The following Fedora 31 Security updates need testing: Age URL 60 https://bodhi.fedoraproject.org/updates/FEDORA-2020-c5ec22e14f libuv-1.39.0-1.fc31 nodejs-12.18.4-1.fc31 17 https://bodhi.fedoraproject.org/updates/FEDORA-2020-bf41fcdeba libntlm-1.6-1.fc31 12 https://bodhi.fedoraproject.org/updates/FEDORA-2020-6dd36a716c xen-4.12.3-8.fc31 11 https://bodhi.fedoraproject.org/updates/FEDORA-2020-0df38b2843 krb5-1.17-47.fc31 6 https://bodhi.fedoraproject.org/updates/FEDORA-2020-45d452ec44 firefox-82.0.3-1.fc31 6 https://bodhi.fedoraproject.org/updates/FEDORA-2020-d6675a61f1 raptor-1.4.21-33.fc31 5 https://bodhi.fedoraproject.org/updates/FEDORA-2020-14fda1bf85 microcode_ctl-2.1-39.2.fc31 4 https://bodhi.fedoraproject.org/updates/FEDORA-2020-ce591c8f46 rpki-client-6.8p1-1.fc31 3 https://bodhi.fedoraproject.org/updates/FEDORA-2020-27b168926a pngcheck-2.3.0-4.fc31 2 https://bodhi.fedoraproject.org/updates/FEDORA-2020-fd5918d946 seamonkey-2.53.5-2.fc31 0 https://bodhi.fedoraproject.org/updates/FEDORA-2020-dca3a4954f chromium-86.0.4240.198-1.fc31
The following Fedora 31 Critical Path updates have yet to be approved: Age URL 98 https://bodhi.fedoraproject.org/updates/FEDORA-2020-72bc7df001 libunwind-1.3.1-7.fc31 13 https://bodhi.fedoraproject.org/updates/FEDORA-2020-2770d15afa hwdata-0.341-1.fc31 12 https://bodhi.fedoraproject.org/updates/FEDORA-2020-6dd36a716c xen-4.12.3-8.fc31 11 https://bodhi.fedoraproject.org/updates/FEDORA-2020-0df38b2843 krb5-1.17-47.fc31 11 https://bodhi.fedoraproject.org/updates/FEDORA-2020-7e091212a9 perl-PathTools-3.78-441.fc31 9 https://bodhi.fedoraproject.org/updates/FEDORA-2020-154a2e4252 ceph-14.2.13-2.fc31 6 https://bodhi.fedoraproject.org/updates/FEDORA-2020-45d452ec44 firefox-82.0.3-1.fc31 5 https://bodhi.fedoraproject.org/updates/FEDORA-2020-9e2a664457 nfs-utils-2.5.2-1.rc1.fc31 5 https://bodhi.fedoraproject.org/updates/FEDORA-2020-bacfe10a1b xfconf-4.14.4-1.fc31 4 https://bodhi.fedoraproject.org/updates/FEDORA-2020-09ea3fa4fc perl-5.30.3-457.fc31
The following builds have been pushed to Fedora 31 updates-testing
R-httpuv-1.5.4-3.fc31 R-ragg-0.3.1-1.fc31 R-sysfonts-0.8.2-1.fc31 dino-0.1.1-1.fc31 erlang-22.3.4.12-1.fc31 fapolicyd-1.0.1-1.fc31 munin-2.0.65-1.fc31 mutter-3.34.6-3.fc31 python-aiomodbus-0.3.2-1.fc31 slurm-19.05.8-1.fc31 swtpm-0.5.1-2.20201117git96f5a04.fc31
Details about builds:
================================================================================ R-httpuv-1.5.4-3.fc31 (FEDORA-2020-fa2c5a1bc8) HTTP and WebSocket Server Library -------------------------------------------------------------------------------- Update Information:
Update to latest version. Fix websocket handshake on big-endian systems. -------------------------------------------------------------------------------- ChangeLog:
* Mon Sep 7 2020 Elliott Sales de Andrade quantum.analyst@gmail.com - 1.5.4-3 - Fix websocket handshake on big-endian systems * Mon Jul 27 2020 Fedora Release Engineering releng@fedoraproject.org - 1.5.4-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Sun Jun 7 2020 Tom Callaway spot@fedoraproject.org - 1.5.4-1 - update to 1.5.4 - rebuild for R 4 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1844676 - R-httpuv-1.5.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1844676 --------------------------------------------------------------------------------
================================================================================ R-ragg-0.3.1-1.fc31 (FEDORA-2020-6fa40ef357) Graphic Devices Based on AGG -------------------------------------------------------------------------------- Update Information:
Initial package of ragg for R -------------------------------------------------------------------------------- ChangeLog:
-------------------------------------------------------------------------------- References:
[ 1 ] Bug #1867423 - Review Request: R-ragg - Graphic Devices Based on AGG https://bugzilla.redhat.com/show_bug.cgi?id=1867423 --------------------------------------------------------------------------------
================================================================================ R-sysfonts-0.8.2-1.fc31 (FEDORA-2020-f1902eb557) Loading Fonts into R -------------------------------------------------------------------------------- Update Information:
Update to latest version -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 17 2020 Elliott Sales de Andrade quantum.analyst@gmail.com - 0.8.2-1 - Update to latest version (#1898348) * Sat Aug 1 2020 Fedora Release Engineering releng@fedoraproject.org - 0.8.1-4 - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Mon Jul 27 2020 Fedora Release Engineering releng@fedoraproject.org - 0.8.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Fri Jun 5 2020 Tom Callaway spot@fedoraproject.org - 0.8.1-2 - rebuild for R 4 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1898348 - R-sysfonts-0.8.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1898348 --------------------------------------------------------------------------------
================================================================================ dino-0.1.1-1.fc31 (FEDORA-2020-f14c58cd33) Modern XMPP ("Jabber") Chat Client using GTK+/Vala -------------------------------------------------------------------------------- Update Information:
