The following Fedora 32 Security updates need testing:
Age URL
68
https://bodhi.fedoraproject.org/updates/FEDORA-2020-062e2c016b
qutebrowser-1.11.1-1.fc32
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-ad05132742
mingw-curl-7.71.1-1.fc32
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-24b936a870
webkit2gtk3-2.28.4-3.fc32
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-aa51efe207
cutter-re-1.11.0-1.fc32 radare2-4.5.0-2.fc32
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-5a31ccfe66
postgresql-jdbc-42.2.12-2.fc32
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-87c0a0a52d
python37-3.7.8-2.fc32
The following Fedora 32 Critical Path updates have yet to be approved:
Age URL
28
https://bodhi.fedoraproject.org/updates/FEDORA-2020-ebbe0f7b25 cpio-2.13-6.fc32
10
https://bodhi.fedoraproject.org/updates/FEDORA-2020-bce68bdeee lorax-32.12-1.fc32
8
https://bodhi.fedoraproject.org/updates/FEDORA-2020-9b09c1fc44
s390utils-2.13.0-4.fc32
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-15e8acc3b2
libsepol-3.0-4.fc32
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-76117e2a78
iproute-5.7.0-1.fc32
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-cd6601cf55
perl-Encode-3.07-457.fc32
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-22864ce309
qt5-qtwayland-5.14.2-4.fc32
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-410a35590d
capstone-4.0.2-2.fc32
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-a564ab6950
libgusb-0.3.5-1.fc32
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-253abe3b34
kernel-5.7.11-200.fc32 kernel-headers-5.7.11-200.fc32 kernel-tools-5.7.11-200.fc32
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-da11ee20e7
pipewire-0.3.8-2.fc32
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-24b936a870
webkit2gtk3-2.28.4-3.fc32
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-c5c5a8d7ab ndctl-69-2.fc32
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-f60f4d196a
appstream-data-32-7.fc32
The following builds have been pushed to Fedora 32 updates-testing
389-ds-base-1.4.3.12-1.fc32
annobin-9.27-1.fc32
ark-20.04.3-3.fc32
buildah-1.15.1-1.fc32
electron-cash-4.1.0-2.fc32
flatpak-1.6.5-1.fc32
hashcat-6.1.1-1.fc32
libtpms-0.7.3-0.20200731git1d392d466a.fc32
mozilla-https-everywhere-2020.5.20-1.fc32
podman-2.0.4-1.fc32
psi-plus-1.4.1472-2.fc32
python-exif-2.2.1-1.fc32
python-gmpy2-2.1.0-0.16.b5.fc32
qpid-proton-0.31.0-3.fc32
rpki-client-6.7p1-1.fc32
rubygem-rubygems-mirror-1.3.0-2.fc32
seamonkey-2.53.3-3.fc32
wireshark-3.2.5-2.fc32
Details about builds:
================================================================================
389-ds-base-1.4.3.12-1.fc32 (FEDORA-2020-e2cb297f95)
389 Directory Server (base)
--------------------------------------------------------------------------------
Update Information:
Bump version to 1.4.3.12
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 31 2020 Mark Reynolds <mreynolds(a)redhat.com> - 1.4.3.12-1
- Bump version to 1.4.3.12
- Issue 51222 - It should not be allowed to delete Managed Entry manually
- Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than
the supported version
- Issue 51086 - Fix instance name length for interactive install
- Issue 51136 - JSON Error output has redundant messages
- Issue 51059 - If dbhome directory is set online backup fails
- Issue 51000 - Separate the BDB backend monitors
- Issue 49300 - entryUSN is duplicated after memberOf operation
- Issue 50984 - Fix disk_mon_check_diskspace types
--------------------------------------------------------------------------------
================================================================================
annobin-9.27-1.fc32 (FEDORA-2020-db7719f642)
Binary annotation plugin for GCC
--------------------------------------------------------------------------------
Update Information:
Fixes problem with AArch64 that causes build failures in other packages ----
Rebuilt against new gcc. Includes fix for AArch64 problems with determining
pointer size.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 31 2020 Nick Clifton <nickc(a)redhat.com> - 9.27-1
- Use more robust checks for AArch64 options.
