The following Fedora 31 Security updates need testing:
Age URL
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b90f48e9aa
chromium-76.0.3809.132-1.fc31
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b20614ff74
pdfresurrect-0.18-1.fc31
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ea638fb605
dovecot-2.3.7.2-1.fc31
The following Fedora 31 Critical Path updates have yet to be approved:
Age URL
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-7438eaf3dd gcc-9.2.1-1.fc31
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d1d58d7148
libcacard-2.7.0-3.fc31
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-130a2b2cd6
policycoreutils-2.9-5.fc31
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-883c54f9e9
dnsmasq-2.80-10.fc31
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e4b6ffd824
rpm-4.15.0-0.rc1.1.fc31
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-55d30d69d3
pcre2-10.33-13.fc31
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-7632c79e6f
fontconfig-2.13.92-3.fc31
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-70af080058
xfce4-settings-4.14.1-2.fc31
0
https://bodhi.fedoraproject.org/updates/FEDORA-2019-4fa6321eaf
uboot-tools-2019.10-0.3.rc3.fc31
The following builds have been pushed to Fedora 31 updates-testing
SDL-1.2.15-42.fc31
cc1541-3.0-2.fc31
crudini-0.9.3-1.fc31
curl-7.65.3-4.fc31
erlang-rpm-macros-0.3.1-1.fc31
fedora-obsolete-packages-31-25
geeqie-1.5.1-1.fc31
igt-gpu-tools-1.24-1.20190830gite62ea30.fc31
irssi-1.2.2-1.fc31
logrotate-3.15.1-1.fc31
mmapper-19.04.0-1.fc31
mu-1.0.2-5.fc31
nbdkit-1.14.0-2.fc31
odfpy-1.4.0-1.fc31
pdns-4.2.0-1.fc31
php-zendframework-zend-diactoros-1.8.7-1.fc31
polymake-3.5-3.fc31
python-cvss-2.0-1.fc31
python-operator-courier-2.1.7-1.fc31
python-timeout-decorator-0.4.1-1.fc31
quisk-4.1.43-1.fc31
salt-2019.2.1rc0-3.fc31
sslsplit-0.5.5-1.fc31
urh-2.7.5-1.fc31
Details about builds:
================================================================================
SDL-1.2.15-42.fc31 (FEDORA-2019-f5558abfef)
A cross-platform multimedia library
--------------------------------------------------------------------------------
Update Information:
This release fixes a heap buffer over-read in BlitNtoN() function when
processing an invalid BMP image.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 30 2019 Petr Pisar <ppisar(a)redhat.com> - 1.2.15-42
- Fix CVE-2019-13616 (a heap buffer over-read in BlitNtoN) (bug #1747237)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1747237 - CVE-2019-13616 SDL: Heap-based buffer over-read in BlitNtoN in
video/SDL_blit_N.c
https://bugzilla.redhat.com/show_bug.cgi?id=1747237
--------------------------------------------------------------------------------
================================================================================
cc1541-3.0-2.fc31 (FEDORA-2019-ceee39ee6c)
Tool for creating Commodore 1541 Floppy disk images in D64, G64, D71 or D81 format
--------------------------------------------------------------------------------
Update Information:
- Bugfix: Filetype and open/protected flags were not reset after a file was
written.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 28 2019 Bj��rn Esser <besser82(a)fedoraproject.org> - 3.0-2
- Add an upstream patch to fix a bug
--------------------------------------------------------------------------------
================================================================================
crudini-0.9.3-1.fc31 (FEDORA-2019-b2a9d454c3)
A utility for manipulating ini files
--------------------------------------------------------------------------------
Update Information:
python 3 support
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 30 2019 P��draig Brady <P(a)draigBrady.com> - 0.9.3-1
- Latest upstream: python 3 support
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1737970 - crudini depends on Python 2
https://bugzilla.redhat.com/show_bug.cgi?id=1737970
--------------------------------------------------------------------------------
================================================================================
curl-7.65.3-4.fc31 (FEDORA-2019-3e417d3ec7)
A utility for getting files from remote servers (FTP, HTTP, and others)
--------------------------------------------------------------------------------
Update Information:
- avoid reporting spurious error in the HTTP2 framing layer (#1690971)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 27 2019 Kamil Dudka <kdudka(a)redhat.com> - 7.65.3-4
- avoid reporting spurious error in the HTTP2 framing layer (#1690971)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1690971 - Curl error (16): Error in the HTTP2 framing layer against fedora
servers
https://bugzilla.redhat.com/show_bug.cgi?id=1690971
--------------------------------------------------------------------------------
================================================================================
erlang-rpm-macros-0.3.1-1.fc31 (FEDORA-2019-cdd96c2958)
Macros for simplifying building of Erlang packages
--------------------------------------------------------------------------------
Update Information:
* Ver. 0.3.1
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 30 2019 Peter Lemenkov <lemenkov(a)gmail.com> - 0.3.1-1
- Ver. 0.3.1
* Fri Aug 30 2019 Peter Lemenkov <lemenkov(a)gmail.com> - 0.3.0-1
- Ver. 0.3.0
* Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.9-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1735190 - erlang-rpm-macros: FTBFS in Fedora rawhide/f31
https://bugzilla.redhat.com/show_bug.cgi?id=1735190
[ 2 ] Bug #1693771 - erlang-rpm-macros: Switch to a string for RPM calls (oncoming rpm
API fix change)
https://bugzilla.redhat.com/show_bug.cgi?id=1693771
--------------------------------------------------------------------------------
================================================================================
fedora-obsolete-packages-31-25 (FEDORA-2019-5ea795d190)
A package to obsolete retired packages
