The following Fedora 32 Security updates need testing:
Age URL
68
https://bodhi.fedoraproject.org/updates/FEDORA-2020-1f643c272c libntlm-1.6-1.fc32
21
https://bodhi.fedoraproject.org/updates/FEDORA-2020-d32853a28d
mingw-openjpeg2-2.3.1-11.fc32 openjpeg2-2.3.1-10.fc32
20
https://bodhi.fedoraproject.org/updates/FEDORA-2020-307946cfb6
python-lxml-4.4.1-5.fc32
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-ccb8a9c403
golang-github-containernetworking-plugins-0.9.0-1.fc32
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-a5570c5281
sympa-6.2.60-1.fc32
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-2cb0643316
roundcubemail-1.4.10-1.fc32
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-ca0e53d310 php-7.4.14-1.fc32
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-03bcfa3491
golang-github-docker-credential-helpers-0.6.3-2.fc32
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-9316ee2948
golang-github-russellhaering-goxmldsig-1.1.0-1.fc32
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-24ef21134b adplug-2.3.3-1.fc32
audacious-plugins-3.10.1-7.fc32 ocp-0.1.22-0.28.git849cc42.fc32
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-d5b2c18fe6
nodejs-12.20.1-1.fc32
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-154a1b4c19
dovecot-2.3.13-1.fc32
The following Fedora 32 Critical Path updates have yet to be approved:
Age URL
188
https://bodhi.fedoraproject.org/updates/FEDORA-2020-ebbe0f7b25 cpio-2.13-6.fc32
41
https://bodhi.fedoraproject.org/updates/FEDORA-2020-e49210967b dnf-4.4.2-1.fc32
libdnf-0.55.0-3.fc32 microdnf-3.5.1-1.fc32
36
https://bodhi.fedoraproject.org/updates/FEDORA-2020-e3cff2530e koji-1.23.0-2.fc32
28
https://bodhi.fedoraproject.org/updates/FEDORA-2020-345d2fd2aa
iproute-5.9.0-1.fc32
21
https://bodhi.fedoraproject.org/updates/FEDORA-2020-d32853a28d
mingw-openjpeg2-2.3.1-11.fc32 openjpeg2-2.3.1-10.fc32
16
https://bodhi.fedoraproject.org/updates/FEDORA-2020-d4c4f04447
ethtool-5.10-1.fc32
12
https://bodhi.fedoraproject.org/updates/FEDORA-2020-66d135ac1f
python3-3.8.7-1.fc32 python3-docs-3.8.7-1.fc32
10
https://bodhi.fedoraproject.org/updates/FEDORA-2020-726021f11f
libburn-1.5.2-4.fc32
8
https://bodhi.fedoraproject.org/updates/FEDORA-2020-43e9e3abbe
tzdata-2020f-1.fc32
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-50c22ae8fd
lua-socket-3.0-0.27.rc1.fc32
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-6aba9c3436
perl-libnet-3.13-1.fc32
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-f36298d6e0
libtiff-4.1.0-3.fc32
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-8907efd76e
switcheroo-control-2.4-1.fc32
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-616abd3e65
keyutils-1.6.1-1.fc32
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-c737118abd
perl-Socket-2.031-1.fc32
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-3a21976a89
libguestfs-1.44.0-1.fc32
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-2297dddc0f
hwdata-0.343-1.fc32
The following builds have been pushed to Fedora 32 updates-testing
bottles-2.0.9.7-1.fc32
cockpit-235-1.fc32
cockpit-podman-27.1-1.fc32
dovecot-2.3.13-2.fc32
egl-wayland-1.1.6-1.fc32
lollypop-1.4.8-1.fc32
minigalaxy-1.0.1-1.fc32
perl-Gtk2-GladeXML-1.008-1.fc32
perl-Gtk2-Spell-1.05-1.fc32
php-laminas-validator-2.13.5-1.fc32
polybar-3.5.4-1.fc32
python-cairosvg-2.4.2-4.fc32
python-ogr-0.19.0-1.fc32
standard-test-roles-4.10-1.fc32
