- LLVM 10.0.1
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 27 2020 sguelton(a)redhat.com - 1.5-3
- rebuilt for llvm 10.0.1
--------------------------------------------------------------------------------
================================================================================
python-accuweather-0.0.10-1.fc32 (FEDORA-2020-f891a02b3d)
Python wrapper for getting data from AccuWeather servers
--------------------------------------------------------------------------------
Update Information:
Initial package for Fedora
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
python-afsapi-0.0.4-1.fc32 (FEDORA-2020-95044a03f0)
Python wrapper for the Frontier Silicon API
--------------------------------------------------------------------------------
Update Information:
Initial package for Fedora
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
python-jsonref-0.2-1.fc32 (FEDORA-2020-06f47a41c0)
An implementation of JSON Reference for Python
--------------------------------------------------------------------------------
Update Information:
Initial package.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1878971 - Review Request: python-jsonref - An implementation of JSON
Reference for Python
https://bugzilla.redhat.com/show_bug.cgi?id=1878971
--------------------------------------------------------------------------------
================================================================================
python-spnego-0.1.1-2.fc32 (FEDORA-2020-28c61c7ba5)
Windows Negotiate Authentication Client and Server
--------------------------------------------------------------------------------
Update Information:
Add missing BR (rhbz#1876588)
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
python39-3.9.0~rc2-1.fc32 (FEDORA-2020-3269e28ca9)
Version 3.9 of the Python interpreter
--------------------------------------------------------------------------------
Update Information:
This is the second release candidate of Python 3.9 This release,
[
3.9.0rc2](https://www.python.org/downloads/release/python-390rc2/), is the last
preview before the final release of Python 3.9.0 on 2020-10-05. In the mean
time, we strongly encourage maintainers of third-party Python projects to
prepare their projects for 3.9 compatibility during this phase. As always,
report any issues.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 17 2020 Miro Hron��ok <mhroncok(a)redhat.com> - 3.9.0~rc2-1
- Update to 3.9.0rc2
--------------------------------------------------------------------------------
================================================================================
rsyslog-8.2008.0-2.fc32 (FEDORA-2020-f7d61979bd)
Enhanced system logging and kernel message trapping daemon
--------------------------------------------------------------------------------
Update Information:
- rsyslog rebase to latest upstream version resolves: #1829092 resolves:
#1823862 resolves: #1876773 - librdkafka rebase to latest upstream version
resolves: #1818082 - librelp rebase to latest upstream version resolves:
#1826269
--------------------------------------------------------------------------------
ChangeLog:
* Fri Sep 18 2020 Attila Lakatos <alakatos(a)redhat.com> - 8.2008.0-2
- rebuild rsyslog
* Thu Sep 17 2020 Attila Lakatos <alakatos(a)redhat.com> - 8.2008.0-1
- rebase to upstream version 8.2008.0
resolves: rhbz#1829092
resolves: rhbz#1823862
resolves: rhbz#1876773
- add service file back(upstream does not ship it anymore)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1818082 - librdkafka-1.5.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1818082
[ 2 ] Bug #1823862 - Invalid configuration in RPM
https://bugzilla.redhat.com/show_bug.cgi?id=1823862
[ 3 ] Bug #1826269 - librelp-1.7.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1826269
[ 4 ] Bug #1829092 - rsyslog-8.2008.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1829092
[ 5 ] Bug #1876773 - F33FailsToInstall: rsyslog-snmp
https://bugzilla.redhat.com/show_bug.cgi?id=1876773
--------------------------------------------------------------------------------
================================================================================
xtb-6.3.3-1.fc32 (FEDORA-2020-c195bbef81)
Semiempirical Extended Tight-Binding Program Package
--------------------------------------------------------------------------------
Update Information:
Maintenance and bugfix update to version 6.3.3, see full changelog at
https://github.com/grimme-lab/xtb/releases/tag/v6.3.3
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 17 2020 Susi Lehtola <jussilehtola(a)fedoraproject.org> - 6.3.3-1
- Update to 6.3.3.
* Sun Aug 16 2020 I��aki ��car <iucar(a)fedoraproject.org> - 6.3.2-2
-
https://fedoraproject.org/wiki/Changes/FlexiBLAS_as_BLAS/LAPACK_manager
* Wed Aug 5 2020 Susi Lehtola <jussilehtola(a)fedoraproject.org> - 6.3.2-1
- Update to 6.3.2.
* Sat Aug 1 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.3.1-7
- Second attempt - Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Wed Jul 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.3.1-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1880108 - xtb-6.3.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1880108
--------------------------------------------------------------------------------
================================================================================
yadifa-2.3.10-1.fc32 (FEDORA-2020-2570b6ad49)
Lightweight authoritative Name Server with DNSSEC capabilities
--------------------------------------------------------------------------------
Update Information:
20200915: YADIFA 2.3.10 - Added an autogen.sh script, as we did for
YADIFA 2.4.x - Fixes an issue with IPv6 aliases. - Fixes an issue
that would happen when building with a gcc version 10 or above. - Fixes
an issue with FreeBSD aliases. - Fixes an issue with strncpy on FreeBSD.
- Fixes an issue with CNAME queries incorrectly answered with an error
code.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 17 2020 Denis Fateyev <denis(a)fateyev.com> - 2.3.10-1
- Update to 2.3.10 release
* Wed Jul 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.3.9-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1879172 - yadifa-2.3.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1879172
--------------------------------------------------------------------------------