- Detect CLANG compiled assembler that is missing IBT support.
* Wed Jul 29 2020 Nick Clifton <nickc(a)redhat.com> - 9.25-1
- Improved target pointer size discovery.
- Annocheck: Do not skip tests of the short-enums notes. (#1743635)
--------------------------------------------------------------------------------
================================================================================
ark-20.04.3-3.fc32 (FEDORA-2020-e2fe8f0165)
Archive manager
--------------------------------------------------------------------------------
Update Information:
Security update for CVE-2020-16116,
https://kde.org/info/security/advisory-20200730-1.txt
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 31 2020 Rex Dieter <rdieter(a)fedoraproject.org> - 20.04.3-3
- backport security fix for CVE-2020-16116
* Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 20.04.3-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Fri Jul 10 2020 Rex Dieter <rdieter(a)fedoraproject.org> - 20.04.3-1
- 20.04.3
* Fri Jun 12 2020 Rex Dieter <rdieter(a)fedoraproject.org> - 20.04.2-1
- 20.04.2
* Wed May 27 2020 Rex Dieter <rdieter(a)fedoraproject.org> - 20.04.1-1
- 20.04.1
* Sat Mar 7 2020 Rex Dieter <rdieter(a)fedoraproject.org> - 19.12.3-1
- 19.12.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1862464 - CVE-2020-16116 ark: maliciously crafted archive can install files
anywhere in the user's home directory
https://bugzilla.redhat.com/show_bug.cgi?id=1862464
--------------------------------------------------------------------------------
================================================================================
buildah-1.15.1-1.fc32 (FEDORA-2020-799dbff97d)
A command line tool used for creating OCI Images
--------------------------------------------------------------------------------
Update Information:
Autobuilt v1.15.1
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 31 2020 RH Container Bot <rhcontainerbot(a)fedoraproject.org> - 1.15.1-1
- autobuilt v1.15.1
* Mon Jun 29 2020 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 1.15.0-2
- adjust dependencies for centos7
--------------------------------------------------------------------------------
================================================================================
electron-cash-4.1.0-2.fc32 (FEDORA-2020-c1fdd9f583)
A lightweight Bitcoin Cash client
--------------------------------------------------------------------------------
Update Information:
Added dependency on python-certifi
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 31 2020 Jonny Heggheim <hegjon(a)gmail.com> - 4.1.0-2
- Added dependency on python-certifi
* Fri Jul 31 2020 Jonny Heggheim <hegjon(a)gmail.com> - 4.1.0-1
- Updated to version 4.1.0
* Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.0.15-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
flatpak-1.6.5-1.fc32 (FEDORA-2020-1e9204eae0)
Application deployment framework for desktop apps
--------------------------------------------------------------------------------
Update Information:
This is a minor fix to the authentication system that avoids unnecessary
authentication when doing an update when the app hasn't changed. This was
problematic for the OCI backend as it now authenticates by default.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 3 2020 Kalev Lember <klember(a)redhat.com> - 1.6.5-1
- Update to 1.6.5
--------------------------------------------------------------------------------
================================================================================
hashcat-6.1.1-1.fc32 (FEDORA-2020-bc4556befc)
Advanced password recovery utility
--------------------------------------------------------------------------------
Update Information:
Updated to version 6.1.1.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 31 2020 Vitaly Zaitsev <vitaly(a)easycoding.org> - 6.1.1-1
- Updated to version 6.1.1.