Update to [0.1.1](https://github.com/dino/dino/releases/tag/v0.1.1). -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 16 2020 Randy Barlow bowlofeggs@fedoraproject.org - 0.1.1-1 - Update to 0.1.1 (#1897438). - https://github.com/dino/dino/releases/tag/v0.1.1 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1897438 - dino-0.2.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1897438 --------------------------------------------------------------------------------
================================================================================ erlang-22.3.4.12-1.fc31 (FEDORA-2020-90fe8fd3c6) General-purpose programming language and runtime environment -------------------------------------------------------------------------------- Update Information:
Erlang ver. 22.3.4.12 -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 17 2020 Peter Lemenkov lemenkov@gmail.com - 22.3.4.12-1 - Ver. 22.3.4.12 --------------------------------------------------------------------------------
================================================================================ fapolicyd-1.0.1-1.fc31 (FEDORA-2020-6323ce5fcf) Application Whitelisting Daemon -------------------------------------------------------------------------------- Update Information:
Rebase to 1.0.1 -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 16 2020 Radovan Sroka rsroka@redhat.com - 1.0.1-1 - rebase to 1.0.1 - introduced uthash dependency - SELinux prevents the fapolicyd process from writing to /run/dbus/system_bus_socket Resolves: rhbz#1874491 - SELinux prevents the fapolicyd process from writing to /var/lib/rpm directory Resolves: rhbz#1876538 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1874491 - SELinux prevents the fapolicyd process from writing to /run/dbus/system_bus_socket https://bugzilla.redhat.com/show_bug.cgi?id=1874491 [ 2 ] Bug #1876538 - SELinux prevents the fapolicyd process from writing to /var/lib/rpm directory https://bugzilla.redhat.com/show_bug.cgi?id=1876538 --------------------------------------------------------------------------------
================================================================================ munin-2.0.65-1.fc31 (FEDORA-2020-bab99313bf) Network-wide resource monitoring tool -------------------------------------------------------------------------------- Update Information:
Upstream update to 2.0.65. Also fixes log file owners and plugin-state directory owner. -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 17 2020 Kim B. Heino b@bbbs.net - 2.0.65-1 - Upgrade to 2.0.65 - Improve plugin-state directory owners - Don't require tmpwatch - Change log file owner to root:adm or munin:adm * Tue Jul 28 2020 Fedora Release Engineering releng@fedoraproject.org - 2.0.63-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ mutter-3.34.6-3.fc31 (FEDORA-2020-89a69b8c42) Window and compositing manager based on Clutter -------------------------------------------------------------------------------- Update Information:
* Fix an X11 threading issue. * Fix cogl driver selection -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 17 2020 Jonas ��dahl jadahl@redhat.com - 3.34.6-3 - Backport X11 threading and cogl driver selection fix Related: #1762151 --------------------------------------------------------------------------------
================================================================================ python-aiomodbus-0.3.2-1.fc31 (FEDORA-2020-61fb6f0f7d) Lightweight Python Modbus library -------------------------------------------------------------------------------- Update Information:
Initial package for Fedora -------------------------------------------------------------------------------- ChangeLog:
--------------------------------------------------------------------------------
================================================================================ slurm-19.05.8-1.fc31 (FEDORA-2020-54f75a9d3c) Simple Linux Utility for Resource Management -------------------------------------------------------------------------------- Update Information:
Update to 19.05.08. Closes security issues CVE-2020-27745 and CVE-2020-27746 -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 17 2020 Philip Kovacs pkfed@fedoraproject.org - 19.05.8-1 - Release of 19.05.8 - Closes security issues CVE-2020-27745 and CVE-2020-27746 --------------------------------------------------------------------------------
================================================================================ swtpm-0.5.1-2.20201117git96f5a04.fc31 (FEDORA-2020-391d26e246) TPM Emulator -------------------------------------------------------------------------------- Update Information:
Another build of v0.5.1 after more fixes -------------------------------------------------------------------------------- ChangeLog:
* Fri Nov 13 2020 Stefan Berger stefanb@linux.ibm.com - 0.5.1-2.20201117git96f5a04c - Another build of v0.5.1 after more fixes * Fri Nov 13 2020 Stefan Berger stefanb@linux.ibm.com - 0.5.1-1.20201113git390f5bd4 - Update to v0.5.1 addressing potential symlink attack issue (CVE-2020-28407) --------------------------------------------------------------------------------