The following Fedora 31 Security updates need testing:
Age URL
17
https://bodhi.fedoraproject.org/updates/FEDORA-2020-c5ec22e14f libuv-1.39.0-1.fc31
nodejs-12.18.4-1.fc31
12
https://bodhi.fedoraproject.org/updates/FEDORA-2020-d46fe34349 xen-4.12.3-5.fc31
6
https://bodhi.fedoraproject.org/updates/FEDORA-2020-fe299b3fa3
ghc-cmark-gfm-0.2.2-1.fc31 ghc-hakyll-4.12.5.2-2.fc31 gitit-0.12.3.2-4.fc31
pandoc-2.5-2.fc31 pandoc-citeproc-0.15.0.1-2.fc31 patat-0.8.2.3-2.fc31
6
https://bodhi.fedoraproject.org/updates/FEDORA-2020-bc0050aa3d
libuv-1.40.0-1.fc31
5
https://bodhi.fedoraproject.org/updates/FEDORA-2020-94763cb98b php-7.3.23-1.fc31
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-3a4b8fca5e crun-0.15-5.fc31
podman-2.1.1-3.fc31
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-d53469eceb
oniguruma-6.9.4-2.fc31
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-1e1b527524
prosody-0.11.7-1.fc31
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-e21bd401ad
golang-github-andybalholm-brotli-1.0.1-1.fc31
The following Fedora 31 Critical Path updates have yet to be approved:
Age URL
128
https://bodhi.fedoraproject.org/updates/FEDORA-2020-03e14f6120
dracut-050-61.git20200529.fc31
54
https://bodhi.fedoraproject.org/updates/FEDORA-2020-72bc7df001
libunwind-1.3.1-7.fc31
14
https://bodhi.fedoraproject.org/updates/FEDORA-2020-6d5fe4cba6 pcre2-10.35-7.fc31
12
https://bodhi.fedoraproject.org/updates/FEDORA-2020-ea3b26083f nspr-4.29.0-1.fc31
nss-3.57.0-1.fc31
12
https://bodhi.fedoraproject.org/updates/FEDORA-2020-d46fe34349 xen-4.12.3-5.fc31
9
https://bodhi.fedoraproject.org/updates/FEDORA-2020-a8544190d2 pungi-4.2.5-1.fc31
9
https://bodhi.fedoraproject.org/updates/FEDORA-2020-9c5a0da89b
python-productmd-1.28-1.fc31
6
https://bodhi.fedoraproject.org/updates/FEDORA-2020-87fbd4bb9b
glusterfs-7.8-1.fc31
5
https://bodhi.fedoraproject.org/updates/FEDORA-2020-aa7e76a7eb
vim-8.2.1770-1.fc31
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-4f7538f8bf
selinux-policy-3.14.4-55.fc31
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-aef226a2fb
python-rpm-macros-3-59.fc31
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-be79767376
kernel-5.8.13-100.fc31
0
https://bodhi.fedoraproject.org/updates/FEDORA-2020-a6ab788deb
firefox-81.0.1-4.fc31
The following builds have been pushed to Fedora 31 updates-testing
dist-git-1.16-3.fc31
distribution-gpg-keys-1.42-1.fc31
hwdata-0.340-1.fc31
mkosi-6-1.fc31
mozilla-noscript-11.0.46-1.fc31
stalld-1.0-4.fc31
system-config-printer-1.5.12-9.fc31
thunderbird-78.3.1-1.fc31
whois-5.5.7-1.fc31
Details about builds:
================================================================================
dist-git-1.16-3.fc31 (FEDORA-2020-909aecd6a5)
Package source version control system
--------------------------------------------------------------------------------
Update Information:
- proper introduction of upstream release 1.16 ---- - fixed exceptions for
fedora-messaging - fixed topic for fedora-messaging (to git.lookaside.new) -
only Suggests fedmsg - garbage collection (git gc) script and systemd timer
for its periodic run added - there was some problem with epel8 build - will be
probably delivered in a separate batch
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 5 2020 clime <clime(a)fedoraproject.com> - 1.16-3
- return back 1.16-1 state
* Mon Oct 5 2020 clime <clime(a)fedoraproject.com> - 1.16-2
- use simpler dist-git-selinux require due to build-system problem
* Mon Oct 5 2020 clime <clime(a)fedoraproject.com> - 1.16-1
- fixed exceptions for fedora-messaging
- fixed topic for fedora-messaging (to git.lookaside.new)
- spec tweak not to require distgit-selinux in containers
- only Suggests fedmsg
- garbage collection (git gc) script and systemd timer
for its periodic run added
--------------------------------------------------------------------------------
================================================================================
distribution-gpg-keys-1.42-1.fc31 (FEDORA-2020-300a1b5626)
GPG keys of various Linux distributions
--------------------------------------------------------------------------------
Update Information:
- update copr keys - add rpmfusion 33 and update latest links
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 5 2020 Miroslav Such�� <msuchy(a)redhat.com> 1.42-1
- update copr keys
- add rpmfusion 33 and update latest links
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1885076 - RPM Fusion for Fedora 33 - Nonfree - Steam missing gpg key
https://bugzilla.redhat.com/show_bug.cgi?id=1885076
--------------------------------------------------------------------------------
================================================================================
hwdata-0.340-1.fc31 (FEDORA-2020-9c331324e6)
Hardware identification and configuration data
--------------------------------------------------------------------------------
Update Information:
Update pci and vendor ids
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 5 2020 Vitezslav Crhonek <vcrhonek(a)redhat.com> - 0.340-1
- Update pci and vendor ids
--------------------------------------------------------------------------------
================================================================================
mkosi-6-1.fc31 (FEDORA-2020-0e46c127f0)
Create legacy-free OS images
--------------------------------------------------------------------------------
Update Information:
Latest upstream version. No need to log out or reboot.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 3 2020 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 6-1
- Update to latest version (#1884879)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1769321 - mkosi fails to build using directory or tar formats
https://bugzilla.redhat.com/show_bug.cgi?id=1769321
[ 2 ] Bug #1778857 - cannot build images with directory or tar outputs