switchboard-plug-bluetooth-2.3.4-1.fc32
switchboard-plug-sound-2.2.6-1.fc32
wingpanel-indicator-bluetooth-2.1.6-1.fc32
wingpanel-indicator-keyboard-2.3.0-1.fc32
wingpanel-indicator-sound-2.1.8-1.fc32
zimg-3.0.1-2.fc32
Details about builds:
================================================================================
bottles-2.0.9.7-1.fc32 (FEDORA-2021-0c8295842d)
Easily manage Wine prefix in a new way
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1913786 - Review Request: bottles - Easily manage Wine prefix in a new way
https://bugzilla.redhat.com/show_bug.cgi?id=1913786
--------------------------------------------------------------------------------
================================================================================
cockpit-235-1.fc32 (FEDORA-2021-ef799c5b6b)
Web Console for Linux servers
--------------------------------------------------------------------------------
Update Information:
- Login: Improved handling of SSH host keys - Overview: Editable motd
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 7 2021 Martin Pitt <mpitt(a)redhat.com> - 235-1
- Login: Improved handling of SSH host keys
- Overview: Editable motd
--------------------------------------------------------------------------------
================================================================================
cockpit-podman-27.1-1.fc32 (FEDORA-2021-189c929a3c)
Cockpit component for Podman containers
--------------------------------------------------------------------------------
Update Information:
- test: Drop forgotten sit() to make tests work in gating ---- - images:
Indicate that force deletion is in progress - images: Fix handling of errors on
pull - Use packaged sassc instead of node-sass - tests: Adjust to new Podman
versions and robustify them
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 7 2021 Matej Marusak <mmarusak(a)redhat.com> - 27.1-1
- test: Drop forgotten sit() to make tests work in gating
* Thu Jan 7 2021 Matej Marusak <mmarusak(a)redhat.com> - 27-1
- images: Indicate that force deletion is in progress
- images: Fix handling of errors on pull
- Use packaged sassc instead of node-sass
- tests: Adjust to new Podman versions and robustify them
--------------------------------------------------------------------------------
================================================================================
dovecot-2.3.13-2.fc32 (FEDORA-2021-c90cb486f7)
Secure imap and pop3 server
--------------------------------------------------------------------------------
Update Information:
fix rundir location
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 7 2021 Michal Hlavinka <mhlavink(a)redhat.com> - 1:2.3.13-2
- fix rundir location
* Wed Jan 6 2021 Michal Hlavinka <mhlavink(a)redhat.com> - 1:2.3.13-1
- fix release number
* Mon Jan 4 2021 Michal Hlavinka <mhlavink(a)redhat.com> - 1:2.3.13-0
- dovecot updated to 2.3.13, pigeonhole to 0.5.13
- CVE-2020-24386: Specially crafted command can cause IMAP hibernate to
allow logged in user to access other people's emails and filesystem
information.
- Metric filter and global event filter variable syntax changed to a
SQL-like format.
- auth: Added new aliases for %{variables}. Usage of the old ones is
possible, but discouraged.
- auth: Removed RPA auth mechanism, SKEY auth mechanism, NTLM auth
mechanism and related password schemes.
- auth: Removed passdb-sia, passdb-vpopmail and userdb-vpopmail.