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.0.0-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1861342 - hashcat-6.1.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1861342
--------------------------------------------------------------------------------
================================================================================
libtpms-0.7.3-0.20200731git1d392d466a.fc32 (FEDORA-2020-b1110e4624)
Library providing Trusted Platform Module (TPM) functionality
--------------------------------------------------------------------------------
Update Information:
Follow stable-0.7.0 branch to v0.7.3
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 31 2020 Stefan Berger <stefanb(a)linux.ibm.com> -
0.7.3-0.20200731git1d392d466a
- Follow stable-0.7.0 branch to v0.7.3
--------------------------------------------------------------------------------
================================================================================
mozilla-https-everywhere-2020.5.20-1.fc32 (FEDORA-2020-a44e6574eb)
HTTPS enforcement extension for Mozilla Firefox
--------------------------------------------------------------------------------
Update Information:
Sorry for the late update everyone. Laptop decided to die for a couple months.
- EASE HTTP Once CSS fix - Allow users to whitelist hosts from the option page -
EASE mode fixes for locale issue - Fetch Test Prep, TLS 1.2 update - Fetch Test
Prep, Updated check rules script - Fix options page appearance on Firefox when
dark mode is on - Dark mode adjustments - Reverting Onboarding page for the time
being - Patch for whitelisting rules and EASE mode issue - Double rule load
patch in update channels - Fix minor JS and UX issues
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 31 2020 Russell Golden <niveusluna(a)fedoraproject.org> - 2020.5.20-1
- EASE HTTP Once CSS fix
- Allow users to whitelist hosts from the option page
- EASE mode fixes for locale issue
- Fetch Test Prep, TLS 1.2 update
- Fetch Test Prep, Updated check rules script
- Fix options page appearance on Firefox when dark mode is on
- Dark mode adjustments
- Reverting Onboarding page for the time being
- Patch for whitelisting rules and EASE mode issue
- Double rule load patch in update channels
- Fix minor JS and UX issues
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> -
2019.11.7-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1809025 - mozilla-https-everywhere EPEL8
https://bugzilla.redhat.com/show_bug.cgi?id=1809025
[ 2 ] Bug #1814134 - mozilla-https-everywhere-2020.5.20 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1814134
--------------------------------------------------------------------------------
================================================================================
podman-2.0.4-1.fc32 (FEDORA-2020-79ffc7d8f1)
Manage Pods, Containers and Container Images
--------------------------------------------------------------------------------
Update Information:
Autobuilt v2.0.4
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 31 2020 RH Container Bot <rhcontainerbot(a)fedoraproject.org> - 2:2.0.4-1
- autobuilt v2.0.4
--------------------------------------------------------------------------------
================================================================================
psi-plus-1.4.1472-2.fc32 (FEDORA-2020-c765787a4c)
Jabber client based on Qt
--------------------------------------------------------------------------------
Update Information:
- Updated to version 1.4.1472. - Switched from QtWebKit to QtWebEngine. -
Enabled voice and video plugin.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 31 2020 Vitaly Zaitsev <vitaly(a)easycoding.org> - 1:1.4.1472-2
- Added virtual provides for the bundled libraries.
* Fri Jul 31 2020 Vitaly Zaitsev <vitaly(a)easycoding.org> - 1:1.4.1472-1
- Updated to version 1.4.1472.
- Performed major SPEC cleanup and unification.
- Switched from QtWebKit to QtWebEngine.
- Enabled voice and video plugin.