https://bugzilla.redhat.com/show_bug.cgi?id=1778857
[ 3 ] Bug #1884879 - mkosi-6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1884879
--------------------------------------------------------------------------------
================================================================================
mozilla-noscript-11.0.46-1.fc31 (FEDORA-2020-6b66903a6f)
JavaScript white list extension for Mozilla Firefox
--------------------------------------------------------------------------------
Update Information:
### Changes since 11.0.42 * [L10n] Updated is, da, es * Fixed file:// and ftp://
specific content scripts not runnning in subdocuments * Fixed deferred scripts
in file:// pages may run twice (issue #155) * Fixed rendering bug with scrolled
file:// pages on soft reload (thanks Iouri for report) * Better emulation of SVG
events * Dispatch synthetic SVGLoad event in soft load when needed * Fixed
namespacing issues with script replacements * Fixed media placeholder not shown
when blocking Youtube movies * Work around for unpredictable content script
execution order * Ensure content of NoScript prompts is always visible * Fixed
soft reload messing with non UTF-8 encodings (thanks "Quest" for reporting) *
Updated TLDs * [XSS] Fixed escape detection bug causing strage false positives
(thanks Dave Howorth for report) * Fix for some race conditions causing
corruptions in non-HTML non-XML documents
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 5 2020 Dominik Mierzejewski <rpm(a)greysector.net> - 11.0.46-1
- update to 11.0.46 (#1877073)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1877073 - mozilla-noscript-11.0.46 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1877073
--------------------------------------------------------------------------------
================================================================================
stalld-1.0-4.fc31 (FEDORA-2020-d16411025e)
Daemon that finds starving tasks and gives them a temporary boost
--------------------------------------------------------------------------------
Update Information:
This update fixes a parser bug where stalld parses the output of
/proc/sched_debug, which allowed the parser to pick up stale information and
confuse the boosting algorithm. Tends to show up on the highest cpu of a system,
especially when that cpu core has a lot of thread activity. Unfortunately,
there is not a bugzilla associated with this bug. This is also the first
implementation of an alternate boosting mechanism, using SCHED_FIFO rather than
SCHED_DEADLINE. This should only be used on older kernels that do not implement
SCHED_DEADLINE (so not relevant on Fedora 31+) but may be of interest to folks
running on older kernels.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
system-config-printer-1.5.12-9.fc31 (FEDORA-2020-be76452099)
A printer administration tool
--------------------------------------------------------------------------------
Update Information:
1884866 - s-c-p: isAlive() is removed, use is_alive()
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 5 2020 Zdenek Dohnal <zdohnal(a)redhat.com> - 1.5.12-9
- 1884866 - s-c-p: isAlive() is removed, use is_alive()
* Wed Jul 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5.12-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Wed Jul 22 2020 Zdenek Dohnal <zdohnal(a)redhat.com> - 1.5.12-7
- python3.9 - xml module removed elem.getchildren() method, use list(elem)
* Tue Jul 14 2020 Tom Stellard <tstellar(a)redhat.com> - 1.5.12-6
- Use make macros
-
https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
* Tue May 26 2020 Miro Hron��ok <mhroncok(a)redhat.com> - 1.5.12-5
- Rebuilt for Python 3.9
* Fri Jan 31 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5.12-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1884866 - s-c-p: isAlive() is removed, use is_alive()
https://bugzilla.redhat.com/show_bug.cgi?id=1884866
--------------------------------------------------------------------------------
================================================================================
thunderbird-78.3.1-1.fc31 (FEDORA-2020-07c5770aa1)
Mozilla Thunderbird mail/newsgroup client
--------------------------------------------------------------------------------
Update Information:
Rebase to latest upstream version.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 30 2020 Jan Horak <jhorak(a)redhat.com> - 78.3.1-1
- Update to 78.3.1 build1
* Tue Sep 8 2020 Jan Horak <jhorak(a)redhat.com> - 68.12.0-1
- Update to 68.12.0 build1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1852658 - thunderbird-78.3.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1852658
--------------------------------------------------------------------------------
================================================================================
whois-5.5.7-1.fc31 (FEDORA-2020-13941dbc17)
Improved WHOIS client
--------------------------------------------------------------------------------
Update Information:
This release adds the servers for for amazon., ������������., ���������., ac.ru.,
com.ru.,
msk.ru., msk.su., net.ru., nov.ru., nov.su., org.ru., pp.ru., spb.ru., and
spb.su. domains. It also updates the records for ao., bh., cy., jo., lb., mm.,
np., th., ������������., ���������., ��������., and ����. domains. It also corrects
encoding for
whois.ati.tn server. It also implements CIDR queries to
whois.arin.net server.
In the end, it removes a poor localizatino into Norwegian language.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 5 2020 Petr Pisar <ppisar(a)redhat.com> - 5.5.7-1
- 5.5.7 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1884949 - whois-5.5.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1884949
--------------------------------------------------------------------------------