The following Fedora 32 Security updates need testing:
Age URL
88
https://bodhi.fedoraproject.org/updates/FEDORA-2021-4c8458e373
containernetworking-plugins-0.9.1-1.fc32
84
https://bodhi.fedoraproject.org/updates/FEDORA-2021-16d1596c42
buildah-1.19.4-1.fc32
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-7026246ea9
samba-4.12.15-0.fc32
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-aa993dd633
sympa-6.2.62-1.fc32
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-0337384e41
python-markdown2-2.4.0-1.fc32
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-57540ff4ad
libopenmpt-0.4.20-1.fc32
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-be95e017e7
cups-2.3.3op2-5.fc32
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-7e2a143808 babel-2.8.0-4.fc32
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-158a237d4a bind-9.11.31-1.fc32
bind-dyndb-ldap-11.3-6.fc32 dnsperf-2.3.4-6.fc32
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-ff893e12c5
chromium-90.0.4430.93-1.fc32
The following Fedora 32 Critical Path updates have yet to be approved:
Age URL
145
https://bodhi.fedoraproject.org/updates/FEDORA-2020-345d2fd2aa
iproute-5.9.0-1.fc32
12
https://bodhi.fedoraproject.org/updates/FEDORA-2021-2e33c3908d
evolution-data-server-3.36.5-2.fc32
11
https://bodhi.fedoraproject.org/updates/FEDORA-2021-4cc9c81077
gnome-online-accounts-3.36.1-1.fc32
9
https://bodhi.fedoraproject.org/updates/FEDORA-2021-426ec216b2 annobin-9.27-3.fc32
gcc-10.3.1-1.fc32
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-2efb16d06b pungi-4.2.9-1.fc32
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-6efbebaf08
gnome-software-3.36.1-4.fc32
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-bdf471bdb7
ethtool-5.12-1.fc32
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-2650a24eec
libxcrypt-4.4.20-2.fc32
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-48cbf6634d
firefox-88.0-7.fc32
The following builds have been pushed to Fedora 32 updates-testing
R-4.0.5-1.fc32
ansible-2.9.21-1.fc32
centos-packager-0.7.0-6.fc32
chatterino2-2.3.1-1.fc32
community-mysql-8.0.24-1.fc32
djvulibre-3.5.27-25.fc32
gxkb-0.9.2-1.fc32
hwdata-0.347-1.fc32
kernel-5.11.18-100.fc32
libmodulemd-2.12.1-1.fc32
mysql-selinux-1.0.4-2.fc32
openttd-1.11.2-1.fc32
php-7.4.19-1.fc32
python-nashpy-0.0.23-2.fc32
python-tkrzw-0.1.6-1.fc32
rkward-0.7.2-3.fc32
rpy-3.4.2-4.fc32
thunderbird-78.10.1-1.fc32
Details about builds:
================================================================================
R-4.0.5-1.fc32 (FEDORA-2021-8a0f5ff041)
A language for data analysis and graphics
--------------------------------------------------------------------------------
Update Information:
Update R to 4.0.5. rpy & rkward rebuilt to match where needed.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 3 2021 Tom Callaway <spot(a)fedoraproject.org> - 4.0.5-1
- update to 4.0.5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1945341 - R-4.0.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1945341
--------------------------------------------------------------------------------
================================================================================
ansible-2.9.21-1.fc32 (FEDORA-2021-c1f999de93)
SSH-based configuration management, deployment, and task execution system
--------------------------------------------------------------------------------
Update Information:
Update to ansible 2.9.21 with various small fixes to ansible-test.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 3 2021 Kevin Fenzi <kevin(a)scrye.com> - 2.9.21-1
- Update to 2.9.21. Fixes rhbz#1956584
--------------------------------------------------------------------------------
================================================================================
centos-packager-0.7.0-6.fc32 (FEDORA-2021-f7c85ad7ff)
Tools and files necessary for building CentOS packages
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1953690 - Review Request: centos-packager - Tools and files necessary for
building CentOS packages
https://bugzilla.redhat.com/show_bug.cgi?id=1953690
--------------------------------------------------------------------------------
================================================================================
chatterino2-2.3.1-1.fc32 (FEDORA-2021-ea2688af90)
Chat client for twitch.tv
--------------------------------------------------------------------------------
Update Information:
Update to 2.3.1
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 4 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 2.3.1-1
- build(update): 2.3.1
--------------------------------------------------------------------------------
================================================================================
community-mysql-8.0.24-1.fc32 (FEDORA-2021-5b6c69a73a)
MySQL client programs and shared libraries
--------------------------------------------------------------------------------
Update Information:
**MySQL 8.0.24** Release notes:
https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-24.html
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 18 2021 Lars Tangvald <lars.tangvald(a)oracle.com> - 8.0.24-1
- Update to MySQL 8.0.24
* Wed Mar 31 2021 Jonathan Wakely <jwakely(a)redhat.com> - 8.0.23-3
- Rebuilt for removed libstdc++ symbols (#1937698)
* Tue Mar 2 2021 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 8.0.23-2
- Rebuilt for updated systemd-rpm-macros
See
https://pagure.io/fesco/issue/2583.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1951466 - community-mysql-8.0.24 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1951466