- auth: Removed postfix postmap socket
* Wed Oct 21 2020 Michal Hlavinka <mhlavink(a)redhat.com> - 1:2.3.11.3-7
- change run directory from /var/run to /run (#1777922)
* Wed Oct 21 2020 Michal Hlavinka <mhlavink(a)redhat.com> - 1:2.3.11.3-6
- use bigger default key size (#1882939)
--------------------------------------------------------------------------------
================================================================================
egl-wayland-1.1.6-1.fc32 (FEDORA-2021-d13c046c14)
Wayland EGL External Platform library
--------------------------------------------------------------------------------
Update Information:
- Update to 1.1.6
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 7 2021 Leigh Scott <leigh123linux(a)gmail.com> - 1.1.6-1
- Update to 1.1.6
--------------------------------------------------------------------------------
================================================================================
lollypop-1.4.8-1.fc32 (FEDORA-2021-241cdeaf2f)
Music player for GNOME
--------------------------------------------------------------------------------
Update Information:
Update to 1.4.8
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 7 2021 Martin Gansser <martinkg(a)fedoraproject.org> - 1.4.8-1
- Update to 1.4.8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1913746 - lollypop-1.4.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1913746
--------------------------------------------------------------------------------
================================================================================
minigalaxy-1.0.1-1.fc32 (FEDORA-2021-280bcd3302)
GOG client for Linux that lets you download and play your GOG Linux games
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 7 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 1.0.1-1
- build(update): 1.0.1
--------------------------------------------------------------------------------
================================================================================
perl-Gtk2-GladeXML-1.008-1.fc32 (FEDORA-2021-d4ee279c31)
Create user interfaces directly from Glade XML files (deprecated)
--------------------------------------------------------------------------------
Update Information:
This release updates a documentation.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 7 2021 Petr Pisar <ppisar(a)redhat.com> - 1.008-1
- 1.008 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1913558 - perl-Gtk2-GladeXML-1.008 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1913558
--------------------------------------------------------------------------------
================================================================================
perl-Gtk2-Spell-1.05-1.fc32 (FEDORA-2021-1a96ec4758)
Gtk2::Spell Perl module (deprecated)
--------------------------------------------------------------------------------
Update Information:
This release updates a documentation.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 7 2021 Petr Pisar <ppisar(a)redhat.com> - 1.05-1
- 1.05 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1913574 - perl-Gtk2-Spell-1.05 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1913574
--------------------------------------------------------------------------------
================================================================================
php-laminas-validator-2.13.5-1.fc32 (FEDORA-2021-9c122424c7)
Laminas Framework Validator component
--------------------------------------------------------------------------------
Update Information:
**Version 2.13.5** - 2021-01-06 Bug - [68: Remove duplicate keys in
ValidatorPluginManager::factories](https://github.com/laminas/laminas-
validator/pull/68) thanks to @samsonasik - [67: Possible fixes #8 compilation
failed regex too
large](https://github.com/laminas/laminas-validator/pull/67)
thanks to @samsonasik - [62: qa: Replace array by data providers in unit
tests](https://github.com/laminas/laminas-validator/pull/62) thanks to @codisart
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 7 2021 Remi Collet <remi(a)remirepo.net> - 2.13.5-1
- update to 2.13.5
--------------------------------------------------------------------------------
================================================================================
polybar-3.5.4-1.fc32 (FEDORA-2021-0987f563ad)
Fast and easy-to-use status bar
--------------------------------------------------------------------------------
Update Information:
Update to 3.5.4
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 7 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 3.5.4-1
- build(update): 3.5.4
--------------------------------------------------------------------------------
================================================================================
python-cairosvg-2.4.2-4.fc32 (FEDORA-2021-8537865fb5)
A Simple SVG Converter for Cairo
--------------------------------------------------------------------------------
Update Information:
security fix for GHSA-hq37-853p-g5cf: "Regular Expression Denial of Service
(REDoS)", rated as "moderate severity" published 17 hours ago by liZe
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 6 2021 Felix Schwarz <fschwarz(a)fedoraproject.org> - 2.4.2-4
- add fix for GHSA-hq37-853p-g5cf
--------------------------------------------------------------------------------
================================================================================
python-ogr-0.19.0-1.fc32 (FEDORA-2021-d2d5ce4c2b)
One API for multiple git forges
--------------------------------------------------------------------------------
Update Information:
New upstream release: 0.19.0
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 7 2021 Packit Service <user-cont-team+packit-service(a)redhat.com> -
0.19.0-1
- Add and implement `GitProject.default_branch` property, by
[@jpopelka](https://github.com/jpopelka),
[#515](https://github.com/packit-service/ogr/pull/515)
- All git forges support changing of a default branch of a repo/project. All newly
created Github projects have had 'main' as a default branch instead of
'master' [since October
2020](https://docs.github.com/en/free-pro-team@latest/github/administerin....
- PagureService: Make retries parametrizable via `max_retries` argument, by
[@csomh](https://github.com/csomh),
[#514](https://github.com/packit-service/ogr/pull/514)
- This way users of a PagureService object can control how failures of API calls are
retried.
