The following Fedora 32 Security updates need testing:
Age URL
93
https://bodhi.fedoraproject.org/updates/FEDORA-2021-4c8458e373
containernetworking-plugins-0.9.1-1.fc32
89
https://bodhi.fedoraproject.org/updates/FEDORA-2021-16d1596c42
buildah-1.19.4-1.fc32
9
https://bodhi.fedoraproject.org/updates/FEDORA-2021-be95e017e7
cups-2.3.3op2-5.fc32
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-158a237d4a bind-9.11.31-1.fc32
bind-dyndb-ldap-11.3-6.fc32 dnsperf-2.3.4-6.fc32
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-ff893e12c5
chromium-90.0.4430.93-1.fc32
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-5b6c69a73a
community-mysql-8.0.24-1.fc32
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-3f9e87aaa4 php-7.4.19-1.fc32
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-fcb25df974
djvulibre-3.5.27-25.fc32
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-38e1f87ac3
thunderbird-78.10.1-1.fc32
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-ab09c9a7a1
python-impacket-0.9.22-3.fc32
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-9c0276e935
kernel-5.11.19-100.fc32 kernel-headers-5.11.19-100.fc32 kernel-tools-5.11.19-100.fc32
The following Fedora 32 Critical Path updates have yet to be approved:
Age URL
151
https://bodhi.fedoraproject.org/updates/FEDORA-2020-345d2fd2aa
iproute-5.9.0-1.fc32
11
https://bodhi.fedoraproject.org/updates/FEDORA-2021-6efbebaf08
gnome-software-3.36.1-4.fc32
10
https://bodhi.fedoraproject.org/updates/FEDORA-2021-2efb16d06b pungi-4.2.9-1.fc32
7
https://bodhi.fedoraproject.org/updates/FEDORA-2021-bdf471bdb7
ethtool-5.12-1.fc32
7
https://bodhi.fedoraproject.org/updates/FEDORA-2021-2650a24eec
libxcrypt-4.4.20-2.fc32
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-38e1f87ac3
thunderbird-78.10.1-1.fc32
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-9e79d2e147
hwdata-0.347-1.fc32
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-19cdc5683f
libmodulemd-2.12.1-1.fc32
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-7fd2a21f94
python3-3.8.10-1.fc32 python3-docs-3.8.10-1.fc32
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-f1edd94582
firefox-88.0-8.fc32
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-276b0013e8
gnome-terminal-3.36.3-1.fc32
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-151dc7fd1b
vte291-0.60.4-1.fc32
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-a2ee549bcb
xorg-x11-drv-nouveau-1.0.17-1.fc32
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-9c0276e935
kernel-5.11.19-100.fc32 kernel-headers-5.11.19-100.fc32 kernel-tools-5.11.19-100.fc32
The following builds have been pushed to Fedora 32 updates-testing
aime-8.20210510-1.fc32
bottles-3.1.8-1.fc32
btrfs-progs-5.11.1-1.fc32
cacti-1.2.17-1.fc32
cacti-spine-1.2.17-1.fc32
cozy-0.9.5-1.fc32
exif-0.6.22-1.fc32
gnuchess-6.2.8-1.fc32
icewm-2.3.4-2.fc32
moodle-3.8.9-1.fc32
php-pear-1.10.12-7.fc32
protontricks-1.5.1-1.fc32
python-overpy-0.6-1.fc32
syncthing-1.16.1-1.fc32
Details about builds:
================================================================================
aime-8.20210510-1.fc32 (FEDORA-2021-93c96df5c9)
An application embeddable programming language interpreter
--------------------------------------------------------------------------------
Update Information:
- Update to 8.20210510 fixes rhbz#1938144
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 10 2021 Filipe Rosset <rosset.filipe(a)gmail.com> - 8.20210510-1
- Update to 8.20210510 fixes rhbz#1938144
* Mon Jan 25 2021 Fedora Release Engineering <releng(a)fedoraproject.org> -
8.20210121-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
bottles-3.1.8-1.fc32 (FEDORA-2021-47b8dd79a1)
Easily manage Wine prefix in a new way
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 5 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 3.1.8-1
- build(update): 3.1.8
* Sun May 2 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 3.1.7-1
- build(update): 3.1.7
* Mon Apr 26 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 3.1.6-1
- build(update): 3.1.6
--------------------------------------------------------------------------------
================================================================================
btrfs-progs-5.11.1-1.fc32 (FEDORA-2021-f438908573)
Userspace programs for btrfs
--------------------------------------------------------------------------------
Update Information:
* properly format checksums when a mismatch is reported * fix device path
canonicalization for device mapper devices * check: fix false alert on tree
block crossing 64K page boundary * convert: * refuse to convert filesystem
with 'needs_recovery' * update documentation to require fsck before
conversion * fi resize: improved summary * receive: remove workaround for
setting capabilities, all stable kernels have been patched * receive: fix
duplicate mount path detection * rescue: new subcommand create-control-device
* device stats: minor fix for plain text format output * build: detect if
e2fsprogs support 64bit timestamps * build: drop libmount, required
functionality has been reimplemented * mkfs: warn when raid56 is used *
balance convert: warn when raid56 is used * other * build: fix checks and
autoconf defines * new and updated tests * documentation updates *
seeding device * raid56 status
--------------------------------------------------------------------------------
ChangeLog:
* Sun Mar 28 2021 Igor Raits <ignatenkobrain(a)fedoraproject.org> - 5.11.1-1
- Update to 5.11.1
* Fri Mar 5 2021 Igor Raits <ignatenkobrain(a)fedoraproject.org> - 5.11-1
- Update to 5.11
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.10-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
cacti-1.2.17-1.fc32 (FEDORA-2021-598b6d2924)
An rrd based graphing tool
--------------------------------------------------------------------------------
Update Information:
- Update to 1.2.17 Release notes:
https://www.cacti.net/release_notes.php?version=1.2.17
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 10 2021 Morten Stevens <mstevens(a)fedoraproject.org> - 1.2.17-1
- Update to 1.2.17
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.16-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1915043 - CVE-2020-35701 cacti: SQL injection vulnerability in data_debug.php
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1915043
--------------------------------------------------------------------------------
================================================================================
cacti-spine-1.2.17-1.fc32 (FEDORA-2021-598b6d2924)
Threaded poller for Cacti written in C