[ 2 ] Bug #1951794 - CVE-2021-2146 CVE-2021-2164 CVE-2021-2166 CVE-2021-2169
CVE-2021-2170 CVE-2021-2171 CVE-2021-2172 CVE-2021-2174 CVE-2021-2178 CVE-2021-2179
CVE-2021-2180 CVE-2021-2193 CVE-2021-2194 CVE-2021-2196 ... community-mysql: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1951794
--------------------------------------------------------------------------------
================================================================================
djvulibre-3.5.27-25.fc32 (FEDORA-2021-fcb25df974)
DjVu viewers, encoders, and utilities
--------------------------------------------------------------------------------
Update Information:
This update fixes several issues in djvulibre. These are mostly related to
opening of corrupted files.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 4 2021 Marek Kasik <mkasik(a)redhat.com> - 3.5.27-25
- Fix exporting of djvu icons with Inkscape
- Related: #1863428
* Mon May 3 2021 Marek Kasik <mkasik(a)redhat.com> - 3.5.27-24
- Avoid unsigned short overflow in GBitmap when allocating row buffer
- Resolves: #1943424
* Mon May 3 2021 Marek Kasik <mkasik(a)redhat.com> - 3.5.27-23
- Avoid stack overflow in DjVuPort by remembering which file we are opening
- Resolves: #1943411, #1943685
* Mon May 3 2021 Marek Kasik <mkasik(a)redhat.com> - 3.5.27-22
- Check input pool for NULL
- Resolves: #1943410
* Mon May 3 2021 Marek Kasik <mkasik(a)redhat.com> - 3.5.27-21
- Avoid integer overflow when allocating bitmap
- Resolves: #1943409
* Mon May 3 2021 Marek Kasik <mkasik(a)redhat.com> - 3.5.27-20
- Check image size for 0
- Resolves: #1943408
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1943685 - CVE-2021-3500 djvulibre: Stack overflow in function
DJVU::DjVuDocument::get_djvu_file() via crafted djvu file
https://bugzilla.redhat.com/show_bug.cgi?id=1943685
--------------------------------------------------------------------------------
================================================================================
gxkb-0.9.2-1.fc32 (FEDORA-2021-4d1e9f58ce)
X11 keyboard indicator and switcher
--------------------------------------------------------------------------------
Update Information:
Update to 0.9.2
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 4 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 0.9.2-1
- build(update): 0.9.2
--------------------------------------------------------------------------------
================================================================================
hwdata-0.347-1.fc32 (FEDORA-2021-9e79d2e147)
Hardware identification and configuration data
--------------------------------------------------------------------------------
Update Information:
Update pci and vendor ids
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 3 2021 Vitezslav Crhonek <vcrhonek(a)redhat.com> - 0.347-1
- Update pci and vendor ids
--------------------------------------------------------------------------------
================================================================================
kernel-5.11.18-100.fc32 (FEDORA-2021-bbc2f07ed3)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 5.11.18 stable kernel update contains a number of important fixes across the
tree.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 3 2021 Justin M. Forbes <jforbes(a)fedoraproject.org> [5.11.18-100]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Mathias Krause)
* Mon May 3 2021 Justin M. Forbes <jforbes(a)fedoraproject.org> [5.11.18-0]
- Enable mtdram for fedora (rhbz 1955916) (Justin M. Forbes)
- hardlink is in /usr/bin/ (rhbz 1889043) (Justin M. Forbes)
- sfc: ef10: fix TX queue lookup in TX event handling (Edward Cree)
- sfc: farch: fix TX queue lookup in TX event handling (Edward Cree)
- sfc: farch: fix TX queue lookup in TX flush done handling (Edward Cree)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1953022 - kernel: nitro_enclaves stale file descriptors on failed usercopy
https://bugzilla.redhat.com/show_bug.cgi?id=1953022
--------------------------------------------------------------------------------
================================================================================
libmodulemd-2.12.1-1.fc32 (FEDORA-2021-19cdc5683f)
Module metadata manipulation library
--------------------------------------------------------------------------------
Update Information:
This release relaxes context value up to 13 characters including an underscore
character in modulemd v2 format. This reenables scratch-builds in MBS. It also
improves the tests.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 3 2021 Petr Pisar <ppisar(a)redhat.com> - 2.12.1-1
- 2.12.1 bump
--------------------------------------------------------------------------------
================================================================================
mysql-selinux-1.0.4-2.fc32 (FEDORA-2021-12be24115d)
SELinux policy modules for MySQL and MariaDB packages
--------------------------------------------------------------------------------
Update Information:
Remove setuid/setgid capabilities from mysqld_t type Fix rpm verification
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 21 2021 Lukas Javorsky <ljavorsk(a)redhat.com> - 1.0.4-2
- Fix rpm verification it's a ghost file so it should ignore the error
* Fri Mar 19 2021 Lukas Javorsky <ljavorsk(a)redhat.com> - 1.0.4-1
- Rebase to 1.0.4
- Unintentional removal of semicolon
* Fri Mar 19 2021 Lukas Javorsky <ljavorsk(a)redhat.com> - 1.0.3-1
- Rebase to 1.0.3
- Remove setuid/setgid capabilities from mysqld_t type.