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> -
1:1.4.654-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1709013 - RFE Switch from webkit to webengine
https://bugzilla.redhat.com/show_bug.cgi?id=1709013
[ 2 ] Bug #1862559 - psi-plus-1.4.1472 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1862559
--------------------------------------------------------------------------------
================================================================================
python-exif-2.2.1-1.fc32 (FEDORA-2020-5e858581f1)
Python module to extract EXIF information
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release python-exif 2.2.1
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 31 2020 Terje Rosten <terje.rosten(a)ntnu.no> - 2.2.1-1
- 2.2.1
* Wed Jul 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.2.0-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Tue May 26 2020 Miro Hron��ok <mhroncok(a)redhat.com> - 2.2.0-6
- Rebuilt for Python 3.9
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1862336 - python-exif-2.2.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1862336
--------------------------------------------------------------------------------
================================================================================
python-gmpy2-2.1.0-0.16.b5.fc32 (FEDORA-2020-c812ed5285)
Python interface to GMP, MPFR, and MPC
--------------------------------------------------------------------------------
Update Information:
See
https://github.com/aleaxit/gmpy/commits/master for the list of commits in
this version. Several bugs were fixed, notably: - Force factorial to return
'inf' for n>= 44787928 - Fix initialization bug in f2q() - Correctly read
rounding mode strings when characters are multibyte
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 31 2020 Jerry James <loganjerry(a)gmail.com> - 2.1.0-0.16.b5
- Version 2.1.0 beta5
- Drop all patches
--------------------------------------------------------------------------------
================================================================================
qpid-proton-0.31.0-3.fc32 (FEDORA-2020-a7f394edbb)
A high performance, lightweight messaging library
--------------------------------------------------------------------------------
Update Information:
Added rubygem-qpid_proton package.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 28 2020 Irina Boverman <iboverma(a)redhat.com> - 0.31.0-3
- Added rubygem-qpid_proton subpackage
--------------------------------------------------------------------------------
================================================================================
rpki-client-6.7p1-1.fc32 (FEDORA-2020-25d8011cb4)
OpenBSD RPKI validator
--------------------------------------------------------------------------------
Update Information:
# rpki-client 6.7p1 * Security fix: Incorrect use of `EVP_PKEY_cmp` allowed
an authentication bypass
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 29 2020 Robert Scheck <robert(a)fedoraproject.org> 6.7p1-1
- Upgrade to 6.7p1 (#1861137)
* Wed Jul 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.7p0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1861137 - rpki-client-6.7p1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1861137
--------------------------------------------------------------------------------
================================================================================
rubygem-rubygems-mirror-1.3.0-2.fc32 (FEDORA-2020-0612536c76)
This is an update to the old `gem mirror` command
--------------------------------------------------------------------------------
Update Information:
Fix FTBFS.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 30 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1800034 - rubygem-rubygems-mirror: FTBFS in Fedora rawhide/f32
https://bugzilla.redhat.com/show_bug.cgi?id=1800034
--------------------------------------------------------------------------------
================================================================================
seamonkey-2.53.3-3.fc32 (FEDORA-2020-d7e33f8eb6)
Web browser, e-mail, news, IRC client, HTML editor
--------------------------------------------------------------------------------
Update Information:
Add Default Zoom support. Site-specific settings always remain preserved (until
reset by Ctrl+0), just the default can be altered now from 100% to more
comfortable value. Add WebP image format support. (Can be toggled by
image.webp.enabled preference in about:config, default enabled). Some fixes and
improvements.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 30 2020 Dmitry Butskoy <Dmitry(a)Butskoy.name> 2.53.3-3
- fix requires filter
* Wed Jul 29 2020 Dmitry Butskoy <Dmitry(a)Butskoy.name> 2.53.3-2
- add "Default zoom" support (mozbz#1655362)
- add "Use system locale" switch in preferences (mozbz#1655842)
- backport WebP image format support (mozbz#1653869)
- update elfhack code up to esr68
- add fix for rust >= 1.45 (mozbz#1654465)
- properly filter provides and requires from the application dir
- spec file cleanups and fixes
--------------------------------------------------------------------------------
================================================================================
wireshark-3.2.5-2.fc32 (FEDORA-2020-405429b6c7)
Network traffic analyzer
--------------------------------------------------------------------------------
Update Information:
Added a couple of %dir statements to the specfile.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 30 2020 Michal Ruprich <michalruprich(a)gmail.com> - 1:3.2.5-2
- Adding ownership for dirs created by wireshark (rhbz#1860650)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1860650 - Some wireshark directories not ownoed by the package.
https://bugzilla.redhat.com/show_bug.cgi?id=1860650
--------------------------------------------------------------------------------