--------------------------------------------------------------------------------
Update Information:
- Update to 1.2.17 Release notes:
https://www.cacti.net/release_notes.php?version=1.2.17
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 10 2021 Morten Stevens <mstevens(a)fedoraproject.org> - 1.2.17-1
- Update to 1.2.17
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.16-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1915043 - CVE-2020-35701 cacti: SQL injection vulnerability in data_debug.php
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1915043
--------------------------------------------------------------------------------
================================================================================
cozy-0.9.5-1.fc32 (FEDORA-2021-619cbb0f9f)
Modern audiobook player
--------------------------------------------------------------------------------
Update Information:
Update to v0.9.5
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 10 2021 Artur Frenszek-Iwicki <fedora(a)svgames.pl> - 0.9.5-1
- Update to latest release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1958690 - cozy-0.9.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1958690
--------------------------------------------------------------------------------
================================================================================
exif-0.6.22-1.fc32 (FEDORA-2021-477809f45f)
Utility to show EXIF information hidden in JPEG files
--------------------------------------------------------------------------------
Update Information:
0.6.22, patch for CVE-2021-27815.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 10 2021 Gwyn Ciesla <gwync(a)protonmail.com> - 0.6.22-1
- 0.6.22, patch for CVE-2021-27815.
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.21-20
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.21-19
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Mon Jul 13 2020 Tom Stellard <tstellar(a)redhat.com> - 0.6.21-18
- Use make macros
-
https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1958808 - CVE-2021-27815 exif: libexif: NULL Pointer Deference may lead to
DoS by uploading a malicious JPEG file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1958808
--------------------------------------------------------------------------------
================================================================================
gnuchess-6.2.8-1.fc32 (FEDORA-2021-a4d8a35f70)
The GNU chess program
--------------------------------------------------------------------------------
Update Information:
6.2.8
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 10 2021 Gwyn Ciesla <gwync(a)protonmail.com> - 6.2.8-1
- 6.2.8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1958670 - gnuchess-6.2.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1958670
--------------------------------------------------------------------------------
================================================================================
icewm-2.3.4-2.fc32 (FEDORA-2021-170783dbce)
Window manager designed for speed, usability, and consistency
--------------------------------------------------------------------------------
Update Information:
Update to 2.3.4 ---- Update to 2.3.4
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 10 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 2.3.4-2
- build: Obsoletes icewm-fonts-settings package
* Fri May 7 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 2.3.4-1
- build(update): 2.3.4
* Fri May 7 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 2.3.3-2
- build: Drop all custom stuff except default Fedora theme
- build: Drop 'fonts-settings' sub-package
--------------------------------------------------------------------------------
================================================================================
moodle-3.8.9-1.fc32 (FEDORA-2021-6f5ce4a19c)
A Course Management System
--------------------------------------------------------------------------------
Update Information:
Latest releases.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 10 2021 Gwyn Ciesla <gwync(a)protonmail.com> - 3.8.9-1
- 3.8.9
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1958717 - moodle-3.10.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1958717
--------------------------------------------------------------------------------
================================================================================
php-pear-1.10.12-7.fc32 (FEDORA-2021-640f4a218a)
PHP Extension and Application Repository framework
--------------------------------------------------------------------------------
Update Information:
**Archive_Tar 1.4.13** * Fix Bug pear#27010: Relative symlinks failing (out-of
path file extraction) [mrook]
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 10 2021 Remi Collet <remi(a)remirepo.net> - 1:1.10.12-7
- update Archive_Tar to 1.4.13
--------------------------------------------------------------------------------
================================================================================
protontricks-1.5.1-1.fc32 (FEDORA-2021-02f54e1996)
Simple wrapper that does winetricks things for Proton enabled games
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 10 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 1.5.1-1
- build(update): 1.5.1
--------------------------------------------------------------------------------
================================================================================
python-overpy-0.6-1.fc32 (FEDORA-2021-d0c17c4fa1)
Python Wrapper to access the Overpass API
--------------------------------------------------------------------------------
Update Information:
New package
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1958564 - Review Request: python-overpy - Python Wrapper to access the
Overpass API
https://bugzilla.redhat.com/show_bug.cgi?id=1958564
--------------------------------------------------------------------------------
================================================================================
syncthing-1.16.1-1.fc32 (FEDORA-2021-43ea1acc10)
Continuous File Synchronization
--------------------------------------------------------------------------------
Update Information:
Update to version 1.16.1. Release notes:
https://github.com/syncthing/syncthing/releases/tag/v1.16.0
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 10 2021 Fabio Valentini <decathorpe(a)gmail.com> - 1.16.1-1
- Update to version 1.16.1.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1956466 - syncthing-1.16.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1956466
--------------------------------------------------------------------------------