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
openttd-1.11.2-1.fc32 (FEDORA-2021-e798cd86b3)
Transport system simulation game
--------------------------------------------------------------------------------
Update Information:
1.11.2 (2021-05-03)
------------------------------------------------------------------------ Change:
[Win32] Limit hardware accelerated video driver to OpenGL 3.2 or higher (#9077)
Change: More improvements to the GUI at different scales (#9075, #9102, #9107,
#9133, #9174, #9183) Fix: Query windows could be partially drawn (#9184) Fix
#9113: Crash when removing an airport that exists in an aircraft's orders
(#9182) Fix #9117: [Fluidsynth] Hang when changing song (#9181) Fix: String
validation could leave invalid UTF-8 encoded strings (#9096) Fix: [Network]
Out-of-bounds memory access with modified servers sending too short password
salts (#9176) Fix: Crash when extra viewport with zero height has sign in view
(#9175) Fix #9147: Crash when taking screenshots (#9169) Fix #6598: [Network]
Prevent crashes when (re)joining network game by falling back to main menu first
(#9163) Fix #9152: Screenshot success popup window was treated as an error
(#9159) Fix: Fast-forward stuttering when vsync is enabled (#9140) Fix:
[Network, Win32] Network errors were handled badly (#9116) Fix: [Network]
Savegame transfer could stall in rare cases (#9106) Fix #9097: [NewGRF] Cargo
initial payment variable was being truncated (#9098) Fix: [NewGRF] Industry
variable 66 and object variable 46 erroneously truncated the distance (#9088)
Fix: [NewGRF] Industry variables 65 and 66 ignored the parameter, and always
used the north tile (#9088) Fix: Do not include regression test AI in bundle
(#9068, #9164) Fix #9062: [Win32] Version in executable was not set to current
release version (#9066, #9154)
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 4 2021 Felix Kaechele <felix(a)kaechele.ca> - 1.11.2-1
- update to 1.11.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1956614 - openttd-1.11.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1956614
--------------------------------------------------------------------------------
================================================================================
php-7.4.19-1.fc32 (FEDORA-2021-3f9e87aaa4)
PHP scripting language for creating dynamic web sites
--------------------------------------------------------------------------------
Update Information:
**PHP version 7.4.19** (06 May 2021) **PDO_pgsql:** * Reverted bug fix for
php#80892 (PDO::PARAM_INT is treated the same as PDO::PARAM_STR). (Matteo)
---- **PHP version 7.4.18** (29 Apr 2021) **Core:** * Fixed bug php#80781
(Error handler that throws ErrorException infinite loop). (Nikita) * Fixed bug
php#75776 (Flushing streams with compression filter is broken). (cmb) **Dba:**
* Fixed bug php#80817 (dba_popen() may cause segfault during RSHUTDOWN). (cmb)