--------------------------------------------------------------------------------
================================================================================
standard-test-roles-4.10-1.fc32 (FEDORA-2021-3bf39b0d4b)
Standard Test Interface Ansible roles
--------------------------------------------------------------------------------
Update Information:
Update to 4.10
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 7 2021 Andrei Stepanov <astepano(a)redhat.com> - 4.10-1
- Build with the latest merged PRs.
--------------------------------------------------------------------------------
================================================================================
switchboard-plug-bluetooth-2.3.4-1.fc32 (FEDORA-2021-198a8cc63b)
Switchboard Bluetooth plug
--------------------------------------------------------------------------------
Update Information:
Update to version 2.3.4. Release notes:
https://github.com/elementary/switchboard-plug-bluetooth/releases/tag/2.3.4
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 7 2021 Fabio Valentini <decathorpe(a)gmail.com> - 2.3.4-1
- Update to version 2.3.4.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1913114 - switchboard-plug-bluetooth-2.3.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1913114
--------------------------------------------------------------------------------
================================================================================
switchboard-plug-sound-2.2.6-1.fc32 (FEDORA-2021-5d88944131)
Switchboard Sound Plug
--------------------------------------------------------------------------------
Update Information:
Update to version 2.2.6. Release notes:
https://github.com/elementary/switchboard-plug-sound/releases/tag/2.2.6
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 7 2021 Fabio Valentini <decathorpe(a)gmail.com> - 2.2.6-1
- Update to version 2.2.6.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1913115 - switchboard-plug-sound-2.2.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1913115
--------------------------------------------------------------------------------
================================================================================
wingpanel-indicator-bluetooth-2.1.6-1.fc32 (FEDORA-2021-06bc1676e7)
Bluetooth Indicator for wingpanel
--------------------------------------------------------------------------------
Update Information:
Update to version 2.1.6. Release notes:
https://github.com/elementary/wingpanel-indicator-bluetooth/releases/tag/...
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 7 2021 Fabio Valentini <decathorpe(a)gmail.com> - 2.1.6-1
- Update to version 2.1.6.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1913124 - wingpanel-indicator-bluetooth-2.1.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1913124
--------------------------------------------------------------------------------
================================================================================
wingpanel-indicator-keyboard-2.3.0-1.fc32 (FEDORA-2021-40d68e6c16)
Keyboard Indicator for wingpanel
--------------------------------------------------------------------------------
Update Information:
Update to version 2.3.0. Release notes:
https://github.com/elementary/wingpanel-indicator-keyboard/releases/tag/2...
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 7 2021 Fabio Valentini <decathorpe(a)gmail.com> - 2.3.0-1
- Update to version 2.3.0.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1913125 - wingpanel-indicator-keyboard-2.3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1913125
--------------------------------------------------------------------------------
================================================================================
wingpanel-indicator-sound-2.1.8-1.fc32 (FEDORA-2021-9cf20eca6f)
Sound Indicator for wingpanel
--------------------------------------------------------------------------------
Update Information:
Update to version 2.1.8. Release notes:
https://github.com/elementary/wingpanel-indicator-sound/releases/tag/2.1.8
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 7 2021 Fabio Valentini <decathorpe(a)gmail.com> - 2.1.8-1
- Update to version 2.1.8.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1913126 - wingpanel-indicator-sound-2.1.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1913126
--------------------------------------------------------------------------------
================================================================================
zimg-3.0.1-2.fc32 (FEDORA-2021-780222e6dd)
Scaling, color space conversion, and dithering library
--------------------------------------------------------------------------------
Update Information:
Bugfix release, Neon support.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 7 2021 Simone Caronni <negativo17(a)gmail.com> - 3.0.1-2
- Fix build on armv7hl.
* Sat Jan 2 2021 Simone Caronni <negativo17(a)gmail.com> - 3.0.1-1
- Update to 3.0.1.
* Wed Jul 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.9.3-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1911947 - Current version of zimg (2.9.3) causes a failure with MPV when
using the 'image' video output
https://bugzilla.redhat.com/show_bug.cgi?id=1911947
--------------------------------------------------------------------------------