--------------------------------------------------------------------------------
Update Information:
Obsolete python2-cliff, python2-copr, python2-docker, python2-fedmsg,
python2-future, python2-grokmirror, python2-keystoneauth1, python2-markdown,
python2-openstacksdk, python2-pwquality, python2-warlock, system-config-users
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 30 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 31-25
- Obsolete python2-cliff, python2-copr, python2-docker, python2-fedmsg,
python2-future, python2-grokmirror, python2-keystoneauth1, python2-markdown,
python2-openstacksdk, python2-pwquality, python2-warlock, system-config-users
(#1747436)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1747436 - lots of python2 packages should be obsoleted
https://bugzilla.redhat.com/show_bug.cgi?id=1747436
--------------------------------------------------------------------------------
================================================================================
geeqie-1.5.1-1.fc31 (FEDORA-2019-1e0cfd72aa)
Image browser and viewer
--------------------------------------------------------------------------------
Update Information:
New upstream release includes many bugfixes and some small improvements. See
[upstream release
notes](https://github.com/BestImageViewer/geeqie/releases/tag/v1.5) for details.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 30 2019 Matthew Miller <mattdm(a)fedoraproject.org> - 1.5.1-1
- new upstream release
- reenable tiff support
- don't error on the parenthesis warning (reported upstream)
- hey look: none of our patches are needed anymore!
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1530009 - geeqie-1.5.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1530009
--------------------------------------------------------------------------------
================================================================================
igt-gpu-tools-1.24-1.20190830gite62ea30.fc31 (FEDORA-2019-f5654a2999)
Test suite and tools for DRM drivers
--------------------------------------------------------------------------------
Update Information:
New git snapshot
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 30 2019 Lyude Paul <lyude(a)redhat.com> - 1.24-1.20190830gite62ea30
- New git snapshot
* Thu Aug 29 2019 Lyude Paul <lyude(a)redhat.com> - 1.24-1.20190829gitd38950f
- New git snapshot
--------------------------------------------------------------------------------
================================================================================
irssi-1.2.2-1.fc31 (FEDORA-2019-d2257607b8)
Modular text mode IRC client with Perl scripting
--------------------------------------------------------------------------------
Update Information:
This is new version of irssi fixing CVE-2019-15717.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 30 2019 Jaroslav ��karvada <jskarvad(a)redhat.com> - 1.2.2-1
- New version
Resolves: rhbz#1640348
Resolves: CVE-2019-15717
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1747346 - CVE-2019-15717 Irssi: use-after-free if the IRC server sends double
CAP
https://bugzilla.redhat.com/show_bug.cgi?id=1747346
--------------------------------------------------------------------------------
================================================================================
logrotate-3.15.1-1.fc31 (FEDORA-2019-ffca24380e)
Rotates, compresses, removes and mails system log files
--------------------------------------------------------------------------------
Update Information:
- use correct `create` mode in `examples/btmp` - fix several bugs found by
fuzzing - do not abort globbing on a broken symlink - rearrange `logrotate.8`
man page to improve readability - encourage admins to use the `su` directive in
`logrotate.8` man page
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 30 2019 Kamil Dudka <kdudka(a)redhat.com> - 3.15.1-1
- new upstream version 3.15.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1745330 - Logrotate fails to start on F30 (possibly others)
https://bugzilla.redhat.com/show_bug.cgi?id=1745330
--------------------------------------------------------------------------------
================================================================================
mmapper-19.04.0-1.fc31 (FEDORA-2019-30369403b4)
Graphical MUME mapper
--------------------------------------------------------------------------------
Update Information:
mmapper 19.04.0 release. For details, see
https://github.com/MUME/MMapper/releases/tag/v19.04.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 28 2019 Kalev Lember <klember(a)redhat.com> - 19.04.0-1
- Update to 19.04.0
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.8.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
mu-1.0.2-5.fc31 (FEDORA-2019-10e243914b)
A simple Python editor not only for micro:bit
--------------------------------------------------------------------------------
Update Information:
Relax the dependency version restrictions for matplotlib
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 30 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 1.0.2-5
- Relax the dependency version restrictions for matplotlib
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 1.0.2-4
- Rebuilt for Python 3.8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1747415 - mu cannot be installed: nothing provides python3.7dist(matplotlib)
< 3.1 needed by mu-1.0.2-3.fc31
https://bugzilla.redhat.com/show_bug.cgi?id=1747415
--------------------------------------------------------------------------------
================================================================================
nbdkit-1.14.0-2.fc31 (FEDORA-2019-8889ad538b)
NBD server
--------------------------------------------------------------------------------
Update Information:
Split out nbdkit-nbd-plugin subpackage. ---- New upstream version 1.14.0.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 29 2019 Richard W.M. Jones <rjones(a)redhat.com> - 1.14.0-2
- Split out nbdkit-nbd-plugin subpackage.