**DOM:** * Fixed bug php#66783 (UAF when appending DOMDocument to element).
(cmb) **FPM:** * Fixed bug php#80024 (Duplication of info about inherited
socket after pool removing). (Jakub Zelenka) **FTP:** * Fixed bug php#80880
(SSL_read on shutdown, ftp/proc_open). (cmb, Jakub Zelenka) **Imap:** * Fixed
bug php#80710 (imap_mail_compose() header injection). (cmb, Stas) **Intl:** *
Fixed bug php#80763 (msgfmt_format() does not accept DateTime references). (cmb)
**LibXML:** * Fixed bug php#51903 (simplexml_load_file() doesn't use HTTP
headers). (cmb) * Fixed bug php#73533 (Invalid memory access in
php_libxml_xmlCheckUTF8). (cmb) **MySQLnd:** * Fixed bug php#80713 (SegFault
when disabling ATTR_EMULATE_PREPARES and MySQL 8.0). (Nikita) * Fixed bug
php#80837 (Calling stmt_store_result after fetch doesn't throw an error). (Kamil
Tekiela) **Opcache:** * Fixed bug php#80805 (create simple class and get error
in opcache.so). (Nikita) * Fixed bug php#80950 (Variables become null in if
statements). (Nikita) **Pcntl:** * Fixed bug php#79812 (Potential integer
overflow in pcntl_exec()). (cmb) **PCRE:** * Fixed bug php#80866 (preg_split
ignores limit flag when pattern with \K has 0-width fullstring match). (Kamil
Tekiela) **PDO_ODBC:** * Fixed bug php#80783 (PDO ODBC truncates BLOB records
at every 256th byte). (cmb) **PDO_pgsql:** * Fixed bug php#80892
(PDO::PARAM_INT is treated the same as PDO::PARAM_STR). (Matteo) **phpdbg:** *
Fixed bug php#80757 (Exit code is 0 when could not open file). (Felipe)
**Session:** * Fixed bug php#80774 (session_name() problem with backslash).
(cmb) * Fixed bug php#80889 (Cannot set save handler when save_handler is
invalid). (cmb) **SOAP:** * Fixed bug php#69668 (SOAP special XML characters
in namespace URIs not encoded). (cmb) **Standard:** * Fixed bug php#78719
(http wrapper silently ignores long Location headers). (cmb) * Fixed bug
php#80771 (phpinfo(INFO_CREDITS) displays nothing in CLI). (cmb) * Fixed bug
php#80838 (HTTP wrapper waits for HTTP 1 response after HTTP 101). (manuelm) *
Fixed bug php#80915 (Taking a reference to $_SERVER hides its values from
phpinfo()). (Rowan Tommins)
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 4 2021 Remi Collet <remi(a)remirepo.net> - 7.4.19-1
- Update to 7.4.19 -
http://www.php.net/releases/7_4_19.php
* Tue Apr 27 2021 Remi Collet <remi(a)remirepo.net> - 7.4.18-1
- Update to 7.4.18 -
http://www.php.net/releases/7_4_18.php
--------------------------------------------------------------------------------
================================================================================
python-nashpy-0.0.23-2.fc32 (FEDORA-2021-9f6469bd22)
A library to compute equilibria of 2 player normal form games
--------------------------------------------------------------------------------
Update Information:
Update to the latest version of package.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 4 2021 Iztok Fister Jr. <iztokf AT fedoraproject DOT org> - 0.0.23-2
- Enhance tests with 'interrogate'
* Tue May 4 2021 Iztok Fister Jr. <iztokf AT fedoraproject DOT org> - 0.0.23-1
- Update to the latest version
- Using pyprojet-rpm (upstream switched to flit)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1956763 - python-nashpy-0.0.23 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1956763
--------------------------------------------------------------------------------
================================================================================
python-tkrzw-0.1.6-1.fc32 (FEDORA-2021-5c9df758e9)
TKRZW Python bindings
--------------------------------------------------------------------------------
Update Information:
Version bump
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 4 2021 TI_Eugene <ti.eugene(a)gmail.com> - 0.1.6-1
- Version bump
--------------------------------------------------------------------------------
================================================================================
rkward-0.7.2-3.fc32 (FEDORA-2021-8a0f5ff041)
Graphical frontend for R language
--------------------------------------------------------------------------------
Update Information:
Update R to 4.0.5. rpy & rkward rebuilt to match where needed.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 4 2021 Tom Callaway <spot(a)fedoraproject.org> - 0.7.2-3
- rebuild for R 4.0.5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1945341 - R-4.0.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1945341
--------------------------------------------------------------------------------
================================================================================
rpy-3.4.2-4.fc32 (FEDORA-2021-8a0f5ff041)
Python interface to the R language
--------------------------------------------------------------------------------
Update Information:
Update R to 4.0.5. rpy & rkward rebuilt to match where needed.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 4 2021 Tom Callaway <spot(a)fedoraproject.org> - 3.4.2-4
- rebuild for R 4.0.5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1945341 - R-4.0.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1945341
--------------------------------------------------------------------------------
================================================================================
thunderbird-78.10.1-1.fc32 (FEDORA-2021-38e1f87ac3)
Mozilla Thunderbird mail/newsgroup client
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream version.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 4 2021 Jan Horak <jhorak(a)redhat.com> - 78.10.1-1
- Update to 78.10.1 build1
* Tue Mar 30 2021 Jonathan Wakely <jwakely(a)redhat.com> - 78.8.1-2
- Rebuilt for removed libstdc++ symbol (#1937698)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1951957 - Thunderbird 78.10.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1951957
--------------------------------------------------------------------------------