* Wed Aug 28 2019 Richard W.M. Jones <rjones(a)redhat.com> - 1.14.0-1
- New upstream version 1.14.0.
* Wed Aug 21 2019 Richard W.M. Jones <rjones(a)redhat.com> - 1.13.9-3
- Temporarily kill tests/test-shutdown.sh
* Wed Aug 21 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 1.13.9-2
- Rebuilt for Python 3.8
* Wed Aug 21 2019 Richard W.M. Jones <rjones(a)redhat.com> - 1.13.9-1
- New upstream version 1.13.9.
* Wed Aug 21 2019 Richard W.M. Jones <rjones(a)redhat.com> - 1.13.8-7
- Add provides for all basic plugins and filters.
--------------------------------------------------------------------------------
================================================================================
odfpy-1.4.0-1.fc31 (FEDORA-2019-435330b7c5)
Python library for manipulating OpenDocument files
--------------------------------------------------------------------------------
Update Information:
New upstream release 1.4.0
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 30 2019 Paul W. Frields <stickster(a)gmail.com> - 1.4.0-1
- New upstream release 1.4.0
* Fri Aug 30 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 1.3.4-10
- Subpackage python2-odfpy has been removed
See
https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 1.3.4-9
- Rebuilt for Python 3.8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1744406 - odfpy depends on Python 2
https://bugzilla.redhat.com/show_bug.cgi?id=1744406
--------------------------------------------------------------------------------
================================================================================
pdns-4.2.0-1.fc31 (FEDORA-2019-a395b14ffa)
A modern, advanced and high performance authoritative-only nameserver
--------------------------------------------------------------------------------
Update Information:
- Update to 4.2.0 - Enable LUA records - Enable lua2 backend - Enable luajit -
Enable experimental pkcs11 support - Added ixfrdist subpackage Release notes:
https://doc.powerdns.com/authoritative/changelog/4.2.html#change-4.2.0 Blog
post:
https://blog.powerdns.com/2019/08/30/powerdns-authoritative-server-4-2-0/
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 30 2019 Morten Stevens <mstevens(a)fedoraproject.org> - 4.2.0-1
- Update to 4.2.0
- Enable LUA records
- Enable lua2 backend
- Enable luajit
- Enable experimental pkcs11 support
- Added ixfrdist subpackage
--------------------------------------------------------------------------------
================================================================================
php-zendframework-zend-diactoros-1.8.7-1.fc31 (FEDORA-2019-cadd0e0e2d)
PSR HTTP Message implementations
--------------------------------------------------------------------------------
Update Information:
**Version 1.8.7** - 2019-08-06 **Fixed** -
[#364](https://github.com/zendframework/zend-diactoros/issues/364) modifies
detection of HTTPS schemas via the `$_SERVER['HTTPS']` value such that an
empty HTTPS-key will result in a scheme of `http` and not `https`.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 30 2019 Remi Collet <remi(a)remirepo.net> - 1.8.7-1
- update to 1.8.7
--------------------------------------------------------------------------------
================================================================================
polymake-3.5-3.fc31 (FEDORA-2019-2836bb3ff0)
Algorithms on convex polytopes and polyhedra
--------------------------------------------------------------------------------
Update Information:
Changes in normaliz 3.7.4: - Bug fix for face lattice and f-vector; see
https://github.com/Normaliz/Normaliz/issues/238 See
https://polymake.org/doku.php/news/release_3_5 for changes in polymake 3.5.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 28 2019 Jerry James <loganjerry(a)gmail.com> - 3.5-3
- Bump all of the release numbers and rebuild
* Tue Aug 27 2019 Jerry James <loganjerry(a)gmail.com> - 3.5-2
- Fix permlib-devel R; it is noarch
* Mon Aug 26 2019 Jerry James <loganjerry(a)gmail.com> - 3.5-1
- New upstream version
- Drop upstreamed -tempref patch
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 3.4-7
- Rebuilt for Python 3.8
--------------------------------------------------------------------------------
================================================================================
python-cvss-2.0-1.fc31 (FEDORA-2019-04b8914a21)
CVSS2/3 library with interactive calculator
--------------------------------------------------------------------------------
Update Information:
New release 2.0 with CVSSv3.1 support (rhbz#1747163)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 30 2019 Viliam Krizan <vkrizan(a)redhat.com> - 2.0-1
- New release 2.0 with CVSSv3.1 support (rhbz#1747163)
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 1.10-3
- Rebuilt for Python 3.8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1747163 - python-cvss-2.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747163
--------------------------------------------------------------------------------
================================================================================
python-operator-courier-2.1.7-1.fc31 (FEDORA-2019-bbf2ca31ff)
Library and CLI tool to build, verify and push operator metadata
--------------------------------------------------------------------------------
Update Information:
update to upstream version 2.1.7
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 30 2019 Martin Ba��ti <mbasti(a)redhat.com> - 2.1.7-1
- update to upstream version 2.1.7
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 2.1.5-2
- Rebuilt for Python 3.8
--------------------------------------------------------------------------------
================================================================================
python-timeout-decorator-0.4.1-1.fc31 (FEDORA-2019-c32606c880)
Timeout decorator for Python
--------------------------------------------------------------------------------
Update Information:
Initial packaging
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1746017 - Review Request: python-timeout-decorator - a timeout decorator for
Python
https://bugzilla.redhat.com/show_bug.cgi?id=1746017
--------------------------------------------------------------------------------
================================================================================
quisk-4.1.43-1.fc31 (FEDORA-2019-195c0e4db7)
Software Defined Radio (SDR) software
--------------------------------------------------------------------------------
Update Information:
This is new version of quisk.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 30 2019 Jaroslav ��karvada <jskarvad(a)redhat.com> - 4.1.43-1
- New version
Resolves: rhbz#1747002
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1747002 - quisk-4.1.43 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747002
--------------------------------------------------------------------------------
================================================================================
salt-2019.2.1rc0-3.fc31 (FEDORA-2019-9c589d1716)
A parallel remote execution system
--------------------------------------------------------------------------------
Update Information:
Fixed tornado requirement
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 30 2019 Fedora Release Engineering <releng(a)fedoraproject.org> -
2019.2.1rc0-3
- Fixed tornado requirement
* Fri Aug 30 2019 Fedora Release Engineering <releng(a)fedoraproject.org> -
2019.2.1rc0-2
- Added python3-distro as a requirement
* Thu Aug 29 2019 Fedora Release Engineering <releng(a)fedoraproject.org> -
2019.2.1rc0-1
- Release Candidate 0 for feature release 2019.2.1 for Python 3 with Tornado v5.x support
--------------------------------------------------------------------------------
================================================================================
sslsplit-0.5.5-1.fc31 (FEDORA-2019-79ecb6e5d6)
Transparent and scalable SSL/TLS interception
--------------------------------------------------------------------------------
Update Information:
Resolves: rhbz#1534305 sslsplit-0.5.5 is available ---- Resolves: rhbz#1744466
Please update it to 0.5.4
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 30 2019 Paul Wouters <pwouters(a)redhat.com> - 0.5.5-1
- Resolves: rhbz#1534305 sslsplit-0.5.5 is available
- Enables ecc test
* Thu Aug 22 2019 Paul Wouters <pwouters(a)redhat.com> - 0.5.4-1
- Resolves: rhbz#1744466 Please update it to 0.5.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1534305 - sslsplit-0.5.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1534305
[ 2 ] Bug #1744466 - Please update it it 0.5.4
https://bugzilla.redhat.com/show_bug.cgi?id=1744466
--------------------------------------------------------------------------------
================================================================================
urh-2.7.5-1.fc31 (FEDORA-2019-ffc893c563)
Universal Radio Hacker: investigate wireless protocols like a boss
--------------------------------------------------------------------------------
Update Information:
This is new version of urh.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 30 2019 Jaroslav ��karvada <jskarvad(a)redhat.com> - 2.7.5-1
- New version
Resolves: rhbz#1747017
* Wed Aug 21 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 2.7.4-2
- Rebuilt for Python 3.8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1747017 - urh-2.7.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1747017
--------------------------------------------------------------------------------